{"report_id":"efa165af-fe3c-4d8f-8b3b-15e40e742241","version":0,"status":"done","tags":[],"date":"2026-09-11T01:36:30Z","url":{"schema":"http","addr":"jinsia.com/","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":0,"asn":54600,"as":"PEG TECH INC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"jinsia.com/","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"title":"樱花视影免费追剧 最新热门电影电视剧· 在线影院 | 免费影视大全","dom":{"size":27363,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (381)","md5":"f78182b600ca9fca9de8b7f27edcc396","sha1":"41332cdd74087e7af86f2cd39697fdd8e0312f45","sha256":"c93c57d7d0383fca7b384b7e285951fc1476b308d1a556e50c35a81ab6fa76b8","sha512":"6d91cf5030ebfbf42c58fca9ed69b257cfc80d375ae316a76a0d36c398e9a58fd22dad5ac3172f1ce26f8f9ac08202b231468125b68133271010703c282aefe6","ssdeep":"384:S+x1H2/2tK15D6P6FFDWN/7xUDFRzGGyI+zPNsxdMyeCw:m/2tK15D6SfDc/lUDFRzGGyI+zPWl4","tlshash":"e8c2947291a2102b566bf4d6b4e7930e31e7c34ec8838d6532fc6368dbcad51ba5720d","dom_hash":"domhash63efa7234382dbb256125973fa14e968","first_seen":"2026-09-11T01:36:40.916325Z","last_seen":"2026-09-11T01:36:40.916325Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"jinsia.com/","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":0,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T01:36:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"shandian.dz002.com","ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-09-23","domain_rank":0,"first_seen":"2026-09-11T01:36:31.246867Z","last_seen":"2026-09-11T01:36:31.246867Z","alert_count":18,"request_count":18,"received_data":808494,"sent_data":10533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jinsia.com","ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":60,"request_count":12,"received_data":31548,"sent_data":6040,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"baofeng.51weizhang.cn","ip":{"addr":"104.19.231.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-02","domain_rank":0,"first_seen":"2025-11-26T11:06:47.507464Z","last_seen":"2026-08-01T05:32:03.644736Z","alert_count":0,"request_count":2,"received_data":719924,"sent_data":1115,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"feifan.51weizhang.cn","ip":{"addr":"104.18.111.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-02","domain_rank":0,"first_seen":"2026-06-18T14:01:38.202564Z","last_seen":"2026-08-05T21:43:59.352518Z","alert_count":0,"request_count":2,"received_data":837744,"sent_data":1098,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jinsia.com/","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ce7c97a779c1ec04c0e7d103cc48606","sha1":"fcae7bae14744fb8001cb883e9b038de9ad21dbc","sha256":"deb350f44e229cd03a29bc15876891224f1f4908bed441f72c3cf3d8b0c282da","sha512":"a7cf2fd9c23d0ed9597e05eb976f6aa7d206ea3bdadd72c2724f228c4ced3404bf5613f530a6c6669f972c92e2166a3bb8370b19c95315f67c5bd55d8e72ef34","ssdeep":"96:6p2SdFVq2UO9L90Led5aUaxJeqtP7gK/mqv:U2STYPeHaveC7gnU","tlshash":"acb161b733a3403a1e47e9ef40d3668e793c536b88d3e8d1c97c6380e361a5661ab50c","size":5466,"data":"","first_seen":"2026-09-11T01:36:40.965328Z","last_seen":"2026-09-11T01:36:40.965328Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20251206-64/55404cc89730a4e986a9a8ddeaf32515.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.816Z","timestamp":1789090552816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20251206-64/55404cc89730a4e986a9a8ddeaf32515.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 13:54:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6934358b-7b54\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EBmYXzHWp61GJJpCH%2Fn2IeDi560SbsE5O0WjNUHT4CpD8jqhpvsFyC0oICkzlr4u8qbxXfWsFNcg4w8BaXAqm1yMgAfC5rkhFdx%2FbgxBX70TuiNQny4RlnC84xp8g2Ajc15q59g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad42b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31572,"size_decoded":32208,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x378, components 3","md5":"880d847053d96e47aec3f07cfdc45f26","sha1":"ef239f5cb0a5ae7a2c41c8f8976a03d14b3cb14b","sha256":"bd05d934da8667b26bd939744514a38130a1d9e242fc2e7baba602e627ab4878","sha512":"6e0c4ad6de44f5daa1bd178c9f6a9dc3ddab6cbb2ead7dbf06b247bfcc442e460d4794c629335e13115aae9769d8da989d4d13215d0b0986fe4007f00840710c","ssdeep":"768:2m5w7o8mxTdKV6meYGp4eiX25GOepccc/Omd4KW:24w72dO6meYGp4DX2uykmuKW","tlshash":"d2e2e1073c967c955322e3b04ba40f4829cfd73da79daa254c24d1d6e939ef218b686c","first_seen":"2023-05-30T18:47:51Z","last_seen":"2026-09-11T01:36:40.920325Z","times_seen":40,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":390,"connect":3,"send":0,"wait":635,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/template/a_0004/css/iconfont.css?v=20230420","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.594Z","timestamp":1789090552594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET /template/a_0004/css/iconfont.css?v=20230420 HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\netag: \"6a92a175-8c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"710df0a9fd3319ce46d908acb4262389","sha1":"9b77218ed9b4d20918c17302b288bf6194ac874b","sha256":"aa3cf0871f04876f5d031a35ea6b8ebaf20d8679ee343a5958552691fe404421","sha512":"bcb605e3305d637dc3505bf2e4656bc09d2bc1fae312b60b7c675e6e371daf79d572ead3358e73d58aed685094081d3f02d9362b4a6d4d90d4a0566f235ee67b","ssdeep":"","tlshash":"96c09b5d755356485913156167c33641d197837fa8aa84510943c593e0cf69ac4c73a9","first_seen":"2026-01-08T09:45:31.423944Z","last_seen":"2026-09-11T01:36:40.922783Z","times_seen":32,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260626-1/3203e95b623dda73076876cf87bd3736.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.820Z","timestamp":1789090552820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260626-1/3203e95b623dda73076876cf87bd3736.