{"report_id":"f0cea921-191a-4eb8-883d-25ff864f39b4","version":6,"status":"done","tags":[],"date":"2026-01-16T12:53:00Z","url":{"schema":"http","addr":"kht81.vip","fqdn":"kht81.vip","domain":"kht81.vip","tld":"vip"},"ip":{"addr":"107.149.211.34","port":0,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","fqdn":"l7v8m1p.vip","domain":"l7v8m1p.vip","tld":"vip"},"title":"红桃视频最新地址发布页","dom":{"size":3314,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d5682a124fb6702d45ca6aab7dc71255","sha1":"fc67f2440601e8ad559a3d2ce30bc8c912ab9e6a","sha256":"aa34049c3033a4f34f53527c837cb0e6f750744bdf931b836e3567d15e030209","sha512":"c8c5b8b4ae00591c776dae992666f4fe3d1ef70e7d5c0b693ea8bb62e0d387729b97b40d24544f30c4f784bdff3aba877ce70e3e5d4d849afe082a1107e9c7db","ssdeep":"","tlshash":"1b619663ec022936077200f679b7ab0c60d1c625d92ad501d3f8e15e6fe4ed6ac1f14d","dom_hash":"domhash4f578a613e09e30cbd01abc78082a693","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kht81.vip","fqdn":"kht81.vip","domain":"kht81.vip","tld":"vip"},"ip":{"addr":"107.149.211.34","port":0,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-20T12:53:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"kht81.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kht81.vip","ip":{"addr":"107.149.211.35","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":1990,"sent_data":478,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-01-12T01:35:28.651228Z","alert_count":0,"request_count":3,"received_data":31058,"sent_data":1734,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"l7v8m1p.vip","ip":{"addr":"107.149.211.36","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"domain_registered":"2025-12-31","domain_rank":0,"first_seen":"2026-01-16T12:53:00.896018Z","last_seen":"2026-01-16T12:53:00.896018Z","alert_count":0,"request_count":3,"received_data":6340,"sent_data":1662,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","fqdn":"l7v8m1p.vip","domain":"l7v8m1p.vip","tld":"vip"},"ip":{"addr":"107.149.211.36","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7a4a183c731a537114f4f748926f6ab","sha1":"eb1b2f0d0caeda00526d5d554de430e86567b6df","sha256":"deedf3cab7edde8f7919c3fbcd921a7ad40d4a60c7c175acdc1d320ca8e66dc3","sha512":"d8df7220c9981351f63948d6ab6357ae5df5d7e806d3290877a035b5ab4eb8f164a06d9836e3d7d7f2e107d1290b64bf9cd38dae61b00932de1262bb71abe21d","ssdeep":"","tlshash":"2ed05ec3f153b83b6e96065b3b68234925e6d4229841a209f70c28245f24a4de1af988","size":253,"data":"","first_seen":"2026-01-16T12:53:07.137953Z","last_seen":"2026-01-16T12:53:07.137953Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","fqdn":"l7v8m1p.vip","domain":"l7v8m1p.vip","tld":"vip"},"ip":{"addr":"107.149.211.36","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c005c59fe9204b07b0f58baa8bd50de","sha1":"bc3c7e9b0cd5f016cb999f2fb19b2723d7f59307","sha256":"a94c4f790ac9ed399481504c5a234e5152317e9158e93d329f7aca68498fa76e","sha512":"c1a5b19c59e917dbc06596d6029a288aef10c3ceda52a43177b7fc30782c965cfe4b77a1fde5e23591b487d3bc6fef033d3ebd66d664e55a6a995302a190ccf8","ssdeep":"","tlshash":"cad0970f2e582838277b043e21fbd99cb1a2215c503dd00080cdf8009ab0fc2183e7cc","size":254,"data":"","first_seen":"2025-11-29T11:34:53.312188Z","last_seen":"2026-01-23T08:25:18.421163Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?080fb4d5004cc76d694e047d496f6930","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d33cec6d874edd9af43ffd322f355f17","sha1":"755a4d1472d4cd0c26f71d6ace07ad7bb5e9b813","sha256":"60e1458eefb12008309403666f0f4b4a899fbc6876897da8c8b9a8b9bd1abb75","sha512":"628f37bfbb1d2bff44b05d1fa3bd52dba4f21ee3d21649a5a0ccc823811bd86f587bc0710d41b81d18da210bdbc7dbcb6195f3c08dabb5d8341b8cab720dd023","ssdeep":"384:wcJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:wc4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"ead2d9a9b282713293a324a5153f324af17b5a54bd4968a4f11894c07d38fbb027bfdd","size":29901,"data":"","first_seen":"2026-01-16T12:53:07.128547Z","last_seen":"2026-01-16T12:53:07.128547Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","fqdn":"l7v8m1p.vip","domain":"l7v8m1p.vip","tld":"vip"},"ip":{"addr":"107.149.211.36","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-05-23T16:36:53.343884Z","times_seen":116881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","fqdn":"l7v8m1p.vip","domain":"l7v8m1p.vip","tld":"vip"},"ip":{"addr":"107.149.211.36","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"4287c3c5da8c710943cca45101274d15","sha1":"eec405802de5925f63e7a1c59e71c9bb02cf7909","sha256":"7190b8f8bdaf26353294dd0b204397d2e0842a5d326f1fcf039b8e9c0b38da28","sha512":"30b912ab1ebaa2dc364c2a25980afa4a2259601c16c7908001d1e7301a8dd96c5359c711a655fbdd82d278fcde3f6bad4421d3571f200a469ee47c00b6624b49","ssdeep":"","tlshash":"b2f09ede23c146803ad2beb76919a11ca1990e05bfbd989c2c14002328d6db712c2d1f","size":498,"data":"","first_seen":"2026-01-16T12:53:07.1528Z","last_seen":"2026-01-16T12:53:07.1528Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kht81.vip/","fqdn":"kht81.vip","domain":"kht81.vip","tld":"vip"},"ip":{"addr":"107.149.211.35","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"15fa60a7aa49c0ae542659ec3aec43f0","sha1":"3640e0e14d19f1cfb8ea3e36781ee86e4401644a","sha256":"0e8233b4ae3c1079341aa93a3a47557a781de6952517a7bb9c6178ac6250799f","sha512":"3a903ea7cdd92b41db860234e9657d158b0ed4965f54f86b64e045db4fdb5c5adcf849ccc1ab71218c8ec89b7d0cae79eeb76438daa41166ee79eecf5e5c2049","ssdeep":"","tlshash":"603148297fc3142506c7326a4ec69500d8b9f122bc4f8c9eb85c6e11ab6be5db4cde84","size":1707,"data":"","first_seen":"2026-01-16T12:53:07.154636Z","last_seen":"2026-01-16T12:53:07.154636Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","fqdn":"l7v8m1p.vip","domain":"l7v8m1p.vip","tld":"vip"},"ip":{"addr":"107.149.211.36","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"57cbee49c44d31fc3388f1f7a1d4fe73","sha1":"a242e3af11d0ebc5c13b2bd941812677c3c4aecf","sha256":"2114386fc584d7c39b20fc5469eb3442c6788aaa62f554d4d01bceac80eb50d0","sha512":"9f2e2e7dc91f6146c5cd96a52461a3a7f546f67016c7d33823b45187be746d20c44a0f0df84cc6699c49c076617958cc49b5474bb30cd3c45840b599f408a561","ssdeep":"","tlshash":"d3d0970f2c64383423b5083e21bada4cb1b2545c113ee40480cde8115db0fd2083ebcc","size":254,"data":"","first_seen":"2025-11-29T11:34:53.316117Z","last_seen":"2026-01-23T08:25:18.425071Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","fqdn":"l7v8m1p.vip","domain":"l7v8m1p.vip","tld":"vip"},"ip":{"addr":"107.149.211.36","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-05-23T16:36:53.343884Z","times_seen":116881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?a60f6c08e8f768d85d863a911517331e","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","date":"2026-01-16T12:52:41.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?a60f6c08e8f768d85d863a911517331e HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l7v8m1p.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nDate: Fri, 16 Jan 2026 12:52:42 GMT\r\nServer: apache\r\nStrict-Transport-Security: max-age=172800\r\nContent-Type: text/plain; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-23T17:07:55.698935Z","times_seen":15618608,"resource_available":true,"data":null}},"time_used":1851,"timings":{"blocked":766,"dns":2,"connect":250,"send":0,"wait":317,"receive":0,"ssl":513},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l7v8m1p.vip/favicon.ico","fqdn":"l7v8m1p.vip","domain":"l7v8m1p.vip","tld":"vip"},"ip":{"addr":"107.149.211.36","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","date":"2026-01-16T12:52:41.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l7v8m1p.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 10:51:26 GMT","end":"Tue, 07 Apr 2026 10:51:25 GMT"},"fingerprint":{"sha1":"62:99:72:14:06:CA:95:D3:FD:BB:2E:6A:20:1B:0C:06:5B:6B:AC:DC","sha256":"30:26:1E:7B:D2:8B:E5:74:C8:CF:FC:4D:4A:EE:B6:01:E0:56:68:A5:2F:D6:82:8C:4B:38:F5:34:97:65:49:89"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: l7v8m1p.