{"report_id":"f1ae2030-e493-4146-88ca-12f673aea135","version":6,"status":"done","tags":[],"date":"2025-12-10T10:35:08Z","url":{"schema":"http","addr":"a25365.cc/","fqdn":"a25365.cc","domain":"a25365.cc","tld":"cc"},"ip":{"addr":"192.151.224.172","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hd365756.com/","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"title":"bet365最快线路检测中心","dom":{"size":6011,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"11696560caa6949d7b654d2b48fde351","sha1":"d37dc96e5f4f610b90c8eb5b04104ebc0c45bf09","sha256":"0aef06889f49cfab6c5c47e1163058e59ec6355477ce4948a3ebfe6a4c8aa450","sha512":"5adabd411fb3a95ee8c075927def58fe4913ddc87f158a9fd1eeea858523e5623bdc5c51df826517cdfa7189bfbfddd5a34eaebd06b49830d2e03d161cbb8043","ssdeep":"96:7UNvPEilDNq0nvWgIFvlV6Sp2XdlcYyo884o66YTGRPrfywcTOCl2:7UNvP3DNtegIoSp2X7cf7lo6+db5cTOT","tlshash":"24c184aa89c5253b32225bdd9b7d772cb8f2000ff941c952b6ac1da64fd0d66404b6cd","dom_hash":"domhash7db2c4eef52cdb9a77f310b6d54f9c9b","first_seen":"2025-12-10T10:35:24.475614Z","last_seen":"2025-12-10T12:49:49.504278Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"a25365.cc/","fqdn":"a25365.cc","domain":"a25365.cc","tld":"cc"},"ip":{"addr":"192.151.224.172","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-14T10:35:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-10T10:34:48Z","timestamp":1765362888,"ip_dst":{"addr":"172.18.0.24","port":49314,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 2","source":"{\"timestamp\":\"2025-12-10T10:34:48.906740+0000\",\"flow_id\":86461127350867,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"27.124.41.82\",\"src_port\":443,\"dest_ip\":\"172.18.0.24\",\"dest_port\":49314,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400001,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 2\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-12-10T10:34:48.547411+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"a25365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"a25365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"23.225.67.83","ip":{"addr":"23.225.67.83","port":3355,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":6261,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2025-12-08T00:38:02.25309Z","alert_count":0,"request_count":2,"received_data":30991,"sent_data":1175,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a25365.cc","ip":{"addr":"192.151.224.172","port":80,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2018-06-25","domain_rank":0,"first_seen":"2025-11-01T03:09:32.862828Z","last_seen":"2025-11-01T03:09:32.862828Z","alert_count":4,"request_count":2,"received_data":1148,"sent_data":872,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hd365756.com","ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-05-16","domain_rank":0,"first_seen":"2025-07-15T13:29:36.42642Z","last_seen":"2025-11-26T09:41:45.041843Z","alert_count":30,"request_count":10,"received_data":618210,"sent_data":4461,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"jQuery:1.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"CNZZ","description":"","website":"https://web.umeng.com/","common_platform_enumeration":"","icon":"cnzz.png","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"a25365.cc/","fqdn":"a25365.cc","domain":"a25365.cc","tld":"cc"},"ip":{"addr":"192.151.224.172","port":80,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e038a372e7a52ed5d854e82166babd7","sha1":"3906acc3d50d84556df000147fb6c0e497199b5d","sha256":"455df8128b471f3a813aa580b6a02729cbdf1f8913814cdd2cc59b1aac987607","sha512":"cded0275ae1f4671c06c0365e5da7fbca9df7018e6ce0ce2639edbeb8368744d22f97480095a736e4e32108c514c9d7050c23c1bc16390da3f5b9a87aa12a45b","ssdeep":"