{"report_id":"e762bcda-c266-49e5-a1ad-6813f81ccbaf","version":6,"status":"done","tags":[],"date":"2026-05-24T00:27:41Z","url":{"schema":"http","addr":"login-xingkongzh.com.cn","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"title":"星空·体育（官网）APP下载 - STARSKY SPORTS","dom":{"size":8609,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (386)","md5":"a2d4372a6b0cd40b9be526de2a52bc32","sha1":"f8ecb34e0ede9a6c7d1dfaccd557e42b8e7f2e02","sha256":"7bb73b970593700aa59c0b3669d58b9bba175e257d3caace4e7b24a2c47810aa","sha512":"1abc897f429b05ec8303d54069e47243018982ce41d8e6ac2a25f79b9616cf7cd5bf7dc2796d8cc0753affc9966be6a0e7623eb97eb40ae63e22735963c1a81c","ssdeep":"96:xKMosAMoe0781Pby/P6GjGrCrgAC+BP0VezgXcsOcqTc07GfFcajJlBc/AYDcTc9:wPte07qTp5JqoSlKq07gegU9630u+2l","tlshash":"e10284481df7d0e30613506a2abfbe1deef1c4979119ad187d7c0e89af4d7088b17664","dom_hash":"domhash14aadd44e3e6def1df6fb84dc13c3a1f","first_seen":"2026-05-24T00:27:44.230521Z","last_seen":"2026-05-24T00:27:44.230521Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"login-xingkongzh.com.cn","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-28T00:27:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jzxwrng.cn","ip":{"addr":"38.239.53.105","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"domain_registered":"2023-09-21","domain_rank":0,"first_seen":"2025-08-10T14:41:16.056579Z","last_seen":"2026-05-23T06:36:03.391016Z","alert_count":0,"request_count":1,"received_data":1029,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hud360.cn","ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-05-24T00:26:28.451035Z","last_seen":"2026-05-24T00:26:28.451035Z","alert_count":0,"request_count":30,"received_data":124376,"sent_data":13890,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pxedout.cn","ip":{"addr":"45.194.143.204","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"domain_registered":"2023-11-12","domain_rank":0,"first_seen":"2026-05-24T00:26:28.449557Z","last_seen":"2026-05-24T00:26:28.449557Z","alert_count":0,"request_count":1,"received_data":1502,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-05-18T06:04:11.294427Z","alert_count":0,"request_count":2,"received_data":30879,"sent_data":1225,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"login-xingkongzh.com.cn","ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2026-05-21","domain_rank":0,"first_seen":"2026-05-24T00:26:28.445897Z","last_seen":"2026-05-24T00:26:28.445897Z","alert_count":63,"request_count":21,"received_data":2115702,"sent_data":9716,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/js/home.js","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","size":5802,"data":"","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-08-17T19:42:29.407723Z","times_seen":1445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/js/swiper-bundle.min.js","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","size":140562,"data":"","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-08-17T19:42:29.406831Z","times_seen":5781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/ldy/index.html","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc3ada0228a686f9bd0fa453b3c93648","sha1":"5fc68e892f7d1448bf4b535ef041ac5bb7c0b810","sha256":"55f82ed334cb5663f79636be663a345b8c4c778ad0bcddc3b5243bd8ba938641","sha512":"0fa8aa2eda541b6e0533157d18b98ff9ac2622a663c828788f5c248c48917d1113466e7005f78c567a67eda3c5e42e7762836b4ac8386be97f3c35afc247634d","ssdeep":"","tlshash":"f021f95d83d223d0151a70661e9fa1452b7780db1868b6027e3d6281af88659d3b6fb3","size":1363,"data":"","first_seen":"2026-05-24T00:26:35.410966Z","last_seen":"2026-05-24T00:27:44.476811Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/tqczfznitt_heilang.js","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"84c75ea17a77f9b72d4141119e599312","sha1":"2d9dd4fd69b72f74912e625a13adda7a35b0e62c","sha256":"b6a20b5784689dc77e1173e5758760d546dadaf78e2ba83a364e53bc76595ccd","sha512":"dbc89a27dabc633f22c98887f64b30825ae1e28a3dd18b536980741cf6133c2ddaeed9d06ddbbd8c2faaad6be15704da831acfdd62e65bea935ed17a6ca8589c","ssdeep":"","tlshash":"0cd02e0b6c2b6cb02b6a087a22bad84cb0e2669e5039d000a4dea8104fa0dd5182e7c9","size":259,"data":"","first_seen":"2026-05-24T00:26:35.355886Z","last_seen":"2026-05-24T00:27:44.326207Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jzxwrng.cn/link.js","fqdn":"cdn.jzxwrng.cn","domain":"jzxwrng.cn","tld":"cn"},"ip":{"addr":"38.239.53.105","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d07e6cbf80f2b5a679c44c0506a44d7","sha1":"3cefcdc25d8e3f694c4fa41122def181e38b6cde","sha256":"69dcd215d5973d3c1f3716b158c2d67a753412f0aab8834c85e15cf32e1ae6d6","sha512":"9876494a5406e40135bd942b77c52912b7de29d1a640892c194cc95f3886c3a397c9cde9a59341fe5e7f5636934dc97138fca2e9777acf8588d7714084ef8460","ssdeep":"","tlshash":"b60171fb44e688630b51529e107fbe1cd1db205ecca859b8fe615b740eea0146c2a1b9","size":710,"data":"","first_seen":"2026-05-24T00:26:35.353083Z","last_seen":"2026-05-24T00:27:44.241024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/ldy/index.html","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-16T04:53:48.997285Z","times_seen":121780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/ldy/index.html","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-16T04:53:48.997285Z","times_seen":121780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/js/bootstrap.bundle.min.js","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","size":80821,"data":"","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-08-17T19:42:29.412576Z","times_seen":2902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/ldy/index.html","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bca2af8184df6cebb3fddcb5f2f658c","sha1":"b4d9bc8197d6614457b264f4a92979c68388aadc","sha256":"dcfca061a23db5b594d4803068eed46f2b802d104a5225814e096a3d44151acc","sha512":"2e416a250e1f2106c27f2fc640fd2322cc857a58b77e3432d410af9fc2122b0376afc002ddf40d5e0a58101936d859737d4572d2380d20f18259d23f1601f9b7","ssdeep":"","tlshash":"bf214cb91777c9328b23603b13ae5982b91e90af114fda54395c5081af4979cb3c47f0","size":1179,"data":"","first_seen":"2026-03-07T07:24:47.134474Z","last_seen":"2026-05-24T22:10:43.701617Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?3eea9d4bc7e467312b20946a65a9ef38","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a47b1843ed29a4317bea0ebdd358088","sha1":"57e886d34f4bd099d221d5c653c1a9b15c5a076a","sha256":"91c7ed245dd706b7fc82e0a2fb0235ba9f041f402f8f7da84f2f84441aefd49b","sha512":"557e62313e8e369de9c9708a58b3be12f9a697b0009d315fe7d1fd6d5a811eb64c3afe3216b76d5a9ce359a79feff4474604e1c1bdfb95ccfd0ba51ccae477b0","ssdeep":"384:fmJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:fm4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"b0d2dae9b282713293a324a5153f324af07b5a54bd4968a4f11994c07d38fbb027bfdd","size":29897,"data":"","first_seen":"2026-05-24T00:27:44.423235Z","last_seen":"2026-05-24T00:27:44.423235Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/ldy/index.html","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"e7fdeb74a9d98a286f1837a614f187ab","sha1":"632bc0bc4e1b64718e4a45f9f4407fd9e41febc0","sha256":"4da6fd7a457388d879a329ea32372d1d611b0a5010eb90ead43ce6cf539481b3","sha512":"b379624a4ce71207c9db0b9da10ae808f3219f5152d9fa6d31416f37e4865cb90e4b447b60ab373caab618e0eab9c8cdbe07a813bd99e6e780fe10634f08d011","ssdeep":"","tlshash":"85e0abc923cbedc82ee73cb5e10b6448a15a0e2fa8a4ddd08c50201304d563b24c02af","size":428,"data":"","first_seen":"2026-05-24T00:27:44.485438Z","last_seen":"2026-05-24T00:27:44.485438Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxedout.cn/ducky.js","fqdn":"pxedout.cn","domain":"pxedout.cn","tld":"cn"},"ip":{"addr":"45.194.143.204","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e63f7f3d1b97a4e7acf4adf300eb152","sha1":"5dd969728e11783401a8e335f6d3514b09fc9e5c","sha256":"1301ffbac8a6d8d078d9a8e17346d6b458154a037ade3afbeb7d90eb08e4b242","sha512":"013c018d5fd9559141278d77ed3468fa2ef5aff3ced7bbe6a2d0a2e5a11dee2f01a700b99fd5160a11cc6343a06f71f2b4637e13e8d8cc275ececc0bedb0a511","ssdeep":"","tlshash":"2011257481d3b93941329454f5a2c34420b5d025fb17db0b76af6f940ccab64846bcec","size":981,"data":"","first_seen":"2026-05-24T00:26:35.257871Z","last_seen":"2026-05-24T00:27:44.393914Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"374ff9457908b59bd93f3cabab31d8a7","sha1":"a2ebbbe5cae2c2833ca869397ed833ba31a9c6b9","sha256":"5486d8649f3c21c69012528522270f1d016c2fb56b6e090077a2501af48975cf","sha512":"9a0038c79b917a648fa99656872a057c1adb42e901a510bf4c274d839ae5d9d1e9d9a386b0f86a1152c6eed4aefb5dea6af7aace401b0fab9db2e4cee99aa4ae","ssdeep":"","tlshash":"83b01270c45af474d132f0429540cb8f26b8510af7bb5f0d453879e2908e5482cfd6c5","size":99,"data":"","first_seen":"2023-03-11T16:14:26Z","last_seen":"2026-06-07T02:11:50.33563Z","times_seen":3522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0b65f59369664d77fe17cf8202dab3f8","sha1":"4d6a5353f45c4f14ddce424c01c1a33ff7dadf71","sha256":"0822dcbd38da8095ec0ec081c943767bc576b2807b9b73daea9c175afd61d9d5","sha512":"0296d348aa1a17ce56a186b4f82eb2fd25d4554125e9b56a4d0f192a7a0da6d582dcea22f55d32f6cd87964f531e43fa76b76d0b502d3889b0d17cd8d8f40a37","ssdeep":"","tlshash":"41c0c0f32206600c4420406030340c0890024914fb03d630b8d039a5118c2d516e82dc","size":173,"data":"","first_seen":"2026-05-24T00:26:35.423049Z","last_seen":"2026-05-24T00:27:44.492158Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0a3a0b592b9c285e050805307cee87c2","sha1":"125a168e24b2bd38aadb84cbb5f87f316b073c41","sha256":"aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23","sha512":"4097f05a9ce819914160aeba71fa11524f6b291a39b7c948509d756318b600934f1d195980df66bc7731e327979135bfcbe0e9ff3758d779a72481ed623cd3a5","ssdeep":"","tlshash":"a34000000000000000000000003000000000c000000000000000000000c0000cc00000","size":6,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-07-16T08:24:57.881334Z","times_seen":242448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"78ac2aa5ccc29c90a345c90aab40b442","sha1":"cac604932faa4add2955602b41de8a8bff362ebd","sha256":"53db339b0b80637f13dfc63813d7366c899cebe0db896602886ece619163d82e","sha512":"5c76abfa8f4091277643f4dad57c37d9eb71d33c9691f0e85bc82ac5f303d4e3da4937cbc2354e4d5c5d0022746d7c06f975f209067df2cefa55bd3827d892a7","ssdeep":"","tlshash":"31b01242d0575c0e0170c236ec485418474d4a7d9fa708010dc6ab5c0c99f1405e549c","size":103,"data":"","first_seen":"2023-03-07T01:06:53Z","last_seen":"2026-06-07T08:03:11.676707Z","times_seen":13596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"50484e4da7f4f3b9dfeb1bb38c8a5e0f","sha1":"cdb1227b7bf7dfd6921322cf909efc82df479bf1","sha256":"37a1d07ee3837021c9924f90ae09d6b768732d87912f02ef5fcbf3cbd3b55690","sha512":"1e14f73371d92930a7a8d764e1460e942a4c496631cbb7bb34e57f0c828598275200241a401e56b244bc36108047060b1633cb10f8ffe01ee6c2968f9eb5f723","ssdeep":"","tlshash":"4ea01275086394346034895030429a9c610580204315090456263820406810650610e0","size":77,"data":"","first_seen":"2023-03-08T15:51:34Z","last_seen":"2026-06-07T06:22:09.10427Z","times_seen":1089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/images/honor3-1.webp","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /images/honor3-1.webp HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 101966\r\nlast-modified: Wed, 20 May 2026 13:13:31 GMT\r\netag: \"6a0db37b-18e4e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 597x398, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b8d11985dd38f0fe696355c90e3bf807","sha1":"d21918773072051820ae82d8bb25a3c5caf6553f","sha256":"1ca925cf4ab473a41ed4bd72df83bc61090a218e110bc67038d5612a8866cbb2","sha512":"83da9398e9fb20baa0a8aac31fd3e739d61847f50cddd3ef35410fbe0ffd2ffd46e904a8be9097169125eb84cb8108bb4e925a5194f4d8172a25fbba308402db","ssdeep":"3072:nnsnxhdkSIF2ZVw+sd0IJyxAo0jwWMk23lo2wqq:snxrkSrVw+oQqwWMkUK","tlshash":"d3a3128f49e662c53c2c049dc12c43514daef28de2357e1eee1eb8b1059bd29a31ddad","first_seen":"2026-05-24T00:26:35.38409Z","last_seen":"2026-05-24T00:27:44.236565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":597,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jzxwrng.cn/link.js","fqdn":"cdn.jzxwrng.cn","domain":"jzxwrng.cn","tld":"cn"},"ip":{"addr":"38.239.53.105","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akmty.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 20:18:21 GMT","end":"Mon, 17 Aug 2026 20:18:20 GMT"},"fingerprint":{"sha1":"C6:33:A4:64:F1:C8:42:CF:78:01:2F:FC:88:89:68:06:9B:04:5C:F7","sha256":"B6:92:52:C4:C4:B7:47:12:68:63:0D:41:C0:C4:4C:D2:B1:7D:F2:1F:C3:07:81:58:60:20:EE:F8:98:6B:0B:AA"}}},"request":{"raw":"GET /link.js HTTP/1.1\r\nHost: cdn.jzxwrng.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 710\r\nlast-modified: Sun, 24 May 2026 00:25:11 GMT\r\netag: \"6a124567-2c6\"\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":710,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"4d07e6cbf80f2b5a679c44c0506a44d7","sha1":"3cefcdc25d8e3f694c4fa41122def181e38b6cde","sha256":"69dcd215d5973d3c1f3716b158c2d67a753412f0aab8834c85e15cf32e1ae6d6","sha512":"9876494a5406e40135bd942b77c52912b7de29d1a640892c194cc95f3886c3a397c9cde9a59341fe5e7f5636934dc97138fca2e9777acf8588d7714084ef8460","ssdeep":"","tlshash":"b60171fb44e688630b51529e107fbe1cd1db205ecca859b8fe615b740eea0146c2a1b9","first_seen":"2026-05-24T00:26:35.353083Z","last_seen":"2026-05-24T00:27:44.241024Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1004,"timings":{"blocked":396,"dns":1,"connect":199,"send":0,"wait":200,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/images/honor1-1.webp","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /images/honor1-1.webp HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 152386\r\nlast-modified: Wed, 20 May 2026 13:13:31 GMT\r\netag: \"6a0db37b-25342\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152386,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 673x448, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f6d499e3828008e9e00d53861d84aed3","sha1":"2dff1cc56b84eeaa59722778749f2aac28c8e933","sha256":"0eb27521b1d0920b3dbe6359560c867fc032b06d5048545b998f30f41a3a5115","sha512":"0d1e854db13a0e2e4c1faa624653ba62d305f32df9bc1b0b869b8adc707183ec561db749aa28904dc4466ad497b8912ae296f7588562193c422411d7c39d903f","ssdeep":"3072:2NIEzT81b7OBbdITlt44X0szLqkp90QeDf1VK0znh6jwIa3Qi8:iIsGlnXSYMiMh6pQ58","tlshash":"9ce312b9e2ca634e312a2532f4f387f59b8691b6746fd815223d50fb6312a04c6378f5","first_seen":"2026-05-24T00:26:35.365195Z","last_seen":"2026-05-24T00:27:44.24575Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":600,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/images/honor2-1.webp","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /images/honor2-1.webp HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 106418\r\nlast-modified: Wed, 20 May 2026 13:13:27 GMT\r\netag: \"6a0db377-19fb2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 692x383, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4687bbcbdb5e4a430c51559a1bc044f9","sha1":"0b4e40b598858d5a1799d11d8d4cf0860fd1e155","sha256":"dc34d233c253ea78add190db05a2569e4f69fa1463200622d64d98dc2668ba0e","sha512":"f70e3f7cbfe17795773408c0557e6848fe6495a2eba0552609e7763c02d395feb74c0b2a164d502a4aeed767f079f23c1e5203c768810ac666ec47c237670f2f","ssdeep":"1536:3BjypOk3so3vwU2zwzlh7Kwzu3ed3DLDYy8kFWNRNr3KEW:xuK+wjzwfK8rEy8kFWTNy","tlshash":"26a3120ad3b959dd91665b4c3ed6e7d09032798d638af5c1acaeceed50ee8970ccb010","first_seen":"2026-05-24T00:26:35.330134Z","last_seen":"2026-05-24T00:27:44.250534Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":595,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/ldy/index.html","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:21.