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 01:36:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 25 Jun 2026 18:00:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3d6ca3-a954\"\r\nexpires: Sun, 11 Oct 2026 01:36:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECC6FapapcrPOwoRaDA56TckihJ3ce6NsNfkpNjA3pIkveeNwo%2F1kuz3JhviSxoGTrHKdE7wOekE%2B%2BEfg6skMcozHTOGbG63O7YrLChnn2OHNXye0aC1iuO8L4mYLgo1r6VBxvM%3D\"}]}\r\npriority: u=4,i\r\ncf-ray: a392f05ef9de56c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43348,"size_decoded":43867,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 270x381, components 3","md5":"2ec6c729e064df1e6306c6a67c411a21","sha1":"9d0f1186ebf97da54be9d61be332e7bce4fc2071","sha256":"58bbe4c5c3bb32cae60e6b28456d12e07648a26b26a7a0379ad5fde58b947be8","sha512":"4bb9cea165ace8c2cd82198fbb15a795a801b91cabb8961973774551a4b8f2064c6f1332a3f79f4d0bab9940eb36d375508031fb686e8e4653855b9300833eaf","ssdeep":"768:PlRk8xMu8xnc4xYb3GFtNihdTbi9eoXQJtfQGQk+2LDugGWhaU96GY+tcAKSmApV:P88Kxnr6uN59eogJtfTD+erL96p+tche","tlshash":"b913016ec94b9b2006cf01681f9683e538c2df33ec5a74a9afed483b455986477d406b","first_seen":"2026-09-11T01:36:40.926186Z","last_seen":"2026-09-11T01:36:40.926186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7801,"timings":{"blocked":-1,"dns":387,"connect":3,"send":0,"wait":638,"receive":150,"ssl":6619},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260825-1/7562efe00f3f8c6f94289ba4b27e4c83.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.825Z","timestamp":1789090552825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260825-1/7562efe00f3f8c6f94289ba4b27e4c83.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 04:30:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8d1a4a-86c7\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csblqXDw%2FbDO4CeikdBrH%2BW7eQ9sby8otTFoACV4N6NsMGi7503G8MNnsNqVr9yFKVtqGoGmMUr1hMHcAGXkgDGVGJ%2FohkYYT8LQg75Ope2MrV0y%2FCHswRSvs1vUE%2BZ0qo9aSIc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad4cb51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34503,"size_decoded":35155,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x381, components 3","md5":"c4b809ebbf4f5624c97acedf290f5096","sha1":"8bc082794973d35f318e36a77ac9e139d7911701","sha256":"5981bf3e8d2b1bc671cc005d26f37ccc77294ef7fd43d99e3f09e1ae063754d3","sha512":"567deaad1aa1dd16d8eb22c16728e1ffa7c5cffe8147f80373ffe83fd7f84bc72f833ed837797d1229140fab470e4f4d532f400be6a005bff7f2c4ea9b12d58a","ssdeep":"768:luXU4sG+gisSXn39YBhMC5XTLVSrAFoeb3lsX1yBpAqpbk7YsC2p2QTL9Q:luE4sG+g0ntYBhNhw0oe5sABONE+nVQ","tlshash":"92f2f1519f1c226b2e854cf0de8a5138b9148badf58651a6d3fc1578330dcf6f744ab4","first_seen":"2026-09-11T01:36:40.929312Z","last_seen":"2026-09-11T01:36:40.929312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260825-1/341c17cafcddd041516f7a8a3537391b.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.826Z","timestamp":1789090552826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260825-1/341c17cafcddd041516f7a8a3537391b.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 03:30:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8d0c3a-8366\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41uGGhOvurAY0xNqcE52Mkla5WyyLfXzJk30y6MBObJ6e7byQNC8QUhf4evyfDZHFPVQeasz4kYZ1ZTr3MxGG6PObX%2Barxq2rpJgGlJHhUWooJCjy90rDWJbO%2B0CAXL3gcOqd%2F0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad4eb51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33638,"size_decoded":34286,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x405, components 3","md5":"d91b1df9f3d9191f16ad0792325ecaeb","sha1":"c4118d9a7ed641cd924b207983dda0bf189c0a5b","sha256":"45181af74ac8f7527ad48d39d38f3deca1b3b58ebeef99439c6e300bbaa7d64b","sha512":"8acb3975492b16b779afbb4e1f8564d64729a4dbd3fe1db09dcea58ddb6e6691cb3e3af38e599c27a92d03d412738a1f527f4c4af9f1c6bd6dd39104b35ddad0","ssdeep":"768:9SEcop75qOFXS49Pe2+LMTVqahjelrGI87W:9SHiDdRefwT7hjUky","tlshash":"b3e2f2174d0092d1d7ab0be9dcbd6699386ca892eb13ed3ec1469b5c08e4f7991830dd","first_seen":"2026-09-11T01:36:40.93082Z","last_seen":"2026-09-11T01:36:40.93082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":962,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260825-1/4c85cefd3bc4c1e7b02dcc0070369bb8.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.830Z","timestamp":1789090552830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260825-1/4c85cefd3bc4c1e7b02dcc0070369bb8.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 06:00:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8d2f62-59f9\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Yygc8yXC8%2Fc7D1WICECHLSetW7pTXHR0MdE0zp5whEYS1qlDhxToU8nnaSjSTlDCpfeh%2BgRzD75BQmknWEMjxYEVpkKtS8KMSFckf%2BM2CYtldDcEhXruz26qG1rFjguBdnqJ8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad56b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23033,"size_decoded":23675,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x405, components 3","md5":"f48d831e9fa2cc2c1ce2e28e61dd316b","sha1":"516b13735a43a59285311b6315833c2627f4ca6e","sha256":"a642351fae0efc794a4cfb73aa74fd1e0820ffde3008b6df52bb7d4a684f65e9","sha512":"03a5fdba7d4a4d995a67c299133a960c7436c3c5939d6995eab1b0a2b117f0eb2df1af611e2ab1e3fabcbd26ffcabe6bcad7ed434c43494129b369b174b01c1b","ssdeep":"384:9IpAjGFHEyXRrjMxToHOWv/KCgm+xCOYYTsl4KyDAagXyByou9mU+1ZaJcKnoW:9wxq+MopKCgP7AluAxXywoXxLLpW","tlshash":"46a2e108a5730a988b4ee6f5945350357077cbb9ba26ea31f39c178a58cdebc05215ce","first_seen":"2026-09-11T01:36:40.932473Z","last_seen":"2026-09-11T01:36:40.932473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":987,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260708-1/dd648ec2b10ca77133ca7e3e210c0043.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.833Z","timestamp":1789090552833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260708-1/dd648ec2b10ca77133ca7e3e210c0043.