","tlshash":"f7f05c56308250747a63207e9757f346346206b315547049772c5e2d4f68f5b847dbf8","size":537,"data":"","first_seen":"2025-12-10T10:35:24.488248Z","last_seen":"2025-12-10T10:35:24.488248Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"afcc6db76f62a64b3d48849d518ddd14","sha1":"a0c5b6609abe461d20e3459594fc96c88e6980f3","sha256":"4e68888bc2cff3bb40845fe95e0628116ce10bc8cfa4c6ceb6b5731a8663539f","sha512":"b491e904bf42c56cd5a12776f6af42f1ca90f357f538a2df2a524bae9c559b8e849a11a7fd681da944f3c4378830b9b93ad2200f819ed5a1716d7c13a28fda75","ssdeep":"","tlshash":"a3d02b1b6c692c307354147c116ed98db631294c64359802498dec244874ee4086eb88","size":262,"data":"","first_seen":"2025-04-02T10:31:39.483624Z","last_seen":"2026-06-07T01:44:03.573405Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8b1a7be9aea6b5a64e5f44d69c24d1e","sha1":"377e17fef2bfd295bff7a75028cef1b0a912f675","sha256":"3f4aeff225baeec420486bf762bb3b2f2d4230ca439af9363c68bd8b3a070d8f","sha512":"2554e6b3f53a3edc583fc46aff4869b5efc72800c9084a44f0570663f1db78c4bfad79399ac0f4fd22a72c085fa789db7a3fb44c083fdaa58e62b076446b5e16","ssdeep":"","tlshash":"40016d2945c62b773e323bdc0fef978972b341135a569d2031682ba86fc143f869d8e4","size":770,"data":"","first_seen":"2025-04-02T10:31:39.485036Z","last_seen":"2026-06-07T01:44:03.574338Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-07T20:48:58.840207Z","times_seen":121753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/js/jquery-1.7.1.min.js","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddb84c1587287b2df08966081ef063bf","sha1":"9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f","sha256":"88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd","sha512":"0640605a22f437f10521b2d96064e06e4b0a1b96d2e8fb709d6bd593781c72ff8a86d2bfe3090bc4244687e91e94a897c7b132e237d369b2e0dc01083c2ec434","ssdeep":"1536:k5RKUpVgklsdbuLP/l+0fGzA8gmtasgx/c9Rzzi4yff8qeLvHHEjam7rSnmBn9gn:Ee8FbGzA81+xRRi1Z3","tlshash":"0a93e7d9b2d6716387b731bc50af510bb13698aa784c8c50f068d8e4be74a48907bf7d","size":93868,"data":"","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-08-07T23:49:43.621221Z","times_seen":19834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"839c8edeaa6446ddc3f82e9db8ce6ba8","sha1":"76dab931301c0750b751a8de1e1871ecab8229d9","sha256":"6b8cace24d38ffc88a7767e73579a8e825382473dcb261858d4763cc78248405","sha512":"b715b2a2c55d81b8587df5a2761fc2fedcfa6cf6432e24435802521ab39a29e4aeddad2c232cb6a288ea90349909731bc9f0f3f9d8dca9e50e3003af40cea6b9","ssdeep":"","tlshash":"7641aedcc18121ae72233e9d8b1e271d34f6409fb9d5c467aa0d6d938f3091216ab2dd","size":2017,"data":"","first_seen":"2025-11-19T07:00:11.43858Z","last_seen":"2025-12-13T09:57:51.014859Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-07T20:48:58.840207Z","times_seen":121753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?7a1582cc8f44113ce21248a0f1b73203","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d324844ad1550abcc9c4e172a71dd950","sha1":"f6a439676ee467b0fc9277c1573b1349873ca694","sha256":"26f527a2bedc56608ebdcc801d26978db2cada26907231388cffbbc768ea54bf","sha512":"383a4f34361ec603c59d38b74585241b1a63a4ac08dafe3f16af79adcdb1fdfab62d4efc979f8d75ae0257eaeb67e9b2bd144d9cb9dc3fb30265f88df8ff232d","ssdeep":"384:YdJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:Yd4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"cad2d9a9b282713293a324a5153f324ef07b5a54bd4968a4f11994c07d38fbb027bfdd","size":30009,"data":"","first_seen":"2025-12-10T10:35:24.484203Z","last_seen":"2025-12-10T10:35:24.484203Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"fc3569f1f528793f3426c48b633a7ddc","sha1":"326607f782eecd73c12e8883422b64bbca053013","sha256":"e8dcaa25cfdabb01b524765a7f1bbafb2aa29df27d9c1e629e92a4de80d1fc02","sha512":"