{"report_id":"f50c0e4c-3f22-4f9a-bf05-fa5d5725a879","version":6,"status":"done","tags":[],"date":"2026-03-23T14:45:04Z","url":{"schema":"http","addr":"zxjkj66898.com","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":0,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"zxjkj66898.com/#/","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"title":"电子服务平台","dom":{"size":16236,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15669), with no line terminators","md5":"cff6709e89480a9e9b5a77b0c4833b54","sha1":"38df04697236e284ecd0114703e07aaa89e8be31","sha256":"5123a1d476bafef48d6b59765ad3598507f4fd7077d271a1f1ab4f3c03a949ea","sha512":"8e6b2414846c7a6cd9a2ee2981195553cebb7d64d2e1c490c894c5fd4c927f9ace8241c956d12467e81a9aff36ddfe9a1b2015692df967776cd4258f2d494d3b","ssdeep":"192:zAgIquunKQTcQx6OKrQITkHH5ycj57hbROm:XxnKQTcTxcj57hVP","tlshash":"03729c65704104fb60abf5e498b6fe1eb1bad34bc30bc6ec62ac80519fd7d617a419e0","dom_hash":"domhashab3ba224ccbc9b8c228569b68fb1e1db","first_seen":"2026-03-23T14:45:10.282615Z","last_seen":"2026-03-23T15:12:29.746699Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zxjkj66898.com","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":0,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T14:45:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"zxjkj66898.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zxjkj66898.com","ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2025-10-21","domain_rank":0,"first_seen":"2026-03-23T14:45:04.825255Z","last_seen":"2026-03-23T14:45:04.825255Z","alert_count":10,"request_count":10,"received_data":492718,"sent_data":4354,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"datas.8090pay.com","ip":{"addr":"172.67.74.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-17","domain_rank":0,"first_seen":"2025-12-21T06:09:55.571078Z","last_seen":"2025-12-21T06:09:55.571078Z","alert_count":0,"request_count":1,"received_data":2066,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zxjkj66898.com/js/app.1482cf03.js","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e5e43151207b628e931843f9d11d920","sha1":"347b455509eab96e79bcd7b6c06df25de5d7db9e","sha256":"de92903fa4417d109d56df5e20b72364335633f0d1bf6f423a13d869d9fd84d5","sha512":"a0c5dc625b793ee2a035696f1e3a4b16d5768c5371fe1c100dd103c4a9f5ba6e2e5c71d1f2bc0e2cf3718545703323cb49dd49895ef7d43ba5d6b307893b6791","ssdeep":"96:pPEm/ibv6iTq65Mttx4JOUq9Ms9G2WcFBgH6uHWVpVvRCTvs/WWMziMPxdd2AA6L:pP6ZMtEQ9MTnHWjBgEuWMziad/mbY","tlshash":"b3e1f98e7641b0bd12d774e0493f954ab5756523710fd8e1e31be8f12879e4cd221b9c","size":6938,"data":"","first_seen":"2026-03-23T14:45:10.297369Z","last_seen":"2026-03-23T15:12:29.752677Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/js/chunk-vendors.6fa246ac.js","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"64ad15f41179b72de929d6569f9290a4","sha1":"012b5556bd6f8740ba6ae71f038568bde242e526","sha256":"982a2ecde8c80f0d8ae3e0297ae4ae121f973af1db20dc6bbf75d0246ae62841","sha512":"4439f37d33e5e0e9a3f7465407f64119dae67bd94b4cbf0408bd3ebf7f2e2c77df08716a837c26dce5ff16ed7ef0b1e6e1c196aab8c68d095f735977fcda1e08","ssdeep":"3072:Rmz/DiwEneOwcnYjSxAVV9V58xCmeg3Xg/sFyFBnue/2JQJN:RmzDiwYexcn9xAVV9V1/sF+Bnu49","tlshash":"420418d471c2f0a153ea19e6407b1005f33a1e99380e84e4f1adbc87397b95991b7fad","size":173697,"data":"","first_seen":"2025-12-21T06:10:02.043807Z","last_seen":"2026-03-23T15:12:29.752139Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/js/213.8058502d.js","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6ab61652e4038b849a802bbaa112cd9","sha1":"e96b67abf3ef54ccdbb4c3d724bfebc5985b1d27","sha256":