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Jul 2026 11:30:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e34c1-8cb3\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2IaKIS%2BN98TvUGgx7o%2FQYa4I52p6KiAx7%2FhCA22ANgQTAT5MmkRkF3QvX1zNymD%2FxLQTgYdX%2BAo7Z%2FXaymtYfbaVm2kj4v1o66587rAWpvq9qFYTjCOP1FlRc42diMY%2FyAMnks8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad5ab51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36019,"size_decoded":36671,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x405, components 3","md5":"6a79e0b4a934921ae47fcc4cbaff2bfc","sha1":"25ca54dd6c4bea14e81ff24d83168dc6012e81b1","sha256":"7caa3dce0ea66d5aaff9eebda4ff4ade84ea2b23e1f0bf45bf7bb09f181c3f9f","sha512":"0661669c4856c776ad3bddc0596e8ff77918c85afef18ec54975730fffc050c4650aac7c9580594b845376fe6acc0d736a65ed133723ab400412070971af76fb","ssdeep":"768:9adZWzTma17nOhXmN9pD/Q3TMg3Z6fnfoewXUc8WG:9adZWzH0X89pITv3ZUnftqUhr","tlshash":"05f2d12153234b27d37bb9634bb81a72e2eac5cc33f2d5b14020cf48ea54e765159a9f","first_seen":"2026-09-11T01:36:40.933753Z","last_seen":"2026-09-11T01:36:40.933753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/template/a_0004/icon_f/icon_1.png","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.606Z","timestamp":1789090552606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET /template/a_0004/icon_f/icon_1.png HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\netag: \"6a92a175-8c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"710df0a9fd3319ce46d908acb4262389","sha1":"9b77218ed9b4d20918c17302b288bf6194ac874b","sha256":"aa3cf0871f04876f5d031a35ea6b8ebaf20d8679ee343a5958552691fe404421","sha512":"bcb605e3305d637dc3505bf2e4656bc09d2bc1fae312b60b7c675e6e371daf79d572ead3358e73d58aed685094081d3f02d9362b4a6d4d90d4a0566f235ee67b","ssdeep":"","tlshash":"96c09b5d755356485913156167c33641d197837fa8aa84510943c593e0cf69ac4c73a9","first_seen":"2026-01-08T09:45:31.423944Z","last_seen":"2026-09-11T01:36:40.922783Z","times_seen":32,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baofeng.51weizhang.cn/slide/mangmangluluxunbaozang.jpg","fqdn":"baofeng.51weizhang.cn","domain":"51weizhang.cn","tld":"cn"},"ip":{"addr":"104.19.231.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.807Z","timestamp":1789090552807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baofeng.51weizhang.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 15:28:23 GMT","end":"Thu, 05 Nov 2026 16:28:20 GMT"},"fingerprint":{"sha1":"D7:55:9E:AE:14:AC:54:75:D2:0E:DC:CD:7A:F4:A2:37:FB:18:B2:DB","sha256":"A0:1F:9B:9F:3A:E5:A6:0C:DE:23:3A:87:1E:63:C0:B0:4E:96:C9:B5:82:49:B9:BF:B3:D0:A2:99:CA:A1:DD:51"}}},"request":{"raw":"GET /slide/mangmangluluxunbaozang.jpg HTTP/1.1\r\nHost: baofeng.51weizhang.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:54 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Jul 2026 02:54:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a55a4cf-5879e\"\r\nexpires: Sun, 11 Oct 2026 01:35:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rK1nmd%2B4yzmT3koOV5v%2FFVpwHUcbTyHBNuRmUD1zB7g%2BfvdetCuE39z%2FA5LGQN87NtMX9uuNwzYT2hP6%2B7tXn4I9dSAltC92rZtjZRidDRui%2BDZlxBoWGorebEs0T8YWx0sIiGI3CPE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f0370ca2723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362398,"size_decoded":358851,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x650, components 3","md5":"399d158a65a5c294a911410f66a4b8e8","sha1":"b0233896d6ff2a47f48876c96979266f8de8c98e","sha256":"4f2cb4fb21866d4ceb6aa2e51bdbc565b941deaf05fe1c8d30733df2f666e478","sha512":"91d7ee0d7600e3c9a50d8a267da3c065df0fb251502e50c26d3bd6c76896922817ce57381fa209fb341bc3abcb86597eec5d265b623753a499d7af361f2e3856","ssdeep":"6144:zejDUnxbJihjBnnpDUByN/sjqTNIzjMUIqmsd0jggj3Z9v92QGhFJ4c0CX0Ndqpm:zesnxsdBnFUMSjINejlJd0nAFJ4ctJK1","tlshash":"0174228ef24a0a01ec8b051ff052548a8ffb507aa90632f87b313ef7959b589ce75517","first_seen":"2026-07-22T00:01:27.553371Z","last_seen":"2026-09-11T01:36:40.935027Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1465,"timings":{"blocked":-1,"dns":627,"connect":1,"send":0,"wait":828,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/template/a_0004/icon_f/icon_2.png","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.607Z","timestamp":1789090552607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET /template/a_0004/icon_f/icon_2.png HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\netag: \"6a92a175-8c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"710df0a9fd3319ce46d908acb4262389","sha1":"9b77218ed9b4d20918c17302b288bf6194ac874b","sha256":"aa3cf0871f04876f5d031a35ea6b8ebaf20d8679ee343a5958552691fe404421","sha512":"bcb605e3305d637dc3505bf2e4656bc09d2bc1fae312b60b7c675e6e371daf79d572ead3358e73d58aed685094081d3f02d9362b4a6d4d90d4a0566f235ee67b","ssdeep":"","tlshash":"96c09b5d755356485913156167c33641d197837fa8aa84510943c593e0cf69ac4c73a9","first_seen":"2026-01-08T09:45:31.423944Z","last_seen":"2026-09-11T01:36:40.922783Z","times_seen":32,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baofeng.51weizhang.cn/slide/jiejiedangjia.jpg","fqdn":"baofeng.51weizhang.cn","domain":"51weizhang.cn","tld":"cn"},"ip":{"addr":"104.19.231.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.809Z","timestamp":1789090552809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baofeng.51weizhang.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 15:28:23 GMT","end":"Thu, 05 Nov 2026 16:28:20 GMT"},"fingerprint":{"sha1":"D7:55:9E:AE:14:AC:54:75:D2:0E:DC:CD:7A:F4:A2:37:FB:18:B2:DB","sha256":"A0:1F:9B:9F:3A:E5:A6:0C:DE:23:3A:87:1E:63:C0:B0:4E:96:C9:B5:82:49:B9:BF:B3:D0:A2:99:CA:A1:DD:51"}}},"request":{"raw":"GET /slide/jiejiedangjia.jpg HTTP/1.1\r\nHost: baofeng.51weizhang.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 01:35:56 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Jul 2026 02:54:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a55a4cf-56e10\"\r\nexpires: Thu, 08 Oct 2026 12:34:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 219691\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2F7lCDlozhjU%2BHbb%2FkrwbIcC1Ixje5h6xxz6Ke9U%2FALI3JQrCPmS50TXDE4RVpAlyn%2BNFfxvC8dtsm9knXxD59SRs3df1bovKM5ZZ%2BrWPntek7LWBok03GgJsN4cqIvgF%2FshOtouOuM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a392f04bb8a523eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355856,"size_decoded":356527,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2260x744, components 3","md5":"20cd8383c5a155773e095f2572ed31f3","sha1":"07526a36e6405abbb828786654d494fdb8646c8a","sha256":"2adda0c059c40db1cf0bbc4e9e02a41270493d01f5803bb0dad2ff6076974a85","sha512":"906168daf682eb5b3c3c72ee8718562e8e30b1029b94a85d105eb8bf5077b5c68eb7d6dd0b64435a2fe5acf541e919db637488c2f9755537628ff0e0abef3b40","ssdeep":"6144:aHA/Y0HCCvqjYb4YwJ2d2zp0fMv/ETdUT/fDOkVy/Rh4j8v8TJsV7HrPJIi:rw07zh4zpNv8U/fD0gokTJsjtIi","tlshash":"a0742308739cc3f4d31b7a2de87d83936d3059d78099d5b96166f9c86b85e3c4e19b80","first_seen":"2026-08-07T04:50:20.644364Z","last_seen":"2026-09-11T01:36:40.936751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3978,"timings":{"blocked":-1,"dns":624,"connect":2,"send":0,"wait":21,"receive":12,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feifan.51weizhang.cn/slide/lingwudalu.jpg","fqdn":"feifan.51weizhang.cn","domain":"51weizhang.cn","tld":"cn"},"ip":{"addr":"104.18.111.