1494a41697b8cfe9a1e42c664c6d326352dc9f2b315da01756162b0b3f8ad9bf2b63814ef9ee8735275d273e57fb32bec513d9873ae0f356c421f859a9fb4865","ssdeep":"","tlshash":"efe0c0dc53c50dd63ed31c78e048054c91aa0d2a3dfc58919d00250b14ced7b92c2e8f","size":372,"data":"","first_seen":"2025-12-10T10:35:24.493079Z","last_seen":"2025-12-10T10:35:24.493079Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"a25365.cc/","fqdn":"a25365.cc","domain":"a25365.cc","tld":"cc"},"ip":{"addr":"192.151.224.172","port":80,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-10T10:34:47.157Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: a25365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html;charset=utf-8\r\nCache-Control: max-age=86400\r\nContent-Length: 1019\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1019,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"3aa15daeaf9cd7f455e9963a6e8be878","sha1":"62c6880ea261397683b03b36ed611fa2534f0bfd","sha256":"bd89531a70cb6a92f4ab8cb2d5b0e9c2758ac00c58cffbc865879d9ce357e09a","sha512":"b28383a8e83169bb8a301b670960a80bdf6e9758792413ed10b9d6719181588cbbd44db42d117e2a6383fa767eac34f1552166bced674491500ece707bdfe5d6","ssdeep":"","tlshash":"4411001220e3503a256381655be3f30f38825a7356129004b26c4a9e4fd8f4bc8b76fc","first_seen":"2025-12-10T10:35:24.477352Z","last_seen":"2025-12-10T10:35:24.477352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":157,"dns":1,"connect":156,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"a25365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"a25365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/js/jquery-1.7.1.min.js","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd365756.com/","date":"2025-12-10T10:34:50.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"365756.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Fri, 16 May 2025 06:12:47 GMT","end":"Mon, 15 Jun 2026 06:12:46 GMT"},"fingerprint":{"sha1":"6C:29:DF:D9:80:F3:24:2C:35:EA:D8:EE:F6:BB:2A:DC:DA:06:38:A4","sha256":"3C:DD:C3:9B:D0:7A:25:9E:99:86:BD:88:FA:AB:FF:1C:71:BE:31:4D:EE:61:0E:BF:19:F7:4F:42:EA:24:47:28"}}},"request":{"raw":"GET /js/jquery-1.7.1.min.js HTTP/1.1\r\nHost: hd365756.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd365756.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 30 Jan 2018 17:39:52 GMT\r\naccept-ranges: bytes\r\netag: \"0643b55f199d31:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\ndate: Wed, 10 Dec 2025 10:34:49 GMT\r\ncontent-length: 33226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)","md5":"ddb84c1587287b2df08966081ef063bf","sha1":"9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f","sha256":"88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd","sha512":"0640605a22f437f10521b2d96064e06e4b0a1b96d2e8fb709d6bd593781c72ff8a86d2bfe3090bc4244687e91e94a897c7b132e237d369b2e0dc01083c2ec434","ssdeep":"1536:k5RKUpVgklsdbuLP/l+0fGzA8gmtasgx/c9Rzzi4yff8qeLvHHEjam7rSnmBn9gn:Ee8FbGzA81+xRRi1Z3","tlshash":"0a93e7d9b2d6716387b731bc50af510bb13698aa784c8c50f068d8e4be74a48907bf7d","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-08-07T23:49:43.621221Z","times_seen":19834,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/img/yelang.png","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd365756.com/","date":"2025-12-10T10:34:50.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"365756.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Fri, 16 May 2025 06:12:47 GMT","end":"Mon, 15 Jun 2026 06:12:46 GMT"},"fingerprint":{"sha1":"6C:29:DF:D9:80:F3:24:2C:35:EA:D8:EE:F6:BB:2A:DC:DA:06:38:A4","sha256":"3C:DD:C3:9B:D0:7A:25:9E:99:86:BD:88:FA:AB:FF:1C:71:BE:31:4D:EE:61:0E:BF:19:F7:4F:42:EA:24:47:28"}}},"request":{"raw":"GET /img/yelang.png HTTP/1.1\r\nHost: hd365756.