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /ldy/index.html HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 23 May 2026 07:32:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1157fd-1dc6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7622,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"ae5900312d2c5a2425dcf59c46225b5f","sha1":"4634de6fb66df471f9ccd398190e9bc81d16d4dd","sha256":"810a82229a0740dee6a62e0ec7abcd055b363de9d15281f40e3495683d5a90c9","sha512":"5ccc32d44006080a731c68e63f62efaffd2a3689adc0222285b9696cfab91380b69ff810007411050120fbefc43b16a19db92c304ec4051cce1499c5d5e64ba9","ssdeep":"96:9mMosAMoe0781Pby/P6GjrGocLHVezgXcsOcqTc07GfFcajJlBc/AYDcTcLzcLv2:kPte07qTpMSSlKq07gegU9630u+2qM","tlshash":"eaf174091dfbd0e30516906929ffbe2efee1c057011599087d6c0ec9bf8ea48cb5b694","first_seen":"2026-05-24T00:26:35.263696Z","last_seen":"2026-05-24T00:27:44.254974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2067,"timings":{"blocked":910,"dns":411,"connect":245,"send":0,"wait":245,"receive":0,"ssl":252},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/favicon.ico","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:21.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"6a1078f6-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-17T10:28:47.867538Z","times_seen":319700,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/division_line.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/division_line.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 222\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\netag: \"6a0d7b6f-de\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 38, 8-bit colormap, non-interlaced","md5":"b1d3ac92efd876f76c63e5e8a0f3c465","sha1":"464bc5d03280b8fa983ddecf1f2eb3205ed7cfc2","sha256":"e9e00678921568da7ecccdea00b894d7eb0dc7c4222b5fd4f692b4abb8cf32ea","sha512":"36729cef80d7e93ea0551f369c8676136fb6c2373d1082edcebd7673a5f51ccdb52e91538eadb3f9e2a1d789765c3d6bdaf84c59f8e624ed01ae6779823859c4","ssdeep":"","tlshash":"dfd080d9e6530f2dd8cf912e43d83535dd632950045b0056145d582f1014111e5d1637","first_seen":"2023-05-07T18:09:45Z","last_seen":"2026-05-24T00:27:44.263182Z","times_seen":51,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":709,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/images/logo.webp","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /images/logo.webp HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9260\r\nlast-modified: Wed, 20 May 2026 13:13:29 GMT\r\netag: \"6a0db379-242c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 407x144, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a3bc737098ad3a35651cebb13e860154","sha1":"b31867c98ff4c1bef01b24e2cc9c31da0ab825a2","sha256":"7b3745aa758ce64cfcb21174efdfb9ba2972977dbbc56c835599bf68f64a81b5","sha512":"3875919c88e6eb0f7971a87255a0d08c37ca7b06128410e36ef74f31bdc8a6891705e8604dd0e50a0a71cf1d74d22c022bcc1ec4718a9295ee404f831754d0b7","ssdeep":"192:VTekCcoBXWhZwo4CEPsws/LkckuvaQiXe+UEsWUPSWgUuNjuM9/wFIB:VJxfw5C1/XHt3EsWf+QuNy","tlshash":"a212bee5eb568654ab664473b392d36bb0138a3dec50d63092ec220fdedd2a21cb7024","first_seen":"2026-05-24T00:26:35.395704Z","last_seen":"2026-05-24T00:27:44.267062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/yoo_gaming.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/yoo_gaming.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-980\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 100, 8-bit colormap, non-interlaced","md5":"9d59ef3b5f71466d44c264881575f596","sha1":"662549552b70576dfd29b541c72760ed1a421bd4","sha256":"64992e08a31bc0a0544edf41577fada7d87470a5983a7778c79140f89ea8053e","sha512":"3c50e225a390e500e4a2500e493957613ea245721cf26d8b6225f3fca4089e80b332430481c6402921482c7e61e022e2fd1fe30590e1132c79993629df13bc17","ssdeep":"","tlshash":"ed412ae477027939dd708f3b45090e9b346c8dcfd956e3981289f5994d8c318e124798","first_seen":"2025-05-13T03:21:41.677075Z","last_seen":"2026-06-05T11:36:25.307854Z","times_seen":37,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/playtech.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/playtech.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-839\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2105,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 226 x 100, 8-bit colormap, non-interlaced","md5":"ee59ccd33760366f6a83eeb1f01d7456","sha1":"ff0f6a32e2e61228f1d9d7ff6ee4df2ac9f27eb6","sha256":"783a4f5d57b8fcfee48f24bae8d18b6c8e1b1726fd1d4a5bf5a18ee18af53854","sha512":"c1f259cb73cb1f71c1eba44a8d1db6214cfc7782c1aaef16449dee7933544d4910d3ce27f2974da3c00c6963f2e706e6c927b8ce032f94f81a8995a39c4b20e0","ssdeep":"","tlshash":"26411abd6be6889c11330b93de5005286b802abf77309198799e972837d13836e242ce","first_seen":"2026-05-24T00:26:35.316291Z","last_seen":"2026-05-24T00:27:44.274881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/js/home.js","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /static/js/home.js HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 May 2026 13:14:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0db3c7-16ad\"\r\nexpires: Tue, 23 Jun 2026 00:27:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5805,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-08-17T19:42:29.407723Z","times_seen":1445,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/css/swiper-bundle.min.css","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /static/css/swiper-bundle.min.css HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2026 13:14:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0db3c6-4694\"\r\nexpires: Tue, 23 Jun 2026 00:27:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18068,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17812)","md5":"ea28ae0aaf82709381c57d6a7daa7a05","sha1":"a7c528dc9018aeefed9a52337168decb220e2f61","sha256":"af8545de3876815292506711e1369bff9dfe57ec7e04c45c3e1bdac48a11f3b2","sha512":"9c63402a957e06b7c365a6cf5f53baaba991953e7bfda99d8feeaf177db6a2782a28004b1d82df2dcde362d5556e4891f6da300d63cf13d816144dadb1920f66","ssdeep":"192:1VmUJbiKne0JlXZHZ+Sme+jexS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9A5Q:1gUbe0JdZHZ+W+SFnZ24tlWfF4XYz","tlshash":"d08245a85340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9132f6a9","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-08-17T19:42:29.422575Z","times_seen":6412,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/images/hero5-1.webp","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /images/hero5-1.webp HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 151334\r\nlast-modified: Wed, 20 May 2026 13:13:30 GMT\r\netag: \"6a0db37a-24f26\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 836x578, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"987154375157be9935d69f65ef0617ab","sha1":"0313355a9661e665a7d12cab42bcce94c2b1be09","sha256":"4626161f5910359b99a3a589ab9b0602f17039c2f7d4ff7231dd79e778724669","sha512":"4c8f66cef59a46f0ee77c4bcbf2be4a1ef3d4dfcb7e13ee11334a862d514a278a1365179fa39e85e0fd362b9952a2e7fd0824322f86d43398f10a99a6544b651","ssdeep":"3072:SJZGwV7X9IwBklaHZl4Z9veVDhMJOWXvF2MFmx9TV9nAFA:sZzW6koHZmveVNmLXvF2McbV9AFA","tlshash":"61e312a5f04ef45e841b2b767897eac0a88d53c33b9033b99f99201f340b96918d1edd","first_seen":"2026-05-24T00:26:35.349816Z","last_seen":"2026-05-24T00:27:44.284197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1005,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/js/swiper-bundle.min.js","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /static/js/swiper-bundle.min.js HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 May 2026 13:14:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0db3c7-22515\"\r\nexpires: Tue, 23 Jun 2026 00:27:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-08-17T19:42:29.406831Z","times_seen":5781,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/jy3.webp","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/jy3.webp HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5666\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\netag: \"6a0d7b6f-1622\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5666,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 593x163, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc60b88a90b5b6d78c4fdc601ebef61c","sha1":"585541f06450d6cfd835f52f7c8d92c2503c7e85","sha256":"3d7a2edddd24dd62a2ed03d30e00d9d1b7c58f09aeb22710aa51d2fff07022f0","sha512":"474df3da1d3f68d8ce0b66f1affc3556c8f13d29a417958112a3a8db75653f563d5bb9f9a1c1e474e03cc0762b7bdd49c4c22914ee55c3ae175e9641935e021d","ssdeep":"96:6Zi8JAHIuqMTUK4Bw8EgmMc3Z411Emwixed/OGIJrR36xydGHJcqQYSqfGn2zla:38JAHITMgVEgmlm11Bwixs/MwxygyDYs","tlshash":"1fc19e8660f3405cf230e4c97d0c32c68568d9ba61441bcdbe71ccddb4bdca4990e2b1","first_seen":"2026-04-11T13:08:15.645668Z","last_seen":"2026-05-24T00:27:44.290703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/lgd_gaming.