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.812Z","timestamp":1789090552812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feifan.51weizhang.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 21:48:01 GMT","end":"Thu, 05 Nov 2026 22:47:58 GMT"},"fingerprint":{"sha1":"31:02:93:DC:60:C0:81:DA:D8:56:D3:A2:09:3F:C6:D5:3A:09:E1:5E","sha256":"06:A5:9C:EE:68:56:85:37:30:BD:81:B7:68:C6:09:41:BE:84:75:B7:7D:2B:5E:E4:21:50:3D:C7:44:0F:BC:89"}}},"request":{"raw":"GET /slide/lingwudalu.jpg HTTP/1.1\r\nHost: feifan.51weizhang.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Nov 2025 06:14:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69200351-4a423\"\r\nexpires: Thu, 08 Oct 2026 12:57:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 218292\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uPnndlFkg%2BjP46wRr95%2F37%2BBzInkOZoZy9I8rqx3FaR7f4tWl2H6iJAkfyl%2F4iYpdIpmc4YkCJ2lKJgGt3m2t19xhBw%2FCi2%2FcVT3hX%2Bx7nu7YgZgC1aItK7%2F7sdwNBwwrJkBeUoYpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f0370c3b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304163,"size_decoded":303991,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 2260x744, components 3","md5":"13f7fd095ff8de03b2ad50732dcb9d59","sha1":"08dbea605a7759859aafc7ee133a79da4f2f3830","sha256":"37030330ce5da847d3a3a10684360084f0e6da5dc67ce0caf9398efffbf3e20b","sha512":"b39c87507df5e1d26dab88122c6c8f1a36db8d439232c60888d4675bd27aa07fb312b9f95353729c0920d419f0376da60f1f38d0354acd228ae13f934dd66080","ssdeep":"6144:zrXwUkPvcLNamDZ6ZctHUC8QucmjYZLvRqmP+Ut0yjJElBvUsTs19sq:/XKPKNRDZ62tHUC8Quh6P+eolBVg19sq","tlshash":"7854239c671ab86748a9fe36773c2f33112d7c29bc4d90d487b966803675520bcfa81e","first_seen":"2026-06-19T08:30:06.699922Z","last_seen":"2026-09-11T01:36:40.938253Z","times_seen":3,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":624,"connect":1,"send":0,"wait":22,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20251206-62/1ac6bccea6f80546cec98cebc788a63c.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.822Z","timestamp":1789090552822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20251206-62/1ac6bccea6f80546cec98cebc788a63c.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 01:36:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 06 Dec 2025 12:17:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69341ee3-301f\"\r\nexpires: Sun, 11 Oct 2026 01:36:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Wt1oinQmTzBXKmsG5et%2Br1C5%2B9k%2FFn15F0zKZ326j4qUduWxu9rm3f3Ymj5o0koFxYDG0Uj74paAH%2FczI3XeQnusyhy3WN5pYxHPk935H591y7IR1reKI1piVHTGtEriV4W5GU%3D\"}]}\r\npriority: u=4,i\r\ncf-ray: a392f05ef9dd56c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12319,"size_decoded":12737,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x386, components 3","md5":"4fd7f3a1f6726d7ad6e86242fc9ca668","sha1":"b4d4fff559b6b9677e0bb5409047fe1d46a671a1","sha256":"98b9a46aa1f1d9ebebc6cec1a86c54c4c9538234f59863b136bcf4b3eaab7031","sha512":"ab41ca9c49f5bd1ca55a534dcbf39f4d6a3bd59ff2b50f4b676802e544fdf6ea89561ed6b06afe77739f3cf39eade37e73ea230dc2507738eda5f98f57f230b0","ssdeep":"192:XryWsnIIUlBx9BwAJvwwhSRxRk0iPTE9cKKauOMWlDysrIsBPVBJykHpRm4LPeV:X+5n9cBOiSRI/hOMWl9rJhJJk","tlshash":"9f42cf5d075ad34adb131538e4c7678a23a93e61786b5c34b2b88136064edfdffc8426","first_seen":"2026-07-27T08:40:52.703069Z","last_seen":"2026-09-11T01:36:40.939594Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7576,"timings":{"blocked":-1,"dns":385,"connect":3,"send":0,"wait":565,"receive":0,"ssl":6620},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260825-1/ff75af71900ad4895bab419dc21148f7.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.823Z","timestamp":1789090552823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260825-1/ff75af71900ad4895bab419dc21148f7.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 05:00:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8d2152-7d23\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VekcE5UHwYmlfk1G%2BRkB%2BFAqF83XN5zMre6byOq7jiW35wyhCBJCw2h3PKmq525GNFCYBoJZtWvSXnqo6yJQfCwlWEHbwziCHN7JlOHr8DJpFbmEcuIT0wnlUel2MjjDNx0RSHU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad46b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32035,"size_decoded":32641,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x380, components 3","md5":"8926687c292bd37bd50849ab1f275d96","sha1":"072ce92b6a77beaa20f28223c3ad518442d7505b","sha256":"7ff43ae5c665f468e3c1d497e5e911e352ca34a82a532b4eed97d8afdbe7324f","sha512":"7e225b78a62757f6316a30be34ae9cb3c808de75b6c25b746b4521c2594bf5c9b60ec883d47292ee6c8f8aa275f6afd8eb1592968b724fb60878761c88ee7ca9","ssdeep":"768:03qC3bY52sOQJ9LvTe4wZRMcpjjRVH1U5VH1VNQuZ7MyIlUrhfjQLt:03BMrBTLvSrRYVH7jOBlU1it","tlshash":"52e2e1afe6a2060eeb18482a5c853b9c9b99ddb07711d4379d00721127ddca5f13e51b","first_seen":"2026-07-04T07:59:40.69956Z","last_seen":"2026-09-11T01:36:40.940925Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1003,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260818-1/6a4bc4681ebe839207023b4d501fb529.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.831Z","timestamp":1789090552831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260818-1/6a4bc4681ebe839207023b4d501fb529.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Aug 2026 11:00:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a843b32-1115f\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h0g9CbwICeQa5R98xz2fhhTTLFrc3H0HwwQ7WaS2i9R2r8z9HdtbVkmp37SLXof4Je6u9XQ8HQcnyRxrYa66TLhd4YfxmYt0LMhV3ZIpgE3BglgwoAxZ3iMEvxgvVSoCxrrB%2BQk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad58b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69983,"size_decoded":70572,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 270x337, components 3","md5":"20987832924372c48e055960b6d2002e","sha1":"a2bdc0636b744c311809ecf228ac4cb113a074ca","sha256":"74286755e80ab962cd033586a5dd5302c120e1788ffac0eebec0b5e9892ffbfb","sha512":"59df32caf7250c9dbacf317878a91591ae77a52899da0e878a0a20dd652c585e98d99d33f47bd65ff44f950591855b310265d3f89a761152d4c171bd2eb568c9","ssdeep":"1536:bjHVYO51oY3HSJzGIPF6MjmAhIKOKGlEZbGUq6:XVYOkY3QxPgwIKOKbZbGx6","tlshash":"606312f3f4d1fce0f67f5639a51ea805e07cc654e09a7e92926e6dc20a4ea7031e0219","first_seen":"2026-09-11T01:36:40.943133Z","last_seen":"2026-09-11T01:36:40.943133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260803-1/5cd15e09178d3b50d92c6c64f07f83be.