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd365756.com/css/style.css?v=888\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Aug 2018 15:18:10 GMT\r\naccept-ranges: bytes\r\netag: \"0653ddbaa29d41:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Wed, 10 Dec 2025 10:34:51 GMT\r\ncontent-length: 9581\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":9581,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 488 x 53, 8-bit/color RGBA, non-interlaced","md5":"d1df5668dce4764bb973536ca4599278","sha1":"f1412338e1184d1af152502c74d37a3c10e97730","sha256":"1183af09aab2915ad1da55b60ad1c34c6948c13de0bca10da93caed6c7a91658","sha512":"76c8926819fa46636890710074597be506e353957bec674fd9eb2ceeca06740dd938d97fa30326c6d244f922446ae9bc6b89bda130c7a629f60372047342e09b","ssdeep":"192:VefcCp5LYp6dULRI8Y3pwSCINlmB2hxeXl2lIXsQkC8JkSrW:Vefn5a6+JY5w7pBsxeXltsu","tlshash":"7612b0cb5e8d13a15874c4aa6cbb944c939ea30d8e907bc620d6f1c95ab7058d64f049","first_seen":"2024-05-19T21:06:47Z","last_seen":"2026-08-08T00:53:21.144888Z","times_seen":463,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1037,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"23.225.67.83:3355/?r=aHR0cDovL2EyNTM2NS5jYy8=","fqdn":"23.225.67.83","domain":"23.225.67.83","tld":""},"ip":{"addr":"23.225.67.83","port":3355,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-10T10:34:47.546Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?r=aHR0cDovL2EyNTM2NS5jYy8= HTTP/1.1\r\nHost: 23.225.67.83:3355\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://a25365.cc/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Wed, 10 Dec 2025 10:34:47 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 44\r\nConnection: keep-alive\r\nLocation: https://hd365756.com/\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6070,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T01:24:27.380512Z","times_seen":17770569,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":154,"dns":0,"connect":154,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/css/flash.css","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hd365756.com/","date":"2025-12-10T10:34:50.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"365756.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Fri, 16 May 2025 06:12:47 GMT","end":"Mon, 15 Jun 2026 06:12:46 GMT"},"fingerprint":{"sha1":"6C:29:DF:D9:80:F3:24:2C:35:EA:D8:EE:F6:BB:2A:DC:DA:06:38:A4","sha256":"3C:DD:C3:9B:D0:7A:25:9E:99:86:BD:88:FA:AB:FF:1C:71:BE:31:4D:EE:61:0E:BF:19:F7:4F:42:EA:24:47:28"}}},"request":{"raw":"GET /css/flash.css HTTP/1.1\r\nHost: hd365756.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd365756.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 23 May 2018 09:38:10 GMT\r\naccept-ranges: bytes\r\netag: \"0edf9c279f2d31:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\ndate: Wed, 10 Dec 2025 10:34:49 GMT\r\ncontent-length: 3655\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":55121,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55097), with CRLF line terminators","md5":"68d6509f4eb442e761d51c22f9c62004","sha1":"378dbb447732f5fd91e850efbb9f64b1b2def614","sha256":"48ef7fb539ccc7d8186e8017283e3493b1d32497b445b8c7946363be989ff747","sha512":"41d2bfd1887a2ab3f7c925d57fa3075bdd53330414c1d9e0ffc976efc854a84587e44e5383fad07f84c8b6dc68505a35cd0855b615be7e7a0b5799783c7d9570","ssdeep":"768:jkZlIbIM6fZBIaI2IHwO1CA5kiDb3CyQ5xrQe/0STfs2s2:jkZ/IHwO1CA5kiDb3CyQ5xrQe/0ST1","tlshash":"583304af5891228991674f6283dc5e68872dc67714621cde33816c8b8f87f9f33da607","first_seen":"2023-07-17T19:32:02Z","last_seen":"2026-08-08T00:53:21.135403Z","times_seen":835,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/img/dxx.png","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd365756.com/","date":"2025-12-10T10:34:50.