"63ef7242aed7cbcb32395e98c7da448748bf12b4bace1a2dcd18a5d959bbe221","sha512":"a014c76374a5fa0aca78daa62dd9997500b75b31d5867009a92d75605f5588cd4699054684e2f84769532c6b273099a3996624a7681ab6c479f8b543f5e4d40e","ssdeep":"192:Rma+6XS+Y8nH0yyjHKQpuEwsZSzHJ7651WpA:RmC7HZyjqQ1VeHJOGy","tlshash":"c4f1b648f1c2f46507f664a0010f480af1ab0a82f45ee4d4777ad499687b98ef2b3f6d","size":7745,"data":"","first_seen":"2025-12-21T06:10:02.022088Z","last_seen":"2026-03-23T15:12:29.751055Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/js/896.c3dd784c.js","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"319c7216123456a6898b4ccd2ff7a7fe","sha1":"12a1c19fef024dcfb9afa04543e9b0ede98a8a9a","sha256":"4b4e2a0aacadf3ecd3c1e2082243efe4b7110b2a3a8e3d79170e93bd74d0b9a8","sha512":"0bdc36bbde240b461e07eebfa51c2a9bd1582ab89061cd3f46eadfb1360de126e83ffc4960f88b2f01eaba2938250b17c87416aca18433ddbb193924b8e01e3f","ssdeep":"768:Rm67LWBRzJooeq/2TULAv9A296Qg4TgcvIx1iSzC2ubAxVDnmvWnL5JaobrRXBgc:RmJzJvOTUkjs2MMmrRR//xzxBEpTP+b","tlshash":"513309c676d1b0a243a754f5406f140af37a6a19b84dc490f268d8e77cba10e836bf7d","size":52948,"data":"","first_seen":"2026-03-23T14:45:10.30132Z","last_seen":"2026-03-23T15:12:29.747445Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/js/912.59d629f2.js","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"de33bb571a2850380b39e1675298a592","sha1":"f364fb694f0d79ad6dbb94b957df81f49c7a9b36","sha256":"5ec3e628055a0be776adc53fb9391006e09475c42019ccb530b2dae67b013a56","sha512":"edcf2a9858250e71769aad47603327011976ec34452269564e332229b80b5e57ea32d0f580cc5a6f52f7759581dc3dce58f43da99b75404a54f3decfc4748b0f","ssdeep":"384:RmldVsBbmlfi9UbG7asDfNjrsBtzLobAFvPcmMlZvGkshNjD:RmIbmBbG7asBs7yhJlVGksLjD","tlshash":"07921a81b0d1e4f8e2c706ad245e0025f2267e99f00ec4bdf7bed46335c5c19a226bb9","size":19394,"data":"","first_seen":"2025-12-21T06:10:02.027526Z","last_seen":"2026-03-23T15:12:29.748709Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zxjkj66898.com/js/213.8058502d.js","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zxjkj66898.com/","date":"2026-03-23T14:44:46.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"book.zxjkj66898.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 04:12:19 GMT","end":"Wed, 13 May 2026 04:12:18 GMT"},"fingerprint":{"sha1":"68:D1:72:0B:C1:3B:B2:89:3C:66:FF:2B:F8:F3:11:37:7A:8C:C0:36","sha256":"58:3F:8B:EE:70:29:66:9D:A7:48:D1:57:6B:AF:CE:07:9B:EC:42:15:3B:5B:26:C7:B1:9F:AB:C1:4E:42:A1:B6"}}},"request":{"raw":"GET /js/213.8058502d.js HTTP/1.1\r\nHost: zxjkj66898.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxjkj66898.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 14:44:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Nov 2025 11:45:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690895f0-1e41\"\r\nexpires: Tue, 24 Mar 2026 02:44:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7745,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7622)","md5":"c6ab61652e4038b849a802bbaa112cd9","sha1":"e96b67abf3ef54ccdbb4c3d724bfebc5985b1d27","sha256":"63ef7242aed7cbcb32395e98c7da448748bf12b4bace1a2dcd18a5d959bbe221","sha512":"a014c76374a5fa0aca78daa62dd9997500b75b31d5867009a92d75605f5588cd4699054684e2f84769532c6b273099a3996624a7681ab6c479f8b543f5e4d40e","ssdeep":"192:Rma+6XS+Y8nH0yyjHKQpuEwsZSzHJ7651WpA:RmC7HZyjqQ1VeHJOGy","tlshash":"c4f1b648f1c2f46507f664a0010f480af1ab0a82f45ee4d4777ad499687b98ef2b3f6d","first_seen":"2025-12-21T06:10:02.022088Z","last_seen":"2026-03-23T15:12:29.751055Z","times_seen":3,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"zxjkj66898.