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.832Z","timestamp":1789090552832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260803-1/5cd15e09178d3b50d92c6c64f07f83be.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Aug 2026 05:30:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a70275a-7354\"\r\nexpires: Sat, 10 Oct 2026 22:56:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 9548\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVyZjNw%2Fih6sYmc9GAEUISciLrBpCRuCfc0rrUNJIovQQwgHeAWeuWTHdekam51zwsEm4e9Ch1NI0iiiT0jnw2pPwfdLZ9I6IoOmuXa1otV5MbMXR80BFzMgf7Wwl7knC7Fbcug%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad59b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29524,"size_decoded":30176,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x405, components 3","md5":"7c62c0bdfbdb8fb710322abb3db6c033","sha1":"8fceb38f005d1ee9f202596632ec42e221a23c94","sha256":"c51f4046bdc3e05d4884002af91d2fdf7b0aa215b2460c1a8d558244c442f76b","sha512":"2bfcb33502efaa1faa80ced107144ddbc60926aecfc192d373fc25ae2dde24dea92860e8fd68609a9e1fcd3d3e83ab92af5c0e192c21cc81ec9b38097a363b66","ssdeep":"768:9vVAy/CC3sP3QW5QA6hzw4BpUYxcOFw4Tj:9miCP5Q19UYxcOiSj","tlshash":"80d2e1c2474dbd4787d387388c0b6aa83de35e58aec53a327056d4849821dfd9db2968","first_seen":"2026-09-11T01:36:40.944593Z","last_seen":"2026-09-11T01:36:40.944593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/favicon.ico","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:54.752Z","timestamp":1789090554752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:54 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\netag: \"6a92a175-8c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"710df0a9fd3319ce46d908acb4262389","sha1":"9b77218ed9b4d20918c17302b288bf6194ac874b","sha256":"aa3cf0871f04876f5d031a35ea6b8ebaf20d8679ee343a5958552691fe404421","sha512":"bcb605e3305d637dc3505bf2e4656bc09d2bc1fae312b60b7c675e6e371daf79d572ead3358e73d58aed685094081d3f02d9362b4a6d4d90d4a0566f235ee67b","ssdeep":"","tlshash":"96c09b5d755356485913156167c33641d197837fa8aa84510943c593e0cf69ac4c73a9","first_seen":"2026-01-08T09:45:31.423944Z","last_seen":"2026-09-11T01:36:40.922783Z","times_seen":32,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/template/a_0004/css/global.css?v=20230420","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.599Z","timestamp":1789090552599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET /template/a_0004/css/global.css?v=20230420 HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\netag: \"6a92a175-8c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"710df0a9fd3319ce46d908acb4262389","sha1":"9b77218ed9b4d20918c17302b288bf6194ac874b","sha256":"aa3cf0871f04876f5d031a35ea6b8ebaf20d8679ee343a5958552691fe404421","sha512":"bcb605e3305d637dc3505bf2e4656bc09d2bc1fae312b60b7c675e6e371daf79d572ead3358e73d58aed685094081d3f02d9362b4a6d4d90d4a0566f235ee67b","ssdeep":"","tlshash":"96c09b5d755356485913156167c33641d197837fa8aa84510943c593e0cf69ac4c73a9","first_seen":"2026-01-08T09:45:31.423944Z","last_seen":"2026-09-11T01:36:40.922783Z","times_seen":32,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/template/a_0004/icon_f/icon_12.png","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.604Z","timestamp":1789090552604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET /template/a_0004/icon_f/icon_12.png HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\netag: \"6a92a175-8c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"710df0a9fd3319ce46d908acb4262389","sha1":"9b77218ed9b4d20918c17302b288bf6194ac874b","sha256":"aa3cf0871f04876f5d031a35ea6b8ebaf20d8679ee343a5958552691fe404421","sha512":"bcb605e3305d637dc3505bf2e4656bc09d2bc1fae312b60b7c675e6e371daf79d572ead3358e73d58aed685094081d3f02d9362b4a6d4d90d4a0566f235ee67b","ssdeep":"","tlshash":"96c09b5d755356485913156167c33641d197837fa8aa84510943c593e0cf69ac4c73a9","first_seen":"2026-01-08T09:45:31.423944Z","last_seen":"2026-09-11T01:36:40.922783Z","times_seen":32,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260825-1/eaf23411fa656e6c49da9277056cf5c1.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.829Z","timestamp":1789090552829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260825-1/eaf23411fa656e6c49da9277056cf5c1.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 07:30:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8d447a-fec2\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKRcB9bVjmd%2Bziia7BxaRXN7q3apgWnd8tmWeos1iLWfriB0cr46u1ABCOUrmEKJZ4f6YR6r6U1%2FJNPkt60VrmndfTJi8MHy%2Bw2xNMsaJ%2BoULTqv7lAsHDVjPdLf%2BrpV8FP3QQc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad54b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65218,"size_decoded":65711,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 270x385, components 3","md5":"8b7cc64e18fe4d55517c59d807b92eda","sha1":"88c9f7c822433cc6043a4569be97408fd309ee90","sha256":"7d70f559fa69e363d83b0f74af08dd685715866909accaed0337066576e0fa0a","sha512":"90316c7441c64165d7916ae693f9c54ca9a7f2bfbe3a0fe8ee39a3a5830e1dc913a93590ec99ca34f37490b95c8e00f3296858f95df40097155a8fc16da0e0ca","ssdeep":"1536:LCfDf7UpyUBlrBr08rxAJ9X9CcP3KU33lz1TJxUrtas5:urArB7XryJ9gwt33x3xsas5","tlshash":"115302a2e1675e09d9de92ac1c657dfa26363e80f75bdb41ebd0c01017cafd30709668","first_seen":"2026-09-11T01:36:40.945708Z","last_seen":"2026-09-11T01:36:40.945708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/template/a_0004/css/style.css?v=20230420","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.600Z","timestamp":1789090552600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET /template/a_0004/css/style.css?v=20230420 HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\netag: \"6a92a175-8c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"710df0a9fd3319ce46d908acb4262389","sha1":"9b77218ed9b4d20918c17302b288bf6194ac874b","sha256":"aa3cf0871f04876f5d031a35ea6b8ebaf20d8679ee343a5958552691fe404421","sha512":"bcb605e3305d637dc3505bf2e4656bc09d2bc1fae312b60b7c675e6e371daf79d572ead3358e73d58aed685094081d3f02d9362b4a6d4d90d4a0566f235ee67b","ssdeep":"","tlshash":"96c09b5d755356485913156167c33641d197837fa8aa84510943c593e0cf69ac4c73a9","first_seen":"2026-01-08T09:45:31.423944Z","last_seen":"2026-09-11T01:36:40.922783Z","times_seen":32,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feifan.51weizhang.cn/slide/haizeiwang.jpg","fqdn":"feifan.51weizhang.cn","domain":"51weizhang.cn","tld":"cn"},"ip":{"addr":"104.18.111.