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/lgd_gaming.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-933\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 138 x 100, 8-bit colormap, non-interlaced","md5":"28afe5b0560d91cf61a42a0ceedd2943","sha1":"2bb4a62449bbf6839301878bff07543dc7f803fc","sha256":"0394135a37ba9b7289a7c62a39d7478494851dfb25f6ba05a1637fb4f9d18e61","sha512":"678be48921937d96a954e2f03678295e45c00ada986c6999a4cf387a74ec65d347722443f2583b07113a666c4b544ab17630f8ccbb66cf52394634b1e39bc221","ssdeep":"","tlshash":"e8414b86878f983cd4368fb32302aa79af0984b1395142d618c04cfae874bd4b05d7bb","first_seen":"2026-05-24T00:26:35.298333Z","last_seen":"2026-05-24T00:27:44.293653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/images/footer-1.webp","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:21.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /images/footer-1.webp HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 101726\r\nlast-modified: Wed, 20 May 2026 13:13:29 GMT\r\netag: \"6a0db379-18d5e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 601x407, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aef54b2a940b0a12df3976a48e991152","sha1":"1b663cec94c72fc787fc77cda72aaad5db7a32e9","sha256":"e0816336b09cdc0faffe08552a65cd39189a0562d94d8779f1c2335dfcedb059","sha512":"fc972aef317ee7d25d698b1a4c1178d101cc542e4eedca806fb623991010959bbd5c61c29ded858b2bd4bbdb8dd1998e53bdba76d3ad6843f3e23f3a3d35639f","ssdeep":"1536:qgEpVrqP6gcS8nGta7sqyAjYga/KGk6baWZ7zfNSMaZUehUZJkP5Q8ma867rE/+R:qlv21cltjK/KGkSFNG5srUw/+C0","tlshash":"b7a30211dd4093dfc89a0f49ed069a3b2e9547a6ee09e4e2300f479c86f91e1937d48e","first_seen":"2026-05-24T00:26:35.203663Z","last_seen":"2026-05-24T00:27:44.297155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/panda_sports.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/panda_sports.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-bac\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2988,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit colormap, non-interlaced","md5":"7a99c11e931eef1929d16e58a9c72771","sha1":"150138254087127d26e0e3f494e8acb20cbf1bf6","sha256":"296c7b695444a8383f02bb93aca66962d520f48f71add0d43d954b6452749fdd","sha512":"4ae1fe9a246fbac9cef50c7058ec3afaeece441c57e2ab61bb5b85aa484f6d25ec55118dcafe52e9d4662999bfe6f7fe83d6d98c17ed11e121d0568deeeff309","ssdeep":"","tlshash":"f7514ac98ba95758a0e02cb1a8756e1cfd9808c0f079a0a3cca432e0d5b530ce0eb5e6","first_seen":"2025-05-13T03:21:41.686702Z","last_seen":"2026-06-05T11:36:25.328214Z","times_seen":37,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/hinhnen.jpg","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:23.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/hinhnen.jpg HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/abcxyz/static/css/ducky.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-2184\"\r\nexpires: Tue, 23 Jun 2026 00:27:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8580,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6], progressive, precision 8, 800x459, components 1","md5":"bc5ffb105d6609bd133eb6786b7c354e","sha1":"56c7f50a8fff0d62be948d1fb9762ecb7b483d79","sha256":"2bb119ee44a57953440b34875474db001fae98ddf411dd02e95d1199830214f8","sha512":"62ca1ce52cdf95be6c4757f03ef4590863c0c91105c42a9c5e59091229cd5cd02331c041f3591d684266d4142f2a7ee33e9656a95c46286cba5765d0dc9de4ca","ssdeep":"96:7qgicxfuOFAp2SDPuyAOoy/Hnx8IX5LUR8HIZid/xsoaVMGIAsIKTyhLDfGVH5ZP:ZWPu7Ooy/HnxrgiilIAIyhnOh5X2e","tlshash":"f5022984da5bc045f1a61bb8c8a5263e2b60fe94fc3bc657d3d8ce283e254409eb0775","first_seen":"2026-05-24T00:26:35.339152Z","last_seen":"2026-05-24T00:27:44.30345Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/js/bootstrap.bundle.min.js","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /static/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 May 2026 13:14:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0db3c7-13bb8\"\r\nexpires: Tue, 23 Jun 2026 00:27:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80824,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-08-17T19:42:29.412576Z","times_seen":2902,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/ky1.webp","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/ky1.webp HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6158\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\netag: \"6a0d7b6f-180e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6158,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 593x163, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2cdec9f71725a4cd341fe806fdbc05e","sha1":"d31368096b88f0a353fde271bded8a250bc507ff","sha256":"f23fa74ea64c071d31ff78ee0a32e6846c5e27800a38d797489b6661bb6a207d","sha512":"d98817e0a3361bfaf000aa7e632c7a27dabae6a4280e16237db221b6269eb6b8305998f9cbe6bf40cbdaad4f9b5ba3ddad5127a5698ff65168ca4903e0800533","ssdeep":"96:oET/k5mH5R1sBjpiO8UipKN1bYD4cs3iHDT+fWOm724KZ9qDgug70feNIScmUxtn:HoiS94UicCMSHGfWcEDgugYfeOPtn","tlshash":"91d19fe0c48e095afb390df1810e05b9db0edd7c25f6cee5897e279825a3dcc1719686","first_seen":"2026-04-11T13:08:15.642556Z","last_seen":"2026-05-24T00:27:44.309643Z","times_seen":4,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/inplay_matrix.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/inplay_matrix.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-73b\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1851,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 100, 8-bit colormap, non-interlaced","md5":"556fa477bbda7aaf54c2153cdb2da07d","sha1":"1c4c56eaf39380429d30d57c68a0e3bacb09d63b","sha256":"9c4ee336bc5d4f4f3d536bbfe5006a409c20efd27a55fff15e334ce47f46af50","sha512":"69530da2fc2cc06dedeb1592e688a73c9d1a88a582b6d10a36a1b80870f7f3b55753d7638c5379de1b5d44c445e1f499077ca98bd13f5c485d2db3a36740a016","ssdeep":"","tlshash":"2d310b1a8774500e94609399c864987dc33f7d7c6908934c459b363ef5f8b82f17954e","first_seen":"2025-05-13T03:21:41.659239Z","last_seen":"2026-06-05T11:36:25.304319Z","times_seen":37,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/images/why1-1.webp","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:21.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /images/why1-1.webp HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 110468\r\nlast-modified: Wed, 20 May 2026 13:13:27 GMT\r\netag: \"6a0db377-1af84\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 639x438, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4bdce9c877860cf664400349181a068c","sha1":"b8d30e9942682d4fb5acb88ce496cedaedc818f8","sha256":"1bce1047e198871b4e702cc250ee17ca834e19a2f1d784d2437eab1c49506a15","sha512":"b177f04d3881ae061fe549a2e13d5af4204cde6e73629bd25ad34390cdc85e9e10dd0fe46863564e8975c445ae42197ef9a83335c7c562f3ef022fb77e392ea8","ssdeep":"3072:NeBaVq1/63o1RmZxSaU59ed9n0BZbPvSM5S:N1hxSaU59ejn6hvSMS","tlshash":"32b3128fd0567c74f8d137b33ebda38570d5822abc478405804aa60f47bd59692630fe","first_seen":"2026-05-24T00:26:35.307833Z","last_seen":"2026-05-24T00:27:44.315412Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/images/why4-1.webp","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:21.