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/css/912.81dfd84e.css","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zxjkj66898.com/","date":"2026-03-23T14:44:46.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"book.zxjkj66898.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 04:12:19 GMT","end":"Wed, 13 May 2026 04:12:18 GMT"},"fingerprint":{"sha1":"68:D1:72:0B:C1:3B:B2:89:3C:66:FF:2B:F8:F3:11:37:7A:8C:C0:36","sha256":"58:3F:8B:EE:70:29:66:9D:A7:48:D1:57:6B:AF:CE:07:9B:EC:42:15:3B:5B:26:C7:B1:9F:AB:C1:4E:42:A1:B6"}}},"request":{"raw":"GET /css/912.81dfd84e.css HTTP/1.1\r\nHost: zxjkj66898.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxjkj66898.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 14:44:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 357\r\nlast-modified: Mon, 03 Nov 2025 11:45:52 GMT\r\netag: \"690895f0-165\"\r\nexpires: Tue, 24 Mar 2026 02:44:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (357), with no line terminators","md5":"58d3aec417ed8593db73289c66c3266c","sha1":"405aa89fc5dcc6dfdde141f100bd207c5b67f15e","sha256":"af5485257250e0fe9a9ff002a3ff090d8e24634c3de6aaae86b360bf741f072c","sha512":"2daa215d106f0756f07250aef52172fc475ab7d08f428585a5271a9448d1f16f9c247d05a3e71f892dba6e3112e33a15eecdbcae70328242c91c484afd5a675a","ssdeep":"","tlshash":"14e0d82155440a004233bd1523f79510322a27a28b46917d420ac8fecfa33573b94ec7","first_seen":"2025-12-21T06:10:02.024001Z","last_seen":"2026-03-23T15:12:29.748128Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"zxjkj66898.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/js/912.59d629f2.js","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zxjkj66898.com/","date":"2026-03-23T14:44:46.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"book.zxjkj66898.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 04:12:19 GMT","end":"Wed, 13 May 2026 04:12:18 GMT"},"fingerprint":{"sha1":"68:D1:72:0B:C1:3B:B2:89:3C:66:FF:2B:F8:F3:11:37:7A:8C:C0:36","sha256":"58:3F:8B:EE:70:29:66:9D:A7:48:D1:57:6B:AF:CE:07:9B:EC:42:15:3B:5B:26:C7:B1:9F:AB:C1:4E:42:A1:B6"}}},"request":{"raw":"GET /js/912.59d629f2.js HTTP/1.1\r\nHost: zxjkj66898.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxjkj66898.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 14:44:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Nov 2025 11:45:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690895f0-4bc2\"\r\nexpires: Tue, 24 Mar 2026 02:44:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19394,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18042)","md5":"de33bb571a2850380b39e1675298a592","sha1":"f364fb694f0d79ad6dbb94b957df81f49c7a9b36","sha256":"5ec3e628055a0be776adc53fb9391006e09475c42019ccb530b2dae67b013a56","sha512":"edcf2a9858250e71769aad47603327011976ec34452269564e332229b80b5e57ea32d0f580cc5a6f52f7759581dc3dce58f43da99b75404a54f3decfc4748b0f","ssdeep":"384:RmldVsBbmlfi9UbG7asDfNjrsBtzLobAFvPcmMlZvGkshNjD:RmIbmBbG7asBs7yhJlVGksLjD","tlshash":"07921a81b0d1e4f8e2c706ad245e0025f2267e99f00ec4bdf7bed46335c5c19a226bb9","first_seen":"2025-12-21T06:10:02.027526Z","last_seen":"2026-03-23T15:12:29.748709Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"zxjkj66898.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/favicon.ico","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zxjkj66898.com/","date":"2026-03-23T14:44:46.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"book.zxjkj66898.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 04:12:19 GMT","end":"Wed, 13 May 2026 04:12:18 GMT"},"fingerprint":{"sha1":"68:D1:72:0B:C1:3B:B2:89:3C:66:FF:2B:F8:F3:11:37:7A:8C:C0:36","sha256":"58:3F:8B:EE:70:29:66:9D:A7:48:D1:57:6B:AF:CE:07:9B:EC:42:15:3B:5B:26:C7:B1:9F:AB:C1:4E:42:A1:B6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zxjkj66898.