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"365756.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Fri, 16 May 2025 06:12:47 GMT","end":"Mon, 15 Jun 2026 06:12:46 GMT"},"fingerprint":{"sha1":"6C:29:DF:D9:80:F3:24:2C:35:EA:D8:EE:F6:BB:2A:DC:DA:06:38:A4","sha256":"3C:DD:C3:9B:D0:7A:25:9E:99:86:BD:88:FA:AB:FF:1C:71:BE:31:4D:EE:61:0E:BF:19:F7:4F:42:EA:24:47:28"}}},"request":{"raw":"GET /img/dxx.png HTTP/1.1\r\nHost: hd365756.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd365756.com/css/style.css?v=888\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Aug 2018 15:14:16 GMT\r\naccept-ranges: bytes\r\netag: \"0d4c34faa29d41:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Wed, 10 Dec 2025 10:34:51 GMT\r\ncontent-length: 9574\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":9574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 247 x 62, 8-bit/color RGBA, non-interlaced","md5":"73ca8456fab59bc8de3c9cc014131df5","sha1":"74769520d5ee52e71ade4076ffd15091dda3f6fd","sha256":"9430965726caeed564e5323141da4c47ab0031976ad450c326ac56489c9205d2","sha512":"006b5ac5d57d84ac039f281ad366ed4f9d654d337539893bc7775937c81704aa6c2dd283ed34693ff4c20e26702e9a9cf4db5a9f1c2b4296f7b139a447be4beb","ssdeep":"192:EUCYTwGvTHfRQ/+xoaG6TR6RKDZ8qVhp8z5OMghHlDED/f3JsTXyIa9n1fUjtC:EU9vjfRQ+06tjXvgaED//+yIaZaj8","tlshash":"0d12bfd165b0cf81db5e402dc2daf3065eab3d50142b920157e684257bf9bbb94b4e38","first_seen":"2024-05-19T21:06:47Z","last_seen":"2026-08-08T00:53:21.149046Z","times_seen":464,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1039,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/favicon.ico","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd365756.com/","date":"2025-12-10T10:34:51.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"365756.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Fri, 16 May 2025 06:12:47 GMT","end":"Mon, 15 Jun 2026 06:12:46 GMT"},"fingerprint":{"sha1":"6C:29:DF:D9:80:F3:24:2C:35:EA:D8:EE:F6:BB:2A:DC:DA:06:38:A4","sha256":"3C:DD:C3:9B:D0:7A:25:9E:99:86:BD:88:FA:AB:FF:1C:71:BE:31:4D:EE:61:0E:BF:19:F7:4F:42:EA:24:47:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hd365756.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd365756.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nserver: Microsoft-IIS/10.0\r\ndate: Wed, 10 Dec 2025 10:34:51 GMT\r\ncontent-length: 1163\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1163,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b95f02d7712377499e60763a74069631","sha1":"2a6ea7a8c7353bddd6bd7b487842da1feaa525cf","sha256":"5da10042a026a0612186de79cd45da85dfb2e2d71e5749f92f10ae9f91871f68","sha512":"03e939b8cb16223055781ed96668e3426b9eec6c747da9d4071cd0144c218a9e5f725a5bc2fe6e9ba8da1795386ff08434050aa69bb67bc85029ab09ab394ba2","ssdeep":"","tlshash":"f621201992b05d50e65684a070f2b3ea3a4b8646f48b0b99e422722fd8c256290df384","first_seen":"2025-04-07T01:16:36.738328Z","last_seen":"2026-08-08T00:53:21.151955Z","times_seen":5958,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=2A9A3A08AA0E429B\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1886829726\u0026si=7a1582cc8f44113ce21248a0f1b73203\u0026su=http%3A%2F%2Fa25365.cc%2F\u0026v=1.3.2\u0026lv=1\u0026sn=46597\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fhd365756.com%2F\u0026tt=bet365%E6%9C%80%E5%BF%AB%E7%BA%BF%E8%B7%AF%E6%A3%80%E6%B5%8B%E4%B8%AD%E5%BF%83","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd365756.com/","date":"2025-12-10T10:34:52.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=2A9A3A08AA0E429B\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1886829726\u0026si=7a1582cc8f44113ce21248a0f1b73203\u0026su=http%3A%2F%2Fa25365.cc%2F\u0026v=1.3.2\u0026lv=1\u0026sn=46597\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fhd365756.com%2F\u0026tt=bet365%E6%9C%80%E5%BF%AB%E7%BA%BF%E8%B7%AF%E6%A3%80%E6%B5%8B%E4%B8%AD%E5%BF%83 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd365756.