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.814Z","timestamp":1789090552814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feifan.51weizhang.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 21:48:01 GMT","end":"Thu, 05 Nov 2026 22:47:58 GMT"},"fingerprint":{"sha1":"31:02:93:DC:60:C0:81:DA:D8:56:D3:A2:09:3F:C6:D5:3A:09:E1:5E","sha256":"06:A5:9C:EE:68:56:85:37:30:BD:81:B7:68:C6:09:41:BE:84:75:B7:7D:2B:5E:E4:21:50:3D:C7:44:0F:BC:89"}}},"request":{"raw":"GET /slide/haizeiwang.jpg HTTP/1.1\r\nHost: feifan.51weizhang.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 01:35:56 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Nov 2025 06:14:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69200350-81db7\"\r\nexpires: Thu, 08 Oct 2026 12:57:41 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 218295\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BisYI4%2BkxsgIOhPMKS3pVNI6ovY%2BSte%2FeOauktfk6eXIntRZHz9CyJ%2FFcIe1DU4VjCbKKvfShOCMbngcKHBr59cnHe6dsPvynBvFbW88CZklBDcZGbuqksOzh0z6DgOqamA8%2Fp3PoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a392f04bff263181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531895,"size_decoded":532758,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 2260x744, components 3","md5":"90b577d9581abb683438eb58c462300a","sha1":"0760a8a55d451e4a650089f3f577d230a63ab815","sha256":"1d8c7a1115035eb8c00cd0adca9fc101b3ed3f12779e6451f226bdda2fce8cfd","sha512":"552892d2ace219e22be26984abfb01c8b5ef55c1f04be19032ab0ac0147c156d83332a51eabd922f2084021202c92ae685489efa9bc48d823dffe4d0425c6f02","ssdeep":"12288:ffE5tdgqItab9V6CK2BOrO6jC31uEs4ze8fMOnnKW0:ffo+qIu9V6CK2BOiRuEs4ze8fMkKZ","tlshash":"77b423c8199d6cdd5a5fbb39c12681672a9d4f3728ed0e821b58493d18cd3cabed312c","first_seen":"2026-07-22T00:01:27.495064Z","last_seen":"2026-09-11T01:36:40.946882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4009,"timings":{"blocked":-1,"dns":622,"connect":1,"send":0,"wait":21,"receive":11,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260707-1/0d77c35c408f98bd3c1de32979179114.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.828Z","timestamp":1789090552828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260707-1/0d77c35c408f98bd3c1de32979179114.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Jul 2026 09:30:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4cc71b-9a8d\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pGx9tY4qTlRjAm6z8%2BvyUp08hBKXSH2u39Iwb9lvJEjXwD4eF3vD5GCnwE16DpAzFroTwzSDvnsZgeVFc59o12%2F9Zcy%2F9d44idER6UkEq4hlwHizZEbh3Z3XWOvuehdjugz0QxM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad52b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39565,"size_decoded":40075,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 270x402, components 3","md5":"ca1d0c1458323500c2d395aafa066ec4","sha1":"18444a1a9ce68de3dfa8a831bf387cef06a297d4","sha256":"9daaec3327f16b59623dedc2803133270bc1ee3a7f59c4a94fc704ae49f35fdc","sha512":"f4fdcada70187ee805ef95f33008827403abe1b1cf965eb9e42ef2107d6367196f45513e34df991a5031fc5587ff69b8edb74d4429c0d7dfaf6175d82b1db3e5","ssdeep":"768:E1+qhbEVdOmb288LxtvDyIGnlDxPpctxkcTI2D:E1JhoVd1288Ftv1GnlDlKtmX6","tlshash":"8f03f1dfc150b2ef5bebe939dc298169d0664ac5f86601479c2049e4eb9b90c98051df","first_seen":"2026-09-11T01:36:40.949542Z","last_seen":"2026-09-11T01:36:40.949542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":975,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/template/a_0004/css/swiper-bundle.min.css?v=20230420","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.596Z","timestamp":1789090552596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET /template/a_0004/css/swiper-bundle.min.css?v=20230420 HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\netag: \"6a92a175-8c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"710df0a9fd3319ce46d908acb4262389","sha1":"9b77218ed9b4d20918c17302b288bf6194ac874b","sha256":"aa3cf0871f04876f5d031a35ea6b8ebaf20d8679ee343a5958552691fe404421","sha512":"bcb605e3305d637dc3505bf2e4656bc09d2bc1fae312b60b7c675e6e371daf79d572ead3358e73d58aed685094081d3f02d9362b4a6d4d90d4a0566f235ee67b","ssdeep":"","tlshash":"96c09b5d755356485913156167c33641d197837fa8aa84510943c593e0cf69ac4c73a9","first_seen":"2026-01-08T09:45:31.423944Z","last_seen":"2026-09-11T01:36:40.922783Z","times_seen":32,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/template/a_0004/icon_f/icon_4.png","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.609Z","timestamp":1789090552609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET /template/a_0004/icon_f/icon_4.png HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\netag: \"6a92a175-8c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"710df0a9fd3319ce46d908acb4262389","sha1":"9b77218ed9b4d20918c17302b288bf6194ac874b","sha256":"aa3cf0871f04876f5d031a35ea6b8ebaf20d8679ee343a5958552691fe404421","sha512":"bcb605e3305d637dc3505bf2e4656bc09d2bc1fae312b60b7c675e6e371daf79d572ead3358e73d58aed685094081d3f02d9362b4a6d4d90d4a0566f235ee67b","ssdeep":"","tlshash":"96c09b5d755356485913156167c33641d197837fa8aa84510943c593e0cf69ac4c73a9","first_seen":"2026-01-08T09:45:31.423944Z","last_seen":"2026-09-11T01:36:40.922783Z","times_seen":32,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/upload/site/20260228-1/f85eafc63693fb43e10b3726992e225e.png","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.804Z","timestamp":1789090552804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET /upload/site/20260228-1/f85eafc63693fb43e10b3726992e225e.png HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\netag: \"6a92a175-8c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"710df0a9fd3319ce46d908acb4262389","sha1":"9b77218ed9b4d20918c17302b288bf6194ac874b","sha256":"aa3cf0871f04876f5d031a35ea6b8ebaf20d8679ee343a5958552691fe404421","sha512":"bcb605e3305d637dc3505bf2e4656bc09d2bc1fae312b60b7c675e6e371daf79d572ead3358e73d58aed685094081d3f02d9362b4a6d4d90d4a0566f235ee67b","ssdeep":"","tlshash":"96c09b5d755356485913156167c33641d197837fa8aa84510943c593e0cf69ac4c73a9","first_seen":"2026-01-08T09:45:31.423944Z","last_seen":"2026-09-11T01:36:40.922783Z","times_seen":32,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260627-1/534c2284f2a05b6f6b472b16427a843f.