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxjkj66898.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 14:44:47 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 03 Nov 2025 11:45:52 GMT\r\netag: \"690895f0-10be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"1ba2ae710d927f13d483fd5d1e548c9b","sha1":"c0605efed936ee2600284e6480521d06fa64f872","sha256":"db74ab0b78338c1f778f8398c45f4103c99aea0e845a3118a7750b4eeafd3445","sha512":"f933cd352eaba92f509b3863353ddfefadfada26a4152ecdc4727d450bbf35e7b10fb3038fe8db340d5c63d74e608c1560ec84d0f6ffc8ccd940c9e0d7533544","ssdeep":"48:i3H5R5hLOR4kt38PduMoglJrd6qTrp9hweFC0+6Ga:ipHFUs4MLBvuyCda","tlshash":"ee9175df61c388d9c1b1977f78c449a14f6fd951ba28351f55cf30622e5d75818c1c46","first_seen":"2023-04-18T17:42:03Z","last_seen":"2026-08-13T13:16:18.076063Z","times_seen":6517,"resource_available":false,"data":null}},"time_used":1008,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1008,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"zxjkj66898.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datas.8090pay.com/api/v1/external/public/products?app_id=7\u0026page=1\u0026pageSize=10\u0026category=%E7%94%B5%E5%AD%90%E6%9C%8D%E5%8A%A1","fqdn":"datas.8090pay.com","domain":"8090pay.com","tld":"com"},"ip":{"addr":"172.67.74.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zxjkj66898.com/","date":"2026-03-23T14:44:47.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8090pay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 16:19:22 GMT","end":"Sat, 20 Jun 2026 17:19:20 GMT"},"fingerprint":{"sha1":"52:47:D7:44:31:FC:21:82:D8:FF:67:AF:85:82:E5:26:D6:DF:66:A2","sha256":"B2:98:8D:E4:F7:AA:38:FC:4E:09:06:BC:CB:D0:42:7C:40:D2:8B:12:3A:12:8D:68:C3:67:45:DD:16:B8:A1:48"}}},"request":{"raw":"GET /api/v1/external/public/products?app_id=7\u0026page=1\u0026pageSize=10\u0026category=%E7%94%B5%E5%AD%90%E6%9C%8D%E5%8A%A1 HTTP/1.1\r\nHost: datas.8090pay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://zxjkj66898.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxjkj66898.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:44:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With, X-App-Key, x-app-key\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FBR2wuwFGIdTaWngMWNt%2FHG7KYktlKWsX25Je9qp2y5Hk8a1dMfZ3wDlgKp7G8vDwbw0nDVpHih%2Bn0hJBuQrNp4RzCBNZu7y4aXxY%2BTDMUs%3D\"}]}\r\ncf-ray: 9e0e3755ff55c3b8-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1178,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cd6accfe3fa9636c1e8332b471355539","sha1":"fb01a48e62e48d68f8783f2bf96aca9dc5de2be4","sha256":"e97717f850735703e43951719c6204f853b48acb8fa2cbb1907c06826e30bf5e","sha512":"7f7783653552c71b35d3c445b4ec359c3d4ab3e0d4b02ba95066139ce17575c02ccfcc99872c47cd4cf11f0c8107203b89fff3aacb071e53df2e9da54e7a6de6","ssdeep":"","tlshash":"59216be657ecf06898c449aa48fbb094f4e9af881a0b5ee0b9e8c815044c9be6d0f145","first_seen":"2026-03-23T14:45:10.293504Z","last_seen":"2026-03-23T15:12:29.74929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":92,"dns":55,"connect":8,"send":0,"wait":591,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T14:44:42.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"book.zxjkj66898.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 04:12:19 GMT","end":"Wed, 13 May 2026 04:12:18 GMT"},"fingerprint":{"sha1":"68:D1:72:0B:C1:3B:B2:89:3C:66:FF:2B:F8:F3:11:37:7A:8C:C0:36","sha256":"58:3F:8B:EE:70:29:66:9D:A7:48:D1:57:6B:AF:CE:07:9B:EC:42:15:3B:5B:26:C7:B1:9F:AB:C1:4E:42:A1:B6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zxjkj66898.