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /images/why4-1.webp HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 170806\r\nlast-modified: Wed, 20 May 2026 13:13:32 GMT\r\netag: \"6a0db37c-29b36\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 810x538, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"243a3053e16d81524449a51abc1c2329","sha1":"6578deb1bbad27df25afb1e82f43e9128ea77ee9","sha256":"cb1601af30f3c841d1f324dcade78b7d19ee26223339b61c1ec64df38d2d7965","sha512":"d020625d0d32d108fcdeef04b8a59b7d3ec01eede871ce9c368e6af3cd6eb1a04cac72f8c6db5cc63ae3551cd8d71676028c9c3ecceb48eda98f418b5264eec6","ssdeep":"3072:7eYM6RNkmajLX/TKNO4d4xtCJ9RUvwXMzaX0TYi2ERCsIB:7esN8jPKGqavbc0LJA","tlshash":"65f3129576c37f65984e7231372bd6d269e49b03f35b14b7deb10d0c972ae289c03462","first_seen":"2026-05-24T00:26:35.360661Z","last_seen":"2026-05-24T00:27:44.319097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/css/bootstrap.min.css","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /static/css/bootstrap.min.css HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2026 13:14:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0db3c6-38a44\"\r\nexpires: Tue, 23 Jun 2026 00:27:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232004,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65359)","md5":"26eb979aae05e8a91e8409ea155c6b87","sha1":"b4bb8fa6a925ef6dcecf7daf241f219a29924b01","sha256":"34717dbb986d5f462c548e23bf39c41005ff5382637c8b3418393a965c887585","sha512":"d6df9d9588b19288cad1427b8ce78bde6d2a45898ca6fdd09b238ccf0c8e82003876f0009ad70d668905e9a92273f9471ad3a9000cd242734b393c9e6e8f2192","ssdeep":"1536:Q9xnXGi9GfJkfvq5wlP7cQZDR9uvV982sYRElV6V6pz600I41r:InXp9GfrV98II6V6pz600I41r","tlshash":"303482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2026-04-09T04:41:41.41241Z","last_seen":"2026-08-02T01:42:52.590415Z","times_seen":18,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/tqczfznitt_heilang.js","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/tqczfznitt_heilang.js HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 259\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\netag: \"6a0d7b6f-103\"\r\nexpires: Sun, 24 May 2026 12:27:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":259,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"84c75ea17a77f9b72d4141119e599312","sha1":"2d9dd4fd69b72f74912e625a13adda7a35b0e62c","sha256":"b6a20b5784689dc77e1173e5758760d546dadaf78e2ba83a364e53bc76595ccd","sha512":"dbc89a27dabc633f22c98887f64b30825ae1e28a3dd18b536980741cf6133c2ddaeed9d06ddbbd8c2faaad6be15704da831acfdd62e65bea935ed17a6ca8589c","ssdeep":"","tlshash":"0cd02e0b6c2b6cb02b6a087a22bad84cb0e2669e5039d000a4dea8104fa0dd5182e7c9","first_seen":"2026-05-24T00:26:35.355886Z","last_seen":"2026-05-24T00:27:44.326207Z","times_seen":2,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/casino.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/casino.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-db4\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 100, 8-bit colormap, non-interlaced","md5":"debe7377e2e6d555e3c845e353e57762","sha1":"755d65255292fe715e27587461badf192cb73ed7","sha256":"4a1f3542a545d41bdda2133653bc564a34b76bc7e2e946a55a5212a81d5f9e5f","sha512":"d443a20d526811a2d6063ce2e6bf79276caf92689c5ea36ad0eb9b291d08a5f341307bc4bd90bc10e957e4d099eb5b4dd80a1b62525b0b5b436dc95e690c8039","ssdeep":"","tlshash":"a0716d3b6265f2ea037d201bf75cb0bf0e038968e992ab0c6755bcb93f589630c4d148","first_seen":"2025-05-13T03:21:41.693804Z","last_seen":"2026-06-05T11:36:25.337482Z","times_seen":37,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/winwin_casino.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/winwin_casino.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-1d06\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 119, 8-bit colormap, non-interlaced","md5":"75c2af1e4e999257b02df6c01088560b","sha1":"f9e00310542ea4b90e7c0c5d89428df2e5b81951","sha256":"276ba10bee119a4fef69cd0ae7c15e8adc3ad5743f91e5ea29a2acd6b8cfc5ce","sha512":"3c56d8ad74d341f6c5d3c7af611d50b111e5ace034b7122c4929d6f5cb609968dbd52a3e410890bf837b0c1d3671cdf4e4ab55b45350173d5b283016195a52bd","ssdeep":"192:tmj/7BSTXzaO/4Vu6UGOM8lo2mzn9/COid:oj/krzaO/4VuloxCl","tlshash":"cbe1af4799648e19e068c86278b7c1feac130ec61b362f6e8907d6660f7b65cb6f4061","first_seen":"2026-05-24T00:26:35.224347Z","last_seen":"2026-05-24T00:27:44.334042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/boya.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/boya.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-653\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 100, 8-bit colormap, non-interlaced","md5":"7f9cb5da3634706caffcaa7c1c2eb724","sha1":"c1841b21dc8077b5f493d9db73d4ad751f246b0e","sha256":"f13cbac91154f85dae2c7e5e9ce2dfdbb4761154a5e046bb9af1de6196a4b1cb","sha512":"0298f7d5613a6be61d624b3cf11732b86a13174ccb56c817125588845bd81a4c25e56b33dc5cf7dce5d1e876e72cd5d7f4cde12bce278ef0c5ad5e8a521d31d9","ssdeep":"","tlshash":"b631c66b1e0aedaae8b3447310ac87d0cc506699f96dd0df576a0aa70b2244dab71620","first_seen":"2025-05-13T03:21:41.679733Z","last_seen":"2026-06-05T11:36:25.324802Z","times_seen":37,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/pragmatic.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/pragmatic.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-6e5\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 184 x 100, 8-bit colormap, non-interlaced","md5":"3d08fa778fc50b7fab3b6bf57431b8b9","sha1":"e5a59d812394e04fb49f8d3755384b2a25a4cfd5","sha256":"95a006fb746ea95fef71ebabfb6f2ec09d9bd24a85828bc246f1a80bee33e928","sha512":"ac5199bc95014aa2c33a24ce723d052a26c6a8efe1f950078b93abd0a1b102176f86c12912b4580d1d6404092133c32752d2df4dbb365cbb7ff4f0c905179c1e","ssdeep":"","tlshash":"d231e9f53515b81deab589014094d5707ababe815883911f5084f3ec3536a4831cedaf","first_seen":"2026-05-24T00:26:35.392863Z","last_seen":"2026-05-24T00:27:44.340448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-24T00:27:19.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24084,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CR, LF, NEL line terminators","md5":"0619325554c4aac0a14d837a01009e8e","sha1":"82dfb4a48d81393c111fbcc080b7d323450ef3dc","sha256":"64945718d4c213f9b922abf989d2d3d8436c18b53588f69ef91a5407c9a4879a","sha512":"7bf1fca21585494019f2a3985da409ab2ecee3d599c30ebd1aa2b215db9093eda493c9ac7abb9ca7e3a8d12e62670694528ffecbf657533ddd3ffecfab93277b","ssdeep":"192:R/N/ZS4T/N9I/wYky/N+L7/TzPebx0dvlzYOA18UWhW0wyNu4/sGJuvf7e8eKjq:RFQJUL7rz2bxavlzhb37LN8vjq","tlshash":"9db2757265f12bbb4083d5f67a602b0eaeb6c54fc62b864573fd8ac84f91d67884314c","first_seen":"2026-05-24T00:26:35.214739Z","last_seen":"2026-05-24T00:27:44.34506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1362,"timings":{"blocked":577,"dns":169,"connect":198,"send":0,"wait":207,"receive":0,"ssl":207},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/fb_sports.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/fb_sports.