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.818Z","timestamp":1789090552818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260627-1/534c2284f2a05b6f6b472b16427a843f.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 01:35:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 26 Jun 2026 17:00:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3eb012-4a2b\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JfQRhb40z5CHukRgfDhdK7WComMuV5P3h8FJrMDhaOp%2B5ZzRtOTjSvXvTN0JD%2FxIRGZWJIbuOXKrNXw3WqNtEq1gQSnT01ZEm88rc%2FyIspbVbImR%2B3NmIisyDNIMob3%2BBAy9lYA%3D\"}]}\r\npriority: u=4,i\r\ncf-ray: a392f036f8e256c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18987,"size_decoded":19656,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 267x354, components 3","md5":"2038d7d75f65b88d30445802b6dbeb54","sha1":"cc7ded4d54afa17135120615a84e6ec09035f54e","sha256":"d336b02441ed5189364e7822a1e01a430fac5a185d7f4dd67a04a2b7e06d3d90","sha512":"31409084df694cb7145d3de9c55248d5999c9c099c8335654486f86ab210eae2c708643e631a9ee645f84d47517fef471928195975e831d30232f37794790e7e","ssdeep":"384:UNPCL58AcV3iLDHdxc3oQpBnn07JpT0nkTj5T5z2NnNBX4h:UNPC5DHgdjn07D/Tj/zWQh","tlshash":"8a82d0e7065abd790b0baaa4765d6cd09bcc59206ff1103a65a34af31640efcb1ade10","first_seen":"2026-09-11T01:36:40.950981Z","last_seen":"2026-09-11T01:36:40.950981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1224,"timings":{"blocked":-1,"dns":389,"connect":2,"send":0,"wait":609,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260628-1/bf256cad0939b950440eaf9dbf48d710.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.819Z","timestamp":1789090552819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260628-1/bf256cad0939b950440eaf9dbf48d710.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 01:35:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 28 Jun 2026 07:00:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a40c673-d9d1\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BdcobqJhRrgbdCt5ry7Ga9IzGIx%2FwB31xLdN9sn1%2Fr%2FGDSpTOcidG%2F7ajqJ4u3LHVnG8FdCf4DhEFeITAlYHNsQ%2F2dLKnQqHJYwiuTmN9ZT8iZiZG5AcDAyjdjGcj0poqjZOxVg%3D\"}]}\r\npriority: u=4,i\r\ncf-ray: a392f036f8e356c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55761,"size_decoded":56270,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 270x381, components 3","md5":"ca0a8e0b8e2ee640456a93efdc95609f","sha1":"fbd2f35307a8328c0ca000f9de34252e333d2b94","sha256":"e844bbbdfbed4f433612ee1c9470be15b14754f0ce0085e3abd28830363d2a96","sha512":"b4c529f2b9aeabc5d50c9fe27cad3dbbacdb7d67ce5b98ce82044b148e0ce655ea09a3b981735193d61d8dca3568598ba5bdc187a3697556988c029f08a89224","ssdeep":"1536:P5qYEv7F590qIBFJuYqc0/N871GadOHZriQkl4ZbKV:xqYO7F59afJuVc0/NY1RdOGQOV","tlshash":"f94301dacf823b71d2dc56dd26a25f503bc962124a9176de2720b2e055dccb2b388f47","first_seen":"2026-09-11T01:36:40.952256Z","last_seen":"2026-09-11T01:36:40.952256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1324,"timings":{"blocked":-1,"dns":388,"connect":4,"send":0,"wait":574,"receive":135,"ssl":219},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260825-1/226f561f0755bb0cf716a83d72e9c993.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.824Z","timestamp":1789090552824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260825-1/226f561f0755bb0cf716a83d72e9c993.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Aug 2026 04:30:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8d1a4a-68a3\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8AyZn8ULCYvmHcQ%2BQOWmbN%2B1zhFTh0703YrIte1y8fyMssbHPzxjhVZ9hOcdCWp0TwAx2coYse%2BIVawJ13ihYM3yJ0xl5ZZ5O2zLdksdAYGJ1tvi4VoMRTFlbOA%2B1jnkJ3O83o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad49b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26787,"size_decoded":27416,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x381, components 3","md5":"13ebe017a1611285fcd86959631ae30a","sha1":"a7a4a30879049e8355e661745b07e9d9eebc3e7c","sha256":"ce69d3103b722b3d6cb81a9825fb2cfdad3cebc2c97b3407f6016b8ba6aa60bf","sha512":"74d0027f8b9c7130955d2ee7ad97f3b5e7ea3bbc333685cef3eb7d89d783d405875524d71a4d3892c4b5e46b699e02fe60566157450aaef1316ebcd860546087","ssdeep":"384:lZpbsIyTCmN1jL1BuBUVt+g9HGsqRRFXBRA/w+xIpTf8OJw4RQieRc7NAcbiD:lZpwte6J17VQum/fR6zxsRm4RQLIAZ","tlshash":"95c2e18103a7848e776d61774b1e2e20fab099df16839673a6d14db230f9c3987c7127","first_seen":"2026-07-30T01:16:34.895152Z","last_seen":"2026-09-11T01:36:40.953817Z","times_seen":2,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20251206-65/e9f0fc2bd7a752bbcde187823ae33e16.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.834Z","timestamp":1789090552834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20251206-65/e9f0fc2bd7a752bbcde187823ae33e16.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 14:10:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6934394c-37b4\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ieKpzm3YFckTKZoPgZr4wVPGJHXDAao%2BU2yE33t3BjhRz03UBFeFEHYykN5pmHLClFifKqPr3wq6XtUeR2S7Y8HKchuIG1E0wjvmdMo%2B8Odkj2IEuwS5r1FQqg3UfB%2B6AiQjXU8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad5bb51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14260,"size_decoded":14901,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x378, components 3","md5":"53c74ceba3b8063f77c70af6a77e9fa9","sha1":"04e2901eca6425b5a7ea64e9647f3d0bd5fafd60","sha256":"c027f8aba1738405cda573031e311a9816e6b63402300ba27dba59a94c90d793","sha512":"82c7ee45fe526049806b3e0280c25042dba22d78e7ffa78726f67065011a0de42e56bda7343c11b8e0bdb9fa2cb9fd3fb7066735f6f858658cd888cf6c22c6da","ssdeep":"384:21uPyms8Ar8QV750lu0SLwGvc906vcTMnAybz:2cPLbQH5pZvc9PAy3","tlshash":"e752cfa3bbaaac4ad71904fe19430426d0fd54c2b7fca5b8a3784d1ad230ff45409b0b","first_seen":"2026-07-04T18:35:35.781824Z","last_seen":"2026-09-11T01:36:40.955645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T01:35:51.425Z","timestamp":1789090551425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27927,"size_decoded":7614,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (381), with