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 14:44:43 GMT\r\ncontent-type: text/html\r\ncontent-length: 692\r\nlast-modified: Mon, 03 Nov 2025 11:45:52 GMT\r\netag: \"690895f0-2b4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":692,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (680), with no line terminators","md5":"2c615be86f39733f8127d2dcce2ad008","sha1":"42f0408ca4684ac9dc46355793e7c95b08dd4a22","sha256":"09f3c7ffc2b49d02bd36d2190144dfce4db1ed56b11ad0c66a7aec5c875d5346","sha512":"d9af2eb519c822165575b9910d1cc57c438332c34af213c4a0e01635db5ef337d55b3a7a5729bb22eaecf7bbb0e5e170580b77b657146974a99d26ce58cdf828","ssdeep":"","tlshash":"9d01fe86cc10d08d57b05f46bdb0f31dc8ca690c9a21ecc0b5aa417c09f4f888d17c14","first_seen":"2026-03-23T14:45:10.294718Z","last_seen":"2026-03-23T15:12:29.749883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1971,"timings":{"blocked":851,"dns":301,"connect":271,"send":0,"wait":270,"receive":0,"ssl":275},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"zxjkj66898.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/js/chunk-vendors.6fa246ac.js","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zxjkj66898.com/","date":"2026-03-23T14:44:43.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"book.zxjkj66898.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 04:12:19 GMT","end":"Wed, 13 May 2026 04:12:18 GMT"},"fingerprint":{"sha1":"68:D1:72:0B:C1:3B:B2:89:3C:66:FF:2B:F8:F3:11:37:7A:8C:C0:36","sha256":"58:3F:8B:EE:70:29:66:9D:A7:48:D1:57:6B:AF:CE:07:9B:EC:42:15:3B:5B:26:C7:B1:9F:AB:C1:4E:42:A1:B6"}}},"request":{"raw":"GET /js/chunk-vendors.6fa246ac.js HTTP/1.1\r\nHost: zxjkj66898.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxjkj66898.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 14:44:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Nov 2025 11:45:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690895f0-2a681\"\r\nexpires: Tue, 24 Mar 2026 02:44:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173697,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35882)","md5":"64ad15f41179b72de929d6569f9290a4","sha1":"012b5556bd6f8740ba6ae71f038568bde242e526","sha256":"982a2ecde8c80f0d8ae3e0297ae4ae121f973af1db20dc6bbf75d0246ae62841","sha512":"4439f37d33e5e0e9a3f7465407f64119dae67bd94b4cbf0408bd3ebf7f2e2c77df08716a837c26dce5ff16ed7ef0b1e6e1c196aab8c68d095f735977fcda1e08","ssdeep":"3072:Rmz/DiwEneOwcnYjSxAVV9V58xCmeg3Xg/sFyFBnue/2JQJN:RmzDiwYexcn9xAVV9V1/sF+Bnu49","tlshash":"420418d471c2f0a153ea19e6407b1005f33a1e99380e84e4f1adbc87397b95991b7fad","first_seen":"2025-12-21T06:10:02.043807Z","last_seen":"2026-03-23T15:12:29.752139Z","times_seen":3,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"zxjkj66898.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/js/app.1482cf03.js","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zxjkj66898.com/","date":"2026-03-23T14:44:43.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"book.zxjkj66898.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 04:12:19 GMT","end":"Wed, 13 May 2026 04:12:18 GMT"},"fingerprint":{"sha1":"68:D1:72:0B:C1:3B:B2:89:3C:66:FF:2B:F8:F3:11:37:7A:8C:C0:36","sha256":"58:3F:8B:EE:70:29:66:9D:A7:48:D1:57:6B:AF:CE:07:9B:EC:42:15:3B:5B:26:C7:B1:9F:AB:C1:4E:42:A1:B6"}}},"request":{"raw":"GET /js/app.1482cf03.js HTTP/1.1\r\nHost: zxjkj66898.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxjkj66898.