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Wed, 10 Dec 2025 10:34:52 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=24310C406575FC1A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-08T01:20:34.843616Z","times_seen":376320,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a25365.cc/","fqdn":"a25365.cc","domain":"a25365.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-10T10:34:45.013Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: a25365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T01:24:27.380512Z","times_seen":17770569,"resource_available":true,"data":null}},"time_used":1822,"timings":{"blocked":1822,"dns":0,"connect":156,"send":0,"wait":0,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"a25365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"a25365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/img/ewm.png","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd365756.com/","date":"2025-12-10T10:34:50.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"365756.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Fri, 16 May 2025 06:12:47 GMT","end":"Mon, 15 Jun 2026 06:12:46 GMT"},"fingerprint":{"sha1":"6C:29:DF:D9:80:F3:24:2C:35:EA:D8:EE:F6:BB:2A:DC:DA:06:38:A4","sha256":"3C:DD:C3:9B:D0:7A:25:9E:99:86:BD:88:FA:AB:FF:1C:71:BE:31:4D:EE:61:0E:BF:19:F7:4F:42:EA:24:47:28"}}},"request":{"raw":"GET /img/ewm.png HTTP/1.1\r\nHost: hd365756.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd365756.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 May 2025 19:22:26 GMT\r\naccept-ranges: bytes\r\netag: \"b312b661c7db1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Wed, 10 Dec 2025 10:34:49 GMT\r\ncontent-length: 1327\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit/color RGB, non-interlaced","md5":"9a2eb204c837b0550c3214ba71846af9","sha1":"24166f4e03bcb2969a352e81be016ff1fea26aa2","sha256":"554ec30b9d027de0a4ae84a28551edf268c3a4f9f57f10dc4c1b0f18fc8fa84d","sha512":"5ecdaf88ef27b4b36d9c3d8880d3bc0236d1690beb2e53eb8ca4bfc8e281cd5190fa43748abfc94e03002554d828fb48852c021998e58d686517aa2282594515","ssdeep":"","tlshash":"3e2194d35fcf2a637a9e7b50ce891f1089594cad2831c536269833647e64d70cb21bce","first_seen":"2025-05-28T12:22:35.690601Z","last_seen":"2026-08-08T00:53:21.163117Z","times_seen":278,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/img/bodyimg.png?v=1","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd365756.com/","date":"2025-12-10T10:34:50.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"365756.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Fri, 16 May 2025 06:12:47 GMT","end":"Mon, 15 Jun 2026 06:12:46 GMT"},"fingerprint":{"sha1":"6C:29:DF:D9:80:F3:24:2C:35:EA:D8:EE:F6:BB:2A:DC:DA:06:38:A4","sha256":"3C:DD:C3:9B:D0:7A:25:9E:99:86:BD:88:FA:AB:FF:1C:71:BE:31:4D:EE:61:0E:BF:19:F7:4F:42:EA:24:47:28"}}},"request":{"raw":"GET /img/bodyimg.png?v=1 HTTP/1.1\r\nHost: hd365756.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd365756.com/css/style.css?v=888\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Aug 2018 15:19:36 GMT\r\naccept-ranges: bytes\r\netag: \"0f47feab29d41:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Wed, 10 Dec 2025 10:34:51 GMT\r\ncontent-length: 365010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":365010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1940 x 233, 8-bit/color