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\ndate: Fri, 16 Jan 2026 12:52:41 GMT\r\nserver: nginx\r\nx-cache: BYPASS, Status: 404\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-05-23T17:07:22.725818Z","times_seen":514938,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kht81.vip/","fqdn":"kht81.vip","domain":"kht81.vip","tld":"vip"},"ip":{"addr":"107.149.211.35","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-16T12:52:39.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kht81.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 19:11:22 GMT","end":"Tue, 07 Apr 2026 19:11:21 GMT"},"fingerprint":{"sha1":"13:30:D5:1B:CF:31:27:01:C2:C1:A1:A9:90:1A:56:B6:EC:15:95:13","sha256":"6C:65:14:65:8A:90:42:FB:E9:91:60:95:C9:8C:5D:9A:BC:39:A1:DE:A1:41:FF:F7:A7:77:AF:EF:36:74:26:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kht81.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1854\r\ndate: Fri, 16 Jan 2026 12:52:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1854,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"51a209cf0eb1fea114ca7453a12889b4","sha1":"c766a5af69e1d412cefa97ff50fa4e8331718683","sha256":"19b42933030208d2271a06aabdb66794d2d97bdb903d583ea69707c68c2ac2c2","sha512":"e198ca522054ee554aef54973a289f31d05236f0dd26ab9804e0670b3ccda09e0e8256205c5f8cd47989931e535d2a44679652967a60f9bc0f77f6a4e540b0b6","ssdeep":"","tlshash":"53318e257fc3102106d3325a4ec69504d4b9f162bc4f8c9eb84d6a119f6be5db4cde84","first_seen":"2026-01-16T12:53:07.125036Z","last_seen":"2026-01-16T12:53:07.125036Z","times_seen":1,"resource_available":false,"data":null}},"time_used":987,"timings":{"blocked":417,"dns":98,"connect":153,"send":0,"wait":153,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"kht81.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?080fb4d5004cc76d694e047d496f6930","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","date":"2026-01-16T12:52:41.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?080fb4d5004cc76d694e047d496f6930 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l7v8m1p.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11295\r\nContent-Type: application/javascript\r\nDate: Fri, 16 Jan 2026 12:52:43 GMT\r\nEtag: dae7b408b0f8b3a15132232ed4f9fe2c\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=F04FEFB4F77548D8; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29901,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (625)","md5":"d33cec6d874edd9af43ffd322f355f17","sha1":"755a4d1472d4cd0c26f71d6ace07ad7bb5e9b813","sha256":"60e1458eefb12008309403666f0f4b4a899fbc6876897da8c8b9a8b9bd1abb75","sha512":"628f37bfbb1d2bff44b05d1fa3bd52dba4f21ee3d21649a5a0ccc823811bd86f587bc0710d41b81d18da210bdbc7dbcb6195f3c08dabb5d8341b8cab720dd023","ssdeep":"384:wcJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:wc4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"ead2d9a9b282713293a324a5153f324af17b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-01-16T12:53:07.128547Z","last_seen":"2026-01-16T12:53:07.128547Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5086,"timings":{"blocked":2373,"dns":1,"connect":266,"send":0,"wait":335,"receive":1,"ssl":2108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=F04FEFB4F77548D8\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=288704878\u0026si=080fb4d5004cc76d694e047d496f6930\u0026su=https%3A%2F%2Fkht81.vip%2F\u0026v=1.3.2\u0026lv=1\u0026sn=40454\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fl7v8m1p.vip%2F%3F%3FJULflTKfqM4uTnnvAiqduSFy4%2BrZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858%3DKbLE\u0026tt=%E7%BA%A2%E6%A1%83%E8%A7%86%E9%A2%91%E6%9C%80%E6%96%B0%E5%9C%B0%E5%9D%80%E5%8F%91%E5%B8%83%E9%A1%B5","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","date":"2026-01-16T12:52:43.