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-61e\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 148 x 100, 8-bit colormap, non-interlaced","md5":"095873efa223f32e8d4f24b2bde203b7","sha1":"69ce4615b6c6b412c4e78c89a9dbce0cc4d9dd37","sha256":"d5c0a230a71a17c147d0c313c979ff3a91d35d35d1e0b80df31606d38caa2d74","sha512":"ad514086321e5e6e72bc9e9d425b8dcd43435febf17176eb2437c057b230d577fed8547c0d17b697ccd8b0a48254379a785396eef3aad3b3ab687b00d8744209","ssdeep":"","tlshash":"0031293b2377cfb2e0fe38b61c9f0b986217ca747802408a3b3542594121899ed25e33","first_seen":"2025-05-13T03:21:41.674555Z","last_seen":"2026-06-05T11:36:25.335345Z","times_seen":37,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/css/ducky1.css","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/css/ducky1.css HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-1213\"\r\nexpires: Sun, 24 May 2026 12:27:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4627,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f9e674f2219cf90a31e08e9fab61c808","sha1":"014e71aaaa394a24695a756cee8354028a66e1fa","sha256":"860bba649b2d7617fb68765a1e894133ff28659b6db5728aa7ff8db321072939","sha512":"a978eca6e7cbdb2ae2c6e073a3b5ebc7fe8cbdf7b73cbbb945c23a466feecdddbef77463cf53719c5d2b99b234faa170af97a2894ff4d6728a10c3b037b1b6e0","ssdeep":"96:eJ5jl4b/uwUtrFeB/mUtrSx/6RU/dTUofPaPtof81tN:eJNl4bjUtrFeB/mUtrSx/6RU/dTUofCJ","tlshash":"d4a12fa55ba71805b94fd0a41ffe5310722e4487961fdc6d3a9e3289cf4e0c45a93bd8","first_seen":"2026-05-24T00:26:35.231792Z","last_seen":"2026-05-24T00:27:44.363214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/images/why3-1.webp","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:21.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /images/why3-1.webp HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 125442\r\nlast-modified: Wed, 20 May 2026 13:13:27 GMT\r\netag: \"6a0db377-1ea02\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125442,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 747x514, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8ad0a74ef369e3814abe0c66411fa8b7","sha1":"020c95f58304c99d8ce3a6305df30dedeb645678","sha256":"54d6b1d70cd0c90d7667f905c0738442f54c88d1dbb14d5a442de8dab712d574","sha512":"c8ae4d097d50923c8cec046ff3eb97535770edfbc8c14d6e10173864f983a2fde3b1b6ccbc8ad05dbeccb35d47b429bfb2fa818352fa8d3559ddea454d10e850","ssdeep":"3072:LQJYHjt14BIOoce+VCzO3J+mflUiZL8ouiV:bDz4B/w+VCzO3J+m9UiZLi2","tlshash":"41c3126fd6638f78d22e46b2623abe357c470301c13f750c5cb6a26616b3c98703ba95","first_seen":"2026-05-24T00:26:35.303183Z","last_seen":"2026-05-24T00:27:44.375409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/thunderfire.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/thunderfire.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-c8c\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 100, 8-bit colormap, non-interlaced","md5":"f879c8e6fc5d59c59c25858eaa16abd0","sha1":"a8712c12ddc80682e54eb387d9dc675af3155054","sha256":"7a6d6d12d3871328dccb8cfb978a3c378b811e5f1adf10b5acc399e95e39d3d0","sha512":"674054f64b2c745ffd0a72ac3b5790a2d1afa274055a392c071c0cd83e7154d32af09c5261ebae77bcc90b19fd1261be7ef93c7501c0602d8f57596a2ebdfc9d","ssdeep":"","tlshash":"9e616dfb07b3359b00737297c7c228c75d75b624c5f69a140f0b0ef44e183921588a6e","first_seen":"2025-05-13T03:21:41.660555Z","last_seen":"2026-06-05T11:36:25.310982Z","times_seen":37,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/pocket_games_soft.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/pocket_games_soft.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-621\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 100, 8-bit colormap, non-interlaced","md5":"c8e81e5a959281e2a8a1b3ad71b4bf8a","sha1":"621b765ed22a78958805a5ac8e32cdede1788bd0","sha256":"57a5a6e5e99ef3a203b8335e6b0ba5c8995935b42ec4a5fdd2d85222a6986005","sha512":"b89bc29c996da7078fb8c701496a6026032b44ca9fac23e2e6beb81af43163c90b292fc2768cd72588eb3181e74407190693bf28e8aa305e5964db964cfdf22b","ssdeep":"","tlshash":"ba310a8f9dd459e6cd3a52314ef12d365913448ece363343c95e4724f89a97805ca038","first_seen":"2026-05-24T00:26:35.404467Z","last_seen":"2026-05-24T00:27:44.388163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxedout.cn/ducky.js","fqdn":"pxedout.cn","domain":"pxedout.cn","tld":"cn"},"ip":{"addr":"45.194.143.204","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pxedout.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:09:56 GMT","end":"Wed, 19 Aug 2026 14:09:55 GMT"},"fingerprint":{"sha1":"96:4E:C8:31:34:C9:6A:DE:9D:46:19:42:DA:DA:77:88:D7:DC:78:EB","sha256":"EE:CD:F0:53:2E:F4:7B:72:D4:17:86:A6:D1:F3:ED:B6:19:4B:EA:96:19:C7:84:D3:C4:67:AF:A3:97:0B:27:DF"}}},"request":{"raw":"GET /ducky.js HTTP/1.1\r\nHost: pxedout.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 981\r\nlast-modified: Thu, 21 May 2026 15:10:28 GMT\r\netag: \"6a0f2064-3d5\"\r\nexpires: Sun, 24 May 2026 12:27:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":981,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"8e63f7f3d1b97a4e7acf4adf300eb152","sha1":"5dd969728e11783401a8e335f6d3514b09fc9e5c","sha256":"1301ffbac8a6d8d078d9a8e17346d6b458154a037ade3afbeb7d90eb08e4b242","sha512":"013c018d5fd9559141278d77ed3468fa2ef5aff3ced7bbe6a2d0a2e5a11dee2f01a700b99fd5160a11cc6343a06f71f2b4637e13e8d8cc275ececc0bedb0a511","ssdeep":"","tlshash":"2011257481d3b93941329454f5a2c34420b5d025fb17db0b76af6f940ccab64846bcec","first_seen":"2026-05-24T00:26:35.257871Z","last_seen":"2026-05-24T00:27:44.393914Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1397,"timings":{"blocked":572,"dns":220,"connect":198,"send":0,"wait":198,"receive":1,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/bvi_footer.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/bvi_footer.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-986\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 156 x 37, 8-bit colormap, non-interlaced","md5":"148b5e04990558a40ea48f236eb643bb","sha1":"86c6b16cc0f8829fed3a39dd09b7fff826c63b12","sha256":"d9d87f7cdd09a2a3947525882727b0d5b4dfa7092e32a5fcd8ae08dd7bb27f5e","sha512":"59529c0edaa599bc98caa9666d12a12440d3d1b5bae7268805d8b488f53ca113cd1059b5c26874ee2310b583d07698513c4001eb6bc62f2826a8e31f5a8f6e25","ssdeep":"","tlshash":"3e411deb941551b0c8ffa6f9c29354256138e12d171c55d7d04f9856d8bc3d1317410f","first_seen":"2023-05-07T18:09:45Z","last_seen":"2026-05-24T00:27:44.398285Z","times_seen":51,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/css/all.min.css","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /static/css/all.min.css HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2026 13:14:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0db3c6-19031\"\r\nexpires: Tue, 23 Jun 2026 00:27:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102449,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"c5d7a543058d0e434e1d13ebaf6d3797","sha1":"ebfb61bc1d00dd6a21cba56af1b6a80fa2b2d804","sha256":"14f496aea177c7cf00783225f3983fd8f867ff459c2eefcf3e83b11166a509cc","sha512":"7d59ec0bc2afd18c1024b1fc15f63ed855d1133f836dea06bb647d3945d8c32f591895e2e147c5fc3a093781ec0fb7d5fe1f8a37d6321744c86e61e24b8f5cd0","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9vpgmLCS:P709gMGFiyPG9vimLCS","tlshash":"b7a3b7e9e44c15d97732c44beb85b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2026-03-14T13:12:59.342115Z","last_seen":"2026-08-04T00:16:42.562607Z","times_seen":27,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/css/saishi.css","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /static/css/saishi.css HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2026 13:14:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0db3c6-78b8\"\r\nexpires: Tue, 23 Jun 2026 00:27:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30904,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30901), with no line