RGBA, non-interlaced","md5":"5f913f5273c0413e2d2a74f2a06848a2","sha1":"0d9a9b5c411bd6f253c59aa1bfe662a69bd64e7f","sha256":"1e6327fed2333a1d60c96106853285e9004b8275946f99f023a8c5fcc8099d90","sha512":"7ae6874b29822d351654301fc384cc16ede4e528001243e2ce6d240ae36b25c051928f58519c563e4a2fdde949b394ae639d90d9cedc005152451416c5311196","ssdeep":"6144:Mb7w1A52wIx/AxzUZv2Xl1RA0zzG6AN0XFopceZgjCQgK+oTvbH1owgfXTVH4nK0:MbU1MWMzUZ+Xl1O0fX4flQgK+oz1F45g","tlshash":"6c7423a56b6bb2086c61d3142d35cf8662fe70b6a605499c23d5ccc5b4a13bc26bd3fc","first_seen":"2024-05-19T21:06:47Z","last_seen":"2026-08-08T00:53:21.11871Z","times_seen":465,"resource_available":false,"data":null}},"time_used":1447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":1086,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?7a1582cc8f44113ce21248a0f1b73203","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd365756.com/","date":"2025-12-10T10:34:50.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?7a1582cc8f44113ce21248a0f1b73203 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd365756.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11403\r\nContent-Type: application/javascript\r\nDate: Wed, 10 Dec 2025 10:34:51 GMT\r\nEtag: 9bc4769308f45ad1a8945e0886b33890\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=2A9A3A08AA0E429B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30009,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (733)","md5":"d324844ad1550abcc9c4e172a71dd950","sha1":"f6a439676ee467b0fc9277c1573b1349873ca694","sha256":"26f527a2bedc56608ebdcc801d26978db2cada26907231388cffbbc768ea54bf","sha512":"383a4f34361ec603c59d38b74585241b1a63a4ac08dafe3f16af79adcdb1fdfab62d4efc979f8d75ae0257eaeb67e9b2bd144d9cb9dc3fb30265f88df8ff232d","ssdeep":"384:YdJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:Yd4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"cad2d9a9b282713293a324a5153f324ef07b5a54bd4968a4f11994c07d38fbb027bfdd","first_seen":"2025-12-10T10:35:24.484203Z","last_seen":"2025-12-10T10:35:24.484203Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1890,"timings":{"blocked":783,"dns":1,"connect":258,"send":0,"wait":322,"receive":1,"ssl":522},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-10T10:34:47.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"365756.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Fri, 16 May 2025 06:12:47 GMT","end":"Mon, 15 Jun 2026 06:12:46 GMT"},"fingerprint":{"sha1":"6C:29:DF:D9:80:F3:24:2C:35:EA:D8:EE:F6:BB:2A:DC:DA:06:38:A4","sha256":"3C:DD:C3:9B:D0:7A:25:9E:99:86:BD:88:FA:AB:FF:1C:71:BE:31:4D:EE:61:0E:BF:19:F7:4F:42:EA:24:47:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hd365756.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://a25365.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 04 Dec 2025 07:17:32 GMT\r\naccept-ranges: bytes\r\netag: \"04e59eee64dc1:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\ndate: Wed, 10 Dec 2025 10:34:49 GMT\r\ncontent-length: 2305\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"jQuery:1.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"CNZZ","description":"","website":"https://web.umeng.com/","common_platform_enumeration":"","icon":"cnzz.png","categories":["Analytics"]}],"data":{"size":6070,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"e1b80357bae79f5fa952f4ca048aaec3","sha1":"33ee34098c68b042ed513e1ab43b6b119241f264","sha256":"465ab0a5795c7bfae8cfcabcb5df069dbd13cfb30e41b2ae737a182507eabab4","sha512":"300b95607b54be98daed1ad241f63c5ede875648fff1badd12dc5e48c030ff6f7cccb3614b8326cdd5f0f879a73d7e2ecc6bd9e2e44714f22da91eee0f19947d","ssdeep":"96:DkNHRp69qilsObfsqNMzjjpuvlp6OZ+uDTYzguEEnTUiN2X01:DkNHolsOJCN1OAuDTYztEEnTUiN2k1","tlshash":"08c1716955c1597e723216d88a3eab2cf8f2000fea40c912f5ac1aa74bf4c25845bacd","first_seen":"2025-12-06T16:04:43.952599Z","last_seen":"2025-12-13T09:57:51.006559Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3901,"timings":{"blocked":1770,"dns":686,"connect":360,"send":0,"wait":360,"receive":0,"ssl":723},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/css/style.css?v=888","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hd365756.com/","date":"2025-12-10T10:34:50.