CRLF, LF line terminators","md5":"78e4c7c058a29b18cf04dda27fd597ac","sha1":"673301addf96649b5b5cea4a30f60b389b8d1163","sha256":"ac06eb36fd4f459b5728b8b0fd73c6a00e16e62db1cecd371a678ea639180afb","sha512":"a1c2df570b6bd7aabd454939729f1b8f1771d65f38556a3f00b73f2fab064c16e0aae0f97ee37131017d5084af1e419f6da851ba09efde1d23dbb23ce392509f","ssdeep":"384:UZ1KvtoRFrr8FWWowux4UmitPTpxbL2NNAvejdyJ:kKvtoRFrr8WzwW4UmitPTpxbL2v7g","tlshash":"7ac293729292102b057be5d6f5e7a30eb1e3c34ec9838d5631fc23699bdad10ba1760d","first_seen":"2026-09-11T01:36:40.9573Z","last_seen":"2026-09-11T01:36:40.9573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":-1,"dns":50,"connect":184,"send":0,"wait":360,"receive":0,"ssl":372},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jinsia.com/template/a_0004/icon_f/icon_3.png","fqdn":"jinsia.com","domain":"jinsia.com","tld":"com"},"ip":{"addr":"38.11.4.205","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.608Z","timestamp":1789090552608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.jinsia.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 15:17:16 GMT","end":"Mon, 23 Nov 2026 15:17:15 GMT"},"fingerprint":{"sha1":"CD:E0:DA:49:32:43:01:B3:FC:85:CA:A6:90:C7:55:A4:F2:EF:FE:57","sha256":"50:A8:43:33:03:64:B0:72:34:32:88:E5:2A:C0:97:98:95:D4:57:42:82:C1:FD:E2:69:98:A8:23:06:63:43:C7"}}},"request":{"raw":"GET /template/a_0004/icon_f/icon_3.png HTTP/1.1\r\nHost: jinsia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 01:35:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\netag: \"6a92a175-8c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"710df0a9fd3319ce46d908acb4262389","sha1":"9b77218ed9b4d20918c17302b288bf6194ac874b","sha256":"aa3cf0871f04876f5d031a35ea6b8ebaf20d8679ee343a5958552691fe404421","sha512":"bcb605e3305d637dc3505bf2e4656bc09d2bc1fae312b60b7c675e6e371daf79d572ead3358e73d58aed685094081d3f02d9362b4a6d4d90d4a0566f235ee67b","ssdeep":"","tlshash":"96c09b5d755356485913156167c33641d197837fa8aa84510943c593e0cf69ac4c73a9","first_seen":"2026-01-08T09:45:31.423944Z","last_seen":"2026-09-11T01:36:40.922783Z","times_seen":32,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"jinsia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"jinsia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260701-1/d5c9ebf9915c6830c8a9501e62553af5.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.821Z","timestamp":1789090552821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260701-1/d5c9ebf9915c6830c8a9501e62553af5.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 01:36:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Jul 2026 02:00:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4474a2-cf1b\"\r\nexpires: Sun, 11 Oct 2026 01:35:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sv6hB37AI6KzMot6NiCbMb%2B1CoSRVGl3w4mCCSiSBYSpogOx2WBcga9fECkS6gm%2BtkLYTTJaBeXZq0NSomAoyNFtA4U%2B20CtMgmdysFQJb4PiZyXuTQlOiacGv8SMWoUUf0W76w%3D\"}]}\r\npriority: u=4,i\r\ncf-ray: a392f05f09df56c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53019,"size_decoded":53650,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 270x337, components 3","md5":"e03eeb7a296f34b6375ca0f5c361a93c","sha1":"b1694a222b73fbcd091ac675a820110a21835b04","sha256":"7ea3c6e5b7a31bf9a0352d08aabc0fe4369b0097b30d99ec6f7249a8cdb54adf","sha512":"7baeb78ae57847b47f862fd5dfd3b5a08680a922b133064ecef560e8dfa89681eddd7d1b9ced8e23c6dfa9e556189db740b99a2c582a5518b6a5039fb6e4af67","ssdeep":"768:bWQ8T0HOeSPscNmlc02rEkNBV3OORow6BXg/IfLdBx4ff/K7wqfOpYdQlK8xSP:bWQiMUxNmhbknVe4ZLqBxuK7wVMQlnQ","tlshash":"5033f1fde4d771a0a4317d36d6941bc720adc11c9d29c0b19cea2d881b5aa4dfac3467","first_seen":"2026-09-11T01:36:40.959129Z","last_seen":"2026-09-11T01:36:40.959129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7457,"timings":{"blocked":-1,"dns":386,"connect":3,"send":0,"wait":298,"receive":135,"ssl":6632},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shandian.dz002.com/upload/vod/20260721-1/9df3cfcf00550561302e86ced52c044d.jpg","fqdn":"shandian.dz002.com","domain":"dz002.com","tld":"com"},"ip":{"addr":"104.16.11.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jinsia.com/","date":"2026-09-11T01:35:52.827Z","timestamp":1789090552827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shandian.dz002.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 19:33:53 GMT","end":"Sat, 21 Nov 2026 20:33:50 GMT"},"fingerprint":{"sha1":"16:FD:CE:44:BC:8D:93:74:D1:F6:F0:1D:BF:DD:59:F3:56:EB:73:12","sha256":"30:F5:7D:2B:C3:C3:54:85:68:69:A4:0B:E9:09:09:AD:17:E6:D9:71:99:2B:65:21:D6:75:65:2A:78:AD:32:0A"}}},"request":{"raw":"GET /upload/vod/20260721-1/9df3cfcf00550561302e86ced52c044d.jpg HTTP/1.1\r\nHost: shandian.dz002.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jinsia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 01:35:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Jul 2026 12:00:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f5f43-2abc3\"\r\nexpires: Sun, 11 Oct 2026 01:35:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgazDKDyU0%2BuFI9zUO8IK6UVLvyMNePfBva3%2BTuIgptriXoX%2BD1BbxYrTRqyCerBB6CMOS7hPaN9d%2Bolfcc%2BnfT2ce7x4mqlgNaWvhLOXuYUHEjQRjxrljBW%2FJFmEKUxzgEQsK8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a392f035ad50b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175043,"size_decoded":175569,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 540x810, components 3","md5":"a140da4df8a4e68ebe402cd519da14e0","sha1":"f6228ac2700b21697e8dd2d2f9b9dbba7c8626fa","sha256":"cb7c87f0c1b2cc1611505bbe4df1347c0a97210f58a74307dc25cfc848243647","sha512":"f7162f100c154d461719e42b9f84aae5fbc502c513c8797765ac5d9d4ce2073ad3772a4fffb8cd0ba89660cedfdf8ad8d33161f65f9d135fc103991e16debb1e","ssdeep":"3072:oDl8jjgC1Kskj17spaFkRwmhygKoDh0x0ZkDb90tYHGVXOhHPOh3zdxaLulTYf/2:Ol84C1UoCm/N10x0ZMb9C2H+3zdEaTYG","tlshash":"e30412c3dfa73d7761b293653122c5fd5bc42a94523c878a0da01daa5b4dfa4cf60a70","first_seen":"2026-07-22T13:24:50.005962Z","last_seen":"2026-09-11T01:36:40.961612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":998,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"shandian.dz002.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}