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=F04FEFB4F77548D8\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=288704878\u0026si=080fb4d5004cc76d694e047d496f6930\u0026su=https%3A%2F%2Fkht81.vip%2F\u0026v=1.3.2\u0026lv=1\u0026sn=40454\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fl7v8m1p.vip%2F%3F%3FJULflTKfqM4uTnnvAiqduSFy4%2BrZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858%3DKbLE\u0026tt=%E7%BA%A2%E6%A1%83%E8%A7%86%E9%A2%91%E6%9C%80%E6%96%B0%E5%9C%B0%E5%9D%80%E5%8F%91%E5%B8%83%E9%A1%B5 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l7v8m1p.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Fri, 16 Jan 2026 12:52:44 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=F45AAA9EC29535DD; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-23T17:04:42.490669Z","times_seen":358658,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","fqdn":"l7v8m1p.vip","domain":"l7v8m1p.vip","tld":"vip"},"ip":{"addr":"107.149.211.36","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-16T12:52:40.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l7v8m1p.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 10:51:26 GMT","end":"Tue, 07 Apr 2026 10:51:25 GMT"},"fingerprint":{"sha1":"62:99:72:14:06:CA:95:D3:FD:BB:2E:6A:20:1B:0C:06:5B:6B:AC:DC","sha256":"30:26:1E:7B:D2:8B:E5:74:C8:CF:FC:4D:4A:EE:B6:01:E0:56:68:A5:2F:D6:82:8C:4B:38:F5:34:97:65:49:89"}}},"request":{"raw":"GET /??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE HTTP/1.1\r\nHost: l7v8m1p.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kht81.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Fri, 16 Jan 2026 12:52:40 GMT\r\netag: W/\"695c652e-c55\"\r\nlast-modified: Tue, 06 Jan 2026 01:28:14 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\ncontent-length: 1437\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3157,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"803ab158d3bef8f8d46112564e66b08b","sha1":"7e393884611e39ae762b64d2f953a5f03857e106","sha256":"27b70c9d936d92263e7266c924e05fe9187100cb821bd85b21f7f299d63fd18c","sha512":"fe11045a6f077ae029ae579492dfd73c561af317ae1dd2d1fde4990395845dead85e5d8493aaa1d277d65006a2921ac870f7dcf1b3df4a674258f7970f493f89","ssdeep":"","tlshash":"3a518563f8022937067200f579b7ab0c60d1c614d9269501d3e8e25e7fe8e96bc1b14d","first_seen":"2026-01-16T12:53:07.134311Z","last_seen":"2026-01-16T12:53:07.134311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1026,"timings":{"blocked":435,"dns":122,"connect":152,"send":0,"wait":154,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l7v8m1p.vip/static/css/link.css","fqdn":"l7v8m1p.vip","domain":"l7v8m1p.vip","tld":"vip"},"ip":{"addr":"107.149.211.36","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE","date":"2026-01-16T12:52:40.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l7v8m1p.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 10:51:26 GMT","end":"Tue, 07 Apr 2026 10:51:25 GMT"},"fingerprint":{"sha1":"62:99:72:14:06:CA:95:D3:FD:BB:2E:6A:20:1B:0C:06:5B:6B:AC:DC","sha256":"30:26:1E:7B:D2:8B:E5:74:C8:CF:FC:4D:4A:EE:B6:01:E0:56:68:A5:2F:D6:82:8C:4B:38:F5:34:97:65:49:89"}}},"request":{"raw":"GET /static/css/link.css HTTP/1.1\r\nHost: l7v8m1p.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l7v8m1p.vip/??JULflTKfqM4uTnnvAiqduSFy4+rZet2Yzt32v2e9MDqikj8DmRCzgdB5anDcfSaicNDSuG6Hm6IV8hrN8ITk9wa5858=KbLE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 16 Jan 2026 12:26:51 GMT\r\netag: W/\"64d6b288-8c4\"\r\nexpires: Sat, 17 Jan 2026 00:26:51 GMT\r\nlast-modified: Fri, 16 Jan 2026 12:26:51 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\ncontent-length: 936\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2244,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bee81813a76dbd385a187d47bb43194c","sha1":"0593738ccb4dcafeb108d32dcc883d2f8926336b","sha256":"082a2cf3743ea509ea4c668e9ae2d260c10b777239f2722f3534df4fd8c8b81b","sha512":"b7f67ab70155b9e3d9635dbb0ff72943746ee12fd9cb45a81319217867198f6fc4ca3c62bb87afb67d047fbb5b29bd485ba45dd666c958c7394d612fc35d333a","ssdeep":"","tlshash":"97414312ba85712df22bd872bc96a6cdb1044d03d29b9bb6c5673236c1d70c3267235e","first_seen":"2025-11-29T11:34:53.304351Z","last_seen":"2026-01-23T08:25:18.415157Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}