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"365756.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Fri, 16 May 2025 06:12:47 GMT","end":"Mon, 15 Jun 2026 06:12:46 GMT"},"fingerprint":{"sha1":"6C:29:DF:D9:80:F3:24:2C:35:EA:D8:EE:F6:BB:2A:DC:DA:06:38:A4","sha256":"3C:DD:C3:9B:D0:7A:25:9E:99:86:BD:88:FA:AB:FF:1C:71:BE:31:4D:EE:61:0E:BF:19:F7:4F:42:EA:24:47:28"}}},"request":{"raw":"GET /css/style.css?v=888 HTTP/1.1\r\nHost: hd365756.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd365756.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 12 Dec 2018 06:05:32 GMT\r\naccept-ranges: bytes\r\netag: \"0de78b0e091d41:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\ndate: Wed, 10 Dec 2025 10:34:49 GMT\r\ncontent-length: 1849\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":6017,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2dc18dfeca75ef4c42dbcf35c8dba779","sha1":"7cb564682ea0242e94eba5d10e4ed7479603c6e3","sha256":"1cafa656d554956b948c7e59dd0411ac6eb9fa16ee71fc875b76fb71f36eabec","sha512":"e935ad9160426db3f9e7a4c6c4b5cb296f9e8bd417a4ebd1a20ad62fe4fc73b39eafdaacd2f450dd4124f04aee2b3f4ab5a1e4589061f4653b36007be1245db9","ssdeep":"96:cl5X0fJii8wGGKDeD0Cxb8x2xKxWQqpGTccexmjmes3PLuM6usQPfeLPFe1an5Hy:cHX0oGVkGKxWQ+gexqUZNqS","tlshash":"b5c1211066713489f0bb81a1ba979f69771ad0c3624317bae88dfb35d58f1433b72394","first_seen":"2025-04-07T10:43:47.796599Z","last_seen":"2026-08-08T00:53:21.138058Z","times_seen":312,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hd365756.com/img/rss.png","fqdn":"hd365756.com","domain":"hd365756.com","tld":"com"},"ip":{"addr":"27.124.41.82","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd365756.com/","date":"2025-12-10T10:34:50.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA1","protocol":"TLSv1.2","cert":{"subject":{"commonName":"365756.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Fri, 16 May 2025 06:12:47 GMT","end":"Mon, 15 Jun 2026 06:12:46 GMT"},"fingerprint":{"sha1":"6C:29:DF:D9:80:F3:24:2C:35:EA:D8:EE:F6:BB:2A:DC:DA:06:38:A4","sha256":"3C:DD:C3:9B:D0:7A:25:9E:99:86:BD:88:FA:AB:FF:1C:71:BE:31:4D:EE:61:0E:BF:19:F7:4F:42:EA:24:47:28"}}},"request":{"raw":"GET /img/rss.png HTTP/1.1\r\nHost: hd365756.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd365756.com/css/style.css?v=888\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Aug 2018 15:45:14 GMT\r\naccept-ranges: bytes\r\netag: \"02138a3ae29d41:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Wed, 10 Dec 2025 10:34:51 GMT\r\ncontent-length: 67936\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":67936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1058 x 738, 8-bit/color RGBA, non-interlaced","md5":"9cc8bb70ff34ae17f59b82286f0dab4a","sha1":"e46ab6adb7e39e2d41a29397c5f9a9140cdfe18d","sha256":"6e09fb6e94c8054947adb4613326d69fc498a6c8ca9c81df02876a95a8df00f2","sha512":"c2ceb38eb0924183ba4cc59995aa8558e4c0725a165dc5e00cfe6c84429bb26fe4c39ba840036aeff8bc25fe5a34e7afb19be596f8885bbadbb716bc2e7e7080","ssdeep":"1536:3gCpDP2Xz1guI86Jk/wyUuCzZPb01oN8j9/Rc52a7S+pnMiB:wCpeZPwyUB0/R/Rc5xppndB","tlshash":"b263bfa9fcb1ed6dc8daa1322d9f47d93c9f0718209ba39d7261ec3925dadc33601641","first_seen":"2024-05-19T21:06:47Z","last_seen":"2026-08-08T00:53:21.124143Z","times_seen":463,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":679,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"hd365756.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}