terminators","md5":"3c4819db60095c4cf7892e8c235b2590","sha1":"ba9053a875b8c7c065e9938b54707dc1c0e131d9","sha256":"cc2ccbac2768698080ba72046c6265d2bf258adea2546c6abe453485f490d9b5","sha512":"d27edab13933a1317f8b12398eb87c0c6e0ddd1342d5a18b5c86857369628bf2759eaa79f4cde4f04f93316577075cc03bf4154a21d949ca30dba7cc165865b4","ssdeep":"768:yD8dQN3RkOMlIgb7dpFXHKXrOd+nX7dbvYeNlEZHcqjVFGW:pk3RMWeNjV","tlshash":"7ed293f3a25e356c3437f4a6a40066cbb0658857e03b07bbd5927334c4c542b2ba6b9f","first_seen":"2026-05-24T00:26:35.312571Z","last_seen":"2026-07-19T20:09:34.257198Z","times_seen":6,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/hth3.webp","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/hth3.webp HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6442\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\netag: \"6a0d7b6f-192a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6442,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 592x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d695e77bc8015f41cf60b3a29dec3da","sha1":"37a2188bdac8f14345e4ef93ed65906725a30dda","sha256":"2ee8f630c643dd8517567e6b8afb8f76e1f80ec1f14c66205fc2f63138ebef38","sha512":"f0b094dc616d23906120c25f827c55fd2a71646b3280b60616333925797e56f5dbaf79203ce4b53417b8c1549f8f5a60e4dd1a4f9b83c4acc182049c94e5d1ce","ssdeep":"96:CFZfq0MTcUQRr9wexAJqRhb16SdDuyT6Zztj/IvVpIteLbtCw+VeTI5qKYfkTDCb:qkcbqVJUj6SdDuZxjgtpI0Lp9AOb","tlshash":"e0d1a052b573b802b94ce5abfc4373a805f1912c5a112576ebac0f13cd3771a16285bf","first_seen":"2026-05-24T00:26:35.38712Z","last_seen":"2026-05-24T00:27:44.413741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/asia_gaming.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/asia_gaming.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-802\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 100, 8-bit colormap, non-interlaced","md5":"0ab407814f0c323953162e4cf9335fc0","sha1":"ce9e8d93a41894b1a890f21e2b1e4052c1788ea3","sha256":"5c2cfc79b6364bda97b5451181d55dcb56d707fc906011bb735a47bda27491b5","sha512":"9035748468c3d2808d08572bb4a9b0209744cdeaac7f45fe634fc3056157300f8b841df37e3272c0761d89d0fc556b4a9f959c81ae2d77d57d5a2884fad46130","ssdeep":"","tlshash":"fa412ceed5a7c579503b58b912e30274358f4d6b5371276c7513a236288f165643093a","first_seen":"2025-05-13T03:21:41.664271Z","last_seen":"2026-06-05T11:36:25.352378Z","times_seen":37,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/parcor_footer.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/parcor_footer.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-649\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 188 x 37, 8-bit colormap, non-interlaced","md5":"e4bc0d8e029a6de49b738cb0ba049167","sha1":"ef614ce96aa476a77ebfaa5eda9844813b8dc36d","sha256":"a8c242cfdab0560e85c45af94c34d06a8b678487dede0cbc15a561ab662a3dad","sha512":"8f79891fc5654878d0a350fce3920548c5ed52d88938b1213c96aba8bdf8b94d68b18b48cfa1f25f09caea089f91120e99b7820f6f62a34015f74f9bc63a0514","ssdeep":"","tlshash":"2e31b7c0db11b7ef1815e4ac28e9ed88c50755468742d60ba6a6f7a375882571d480d1","first_seen":"2023-05-07T18:09:45Z","last_seen":"2026-05-24T00:27:44.420269Z","times_seen":51,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":705,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?3eea9d4bc7e467312b20946a65a9ef38","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:23.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?3eea9d4bc7e467312b20946a65a9ef38 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11291\r\nContent-Type: application/javascript\r\nDate: Sun, 24 May 2026 00:27:23 GMT\r\nEtag: c5443cb5422b580db062a9701cebbe45\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=739E3B92CD7228DF; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29897,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (621)","md5":"2a47b1843ed29a4317bea0ebdd358088","sha1":"57e886d34f4bd099d221d5c653c1a9b15c5a076a","sha256":"91c7ed245dd706b7fc82e0a2fb0235ba9f041f402f8f7da84f2f84441aefd49b","sha512":"557e62313e8e369de9c9708a58b3be12f9a697b0009d315fe7d1fd6d5a811eb64c3afe3216b76d5a9ce359a79feff4474604e1c1bdfb95ccfd0ba51ccae477b0","ssdeep":"384:fmJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:fm4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"b0d2dae9b282713293a324a5153f324af07b5a54bd4968a4f11994c07d38fbb027bfdd","first_seen":"2026-05-24T00:27:44.423235Z","last_seen":"2026-05-24T00:27:44.423235Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1566,"timings":{"blocked":644,"dns":1,"connect":211,"send":0,"wait":276,"receive":1,"ssl":430},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/sgwin.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/sgwin.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-108e\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 60, 8-bit colormap, non-interlaced","md5":"45401c4e7fb611f73e5738100190529b","sha1":"92e140fca1034d4ed8a3d62be91e994d728b141a","sha256":"45db6df1536023fabe27427bb2eb006640e2aa48a395e52d52594ac59693c248","sha512":"aed561b9e8dbc03310cb3358687c1d1ab2ba96546dd63ee28fbd2f11f52780929990172782f2919e844ae9e7018c010c7f7d9f26ecd50125821c92a1170269d8","ssdeep":"96:DCenUgbSiZlhYjBmtK2P1z0/QvPB1p6CK1SfBXU2sSoGDrLEgARdeQj5x:eCUSSiZbMmdN0/u96CdXUgDcRdeG5x","tlshash":"21917cde0522b5390974ad761cbc0fb4e9aba1a76e0ad6d22283c802349445cf72b3f1","first_seen":"2026-05-24T00:26:35.407746Z","last_seen":"2026-06-13T03:56:40.767648Z","times_seen":3,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/css/ducky.css","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/css/ducky.css HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-125b\"\r\nexpires: Sun, 24 May 2026 12:27:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4699,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"73243c804048e28c5920dc158727a2e6","sha1":"13210e7e2d4aff9ee208f8f705c328e5379ade2a","sha256":"0a7b0af665fb17bf35bc78931e4885a403e0ea9e2b9fd6d321909f3ba4d73d21","sha512":"363a9ea7c680bfd9a36e50135da8679a519767c54090eca3d30b3b84f8fa027e0c351ae9da14f4d2e391bba97232cfbb47603757417edb50da4877c94c823cba","ssdeep":"96:eJvl4b/uwUtrFeB/mUtrSx/6RU/dTUofPaPtof81tN:eJvl4bjUtrFeB/mUtrSx/6RU/dTUofCJ","tlshash":"43a110a55ba31809b94fd0a41ffe5310722e8487961fdc6d7a9d3289cf8e0c45a93bd8","first_seen":"2026-05-24T00:26:35.334647Z","last_seen":"2026-05-24T00:27:44.447634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/font/fa-solid-900.woff2","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:21.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /static/font/fa-solid-900.woff2 HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/static/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158220\r\nlast-modified: Wed, 20 May 2026 13:14:55 GMT\r\netag: \"6a0db3cf-26a0c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-08-17T23:29:23.068166Z","times_seen":33868,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/big_gaming.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/big_gaming.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-10bc\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 100, 8-bit colormap, non-interlaced","md5":"29c7080df2ee907d5682f95bc5091d74","sha1":"682eef9cf4ad8f58b4da6b8109fe77e8ce18667e","sha256":"3b6ecff9d1bca5f1f8e5bb1998e2007a37e82253682220aab345121281aade55","sha512":"b7c5fd633f057dd28addd6028cbcb43b6b66192db89d6897c1d4ebfb0beabde0c60fb7638057a3d80bf158c84a643a2bb10391b6c8d53034a4c2c648dd512852","ssdeep":"96:k7omWSrfz6F54zWDEe/kgMvhH4BVFCG/mp8wNJHDcHkgce+/H:WlWSHKge8KeB4kzewH","tlshash":"c1916d481c0a8579b5dbe9dcf0e5485e96914e9c83a742241633bbf226b930be673463","first_seen":"2025-05-13T03:21:41.688647Z","last_seen":"2026-06-05T11:36:25.344693Z","times_seen":37,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/oriental_game.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/oriental_game.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-959\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 100, 8-bit colormap, non-interlaced","md5":"d7ed0820755d3a0b9184124a38621ced","sha1":"2b48a9e775e3b5a1666603f9f2ffd347b2d76643","sha256":"5862b3cf8867ade577f6617ef4f0648a78f6018f0498fd432777b618f4426321","sha512":"e16a36c2ca9b262d9927f75e5e9c6708941c188755b8126fd6e263d58183dba341d40bfb5f24285bcb19ad41d7015b8fd450330e53d11e62161aca503c5f3243","ssdeep":"","tlshash":"80412b1b08cf9ded5f31cf7261c0051e2ee3a9db08359b526871242690a7e5564d968f","first_seen":"2025-05-13T03:21:41.694702Z","last_seen":"2026-06-05T11:36:25.318313Z","times_seen":37,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/gaodengqipai.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/gaodengqipai.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-28b3\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 190 x 100, 8-bit colormap, non-interlaced","md5":"71ddaef551fddc000b1cdb7037aeabb1","sha1":"15b9896b61e7fa43dce15ba416de0676f0c2296c","sha256":"1c3f20a6ea280733488579528579461e0161ee4a5ed946569f0d27ec3a707231","sha512":"7e41134eb3aea18ec5564f39c8934c22edddd278b367f38e1ef9da3e64d4fe366aef50e917ff81d64723d61dc183c0f131ba44b42a53b4e8b5c4fbfcc09a248d","ssdeep":"192:k/SIyHSJrfs0V0t0ML6CHMlps9q/fsdc/V2LF2:kjNJrI+MLH228/p9I2","tlshash":"2322d1c2554da33bbb6e5b976230c64088fc2f687c2779761884f6c903742c8e522b8f","first_seen":"2025-05-13T03:21:41.665295Z","last_seen":"2026-06-05T11:36:25.34059Z","times_seen":37,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":705,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/static/css/module.css","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:20.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /static/css/module.css HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2026 13:14:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0db3c7-28349\"\r\nexpires: Tue, 23 Jun 2026 00:27:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164681,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65535)","md5":"cb26efc9c758f4c9613215d046b4c4e4","sha1":"25631a0448dce3a037a5d5d3866ca16c4a2da2d2","sha256":"2bca0788e7177d57e207f602f3efe11d8b34746f4da4dd662e8b55b02fe46cf7","sha512":"feec15d6a77dfc4badb97f301bef2dcc4e38ad47858098bc070ec2a9b2b4ee3c66c7536acbfbf08bd6271a94505d20e13ce8703e1fcc5229aaa980e2b37e4251","ssdeep":"1536:biVj2AhHm0CfrtrPr7AhhTQbdf6UZH2GXVxICl1gGrhtAFFp4L/Xzbv9ALVTFWed:zAhhTQV6UZpxNs5Z","tlshash":"0ff397309984202cf11bc5eae5d0abef72649c01f663077ef66370a6d6c21ef567670a","first_seen":"2026-05-24T00:26:35.32483Z","last_seen":"2026-07-19T20:09:34.24181Z","times_seen":6,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-xingkongzh.com.cn/images/why2-1.webp","fqdn":"login-xingkongzh.com.cn","domain":"login-xingkongzh.com.cn","tld":"com.cn"},"ip":{"addr":"201.5.126.162","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://login-xingkongzh.com.cn/","date":"2026-05-24T00:27:21.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.login-xingkongzh.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 14:42:31 GMT","end":"Thu, 20 Aug 2026 14:42:30 GMT"},"fingerprint":{"sha1":"C3:AC:84:5A:4A:B5:30:8A:63:C1:C4:BF:B5:50:19:61:BA:30:6C:72","sha256":"B0:54:D5:97:B7:17:7A:7C:4B:C8:C8:A5:B5:AE:88:5C:28:68:A8:C4:C1:E8:D7:64:33:19:D8:38:33:EE:A8:65"}}},"request":{"raw":"GET /images/why2-1.webp HTTP/1.1\r\nHost: login-xingkongzh.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-xingkongzh.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 121906\r\nlast-modified: Wed, 20 May 2026 13:13:30 GMT\r\netag: \"6a0db37a-1dc32\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121906,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 638x452, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"39eb76ce9be82b57ac0a068ab8be5596","sha1":"5dd1bfdff03a27005c3ef574817e9bd144bfa69d","sha256":"f46467e3b45c1f941c8eb0d014aec2cc22a49d100986c06c4f8dc4e096642c02","sha512":"14b568e1d1ba9929fe86a9c38019a81465d6274dd06bfac539bc05c77ef2115231080a93a0ba08f0abbaa970a4a1dd52e458765dcf0505d3ae8e4da263a4417c","ssdeep":"3072:3Qt5NevbAhlaFN5jxkPkoY8IXE8MjrfBQ36Qn1Mb55BsP4UngF4R:3Y4zACFfeMV8IXzAf69nu55uwpF4R","tlshash":"79c312d8397ab2437728d76823905fa0768313147edfc0161692bed6bad86fd40b485f","first_seen":"2026-05-24T00:26:35.398666Z","last_seen":"2026-05-24T00:27:44.463671Z","times_seen":2,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"login-xingkongzh.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/tc_gaming.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/tc_gaming.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-b18\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit colormap, non-interlaced","md5":"cfa9828da94ac52c20864c8613b3a6fa","sha1":"16b33ccf8351a4b1fda11555e583db958f7919f8","sha256":"534022b666c0de96237a580071c84d1566fc26cebb6cf67b450423e0d013c1a0","sha512":"2a1f3674ea15288553d585065e20918f9b695b5f081c8775028b745becd69480786aa101f1cbfd6061e9aed72d8f3d2437a84f843de3e0005e92d0313f43c4b4","ssdeep":"","tlshash":"fc5119eea88e5a024a515cf2185128306e32f398e317b1a2db69f067748749623f82c9","first_seen":"2026-05-24T00:26:35.212017Z","last_seen":"2026-05-24T00:27:44.466767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hud360.cn/abcxyz/static/images/mga_footer.png","fqdn":"hud360.cn","domain":"hud360.cn","tld":"cn"},"ip":{"addr":"38.238.159.75","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:22.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hud360.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 14:12:25 GMT","end":"Wed, 19 Aug 2026 14:12:24 GMT"},"fingerprint":{"sha1":"AD:FE:97:70:38:5D:D6:09:6F:4B:18:D4:68:36:22:4E:58:B0:94:03","sha256":"15:F1:75:44:4C:41:CA:E5:1D:83:FC:E1:D2:3A:42:37:35:8D:0F:11:88:B3:7D:B8:C3:F6:44:C1:BE:02:72:E5"}}},"request":{"raw":"GET /abcxyz/static/images/mga_footer.png HTTP/1.1\r\nHost: hud360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/ldy/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 00:27:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 09:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0d7b6f-8c6\"\r\nexpires: Tue, 23 Jun 2026 00:27:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 289 x 37, 8-bit colormap, non-interlaced","md5":"3a55e1290970bd168e8fa190f7e1e01d","sha1":"6c9c1143ee19bba91d86e3c8520c187d5308caf2","sha256":"115415e5936b758b0116705072eb978baeada9b5bfa1ab846fc305384b687945","sha512":"902e0796d8fe69190e46bfef96f6316292297d970a1ea7ec545896d2f7b705e77d51a55ed90930436cf250299d58fe15c8aec5a7cbefd0d6087ea1b679475939","ssdeep":"","tlshash":"7341293a7eb2339c9ddb811f1ae5a348ee63468a4d022c10b313e02b0d5d451ac7f71e","first_seen":"2023-05-07T18:09:45Z","last_seen":"2026-05-24T00:27:44.469962Z","times_seen":51,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=739E3B92CD7228DF\u0026cc=0\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1204953690\u0026si=3eea9d4bc7e467312b20946a65a9ef38\u0026su=https%3A%2F%2Flogin-xingkongzh.com.cn%2F\u0026v=1.3.2\u0026lv=1\u0026sn=45054\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fhud360.cn%2Fldy%2Findex.html\u0026tt=%E5%BC%80%E4%BA%91%7C%E5%8D%8E%E4%BD%93%E4%BC%9A%7C%E4%B9%9D%E6%B8%B8-%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hud360.cn/ldy/index.html","date":"2026-05-24T00:27:24.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=739E3B92CD7228DF\u0026cc=0\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1204953690\u0026si=3eea9d4bc7e467312b20946a65a9ef38\u0026su=https%3A%2F%2Flogin-xingkongzh.com.cn%2F\u0026v=1.3.2\u0026lv=1\u0026sn=45054\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fhud360.cn%2Fldy%2Findex.html\u0026tt=%E5%BC%80%E4%BA%91%7C%E5%8D%8E%E4%BD%93%E4%BC%9A%7C%E4%B9%9D%E6%B8%B8-%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hud360.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Sun, 24 May 2026 00:27:24 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=59EDD13B56816E7E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-17T23:12:12.158965Z","times_seen":377106,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}