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 14:44:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Nov 2025 11:45:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690895f0-1b1a\"\r\nexpires: Tue, 24 Mar 2026 02:44:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6845)","md5":"8e5e43151207b628e931843f9d11d920","sha1":"347b455509eab96e79bcd7b6c06df25de5d7db9e","sha256":"de92903fa4417d109d56df5e20b72364335633f0d1bf6f423a13d869d9fd84d5","sha512":"a0c5dc625b793ee2a035696f1e3a4b16d5768c5371fe1c100dd103c4a9f5ba6e2e5c71d1f2bc0e2cf3718545703323cb49dd49895ef7d43ba5d6b307893b6791","ssdeep":"96:pPEm/ibv6iTq65Mttx4JOUq9Ms9G2WcFBgH6uHWVpVvRCTvs/WWMziMPxdd2AA6L:pP6ZMtEQ9MTnHWjBgEuWMziad/mbY","tlshash":"b3e1f98e7641b0bd12d774e0493f954ab5756523710fd8e1e31be8f12879e4cd221b9c","first_seen":"2026-03-23T14:45:10.297369Z","last_seen":"2026-03-23T15:12:29.752677Z","times_seen":2,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"zxjkj66898.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/css/chunk-vendors.5b00452a.css","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zxjkj66898.com/","date":"2026-03-23T14:44:43.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"book.zxjkj66898.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 04:12:19 GMT","end":"Wed, 13 May 2026 04:12:18 GMT"},"fingerprint":{"sha1":"68:D1:72:0B:C1:3B:B2:89:3C:66:FF:2B:F8:F3:11:37:7A:8C:C0:36","sha256":"58:3F:8B:EE:70:29:66:9D:A7:48:D1:57:6B:AF:CE:07:9B:EC:42:15:3B:5B:26:C7:B1:9F:AB:C1:4E:42:A1:B6"}}},"request":{"raw":"GET /css/chunk-vendors.5b00452a.css HTTP/1.1\r\nHost: zxjkj66898.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxjkj66898.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 14:44:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 11:45:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690895f0-30717\"\r\nexpires: Tue, 24 Mar 2026 02:44:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":198423,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4a184a5bf6b697a2b7bd89396fc509ae","sha1":"0525b8dc8b3cda6baa3c9088c31e09024394007b","sha256":"edbe6870f5bec197b6b88f609a02ead1c2bc70376343b66cd5c3a8d57ea5b420","sha512":"82f18482f886a2d719e2c2517fa16c3d002e07b25feeb5b92e7c1b0c31f1463b8f0090ca6e0f8a19eaedd423d7013f1a44c86b6e1cf82aa4367ba7c19d1a4252","ssdeep":"1536:nKQbFNJ+jqkiHckCwsBlDOFIxuVoxy0n6cVxrAbpaIzg7sVgV5Ya:nfClDsIxuVSq1q7aa","tlshash":"221473a9e690a17c7f27f1759b8b96dcf13cf960ed01daa4f10191580ec7bf1062362a","first_seen":"2025-12-21T06:10:02.017079Z","last_seen":"2026-07-28T19:40:01.449108Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"zxjkj66898.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/css/app.7c3a6f02.css","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zxjkj66898.com/","date":"2026-03-23T14:44:43.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"book.zxjkj66898.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 04:12:19 GMT","end":"Wed, 13 May 2026 04:12:18 GMT"},"fingerprint":{"sha1":"68:D1:72:0B:C1:3B:B2:89:3C:66:FF:2B:F8:F3:11:37:7A:8C:C0:36","sha256":"58:3F:8B:EE:70:29:66:9D:A7:48:D1:57:6B:AF:CE:07:9B:EC:42:15:3B:5B:26:C7:B1:9F:AB:C1:4E:42:A1:B6"}}},"request":{"raw":"GET /css/app.7c3a6f02.css HTTP/1.1\r\nHost: zxjkj66898.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxjkj66898.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 14:44:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 11:45:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690895f0-611c\"\r\nexpires: Tue, 24 Mar 2026 02:44:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24860,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15339), with CRLF, LF line terminators","md5":"2ef11ddd11cc652fbc31b9bae7f8c224","sha1":"4f91e5cc584fe346c9c62534bc0379a4b8a45c0e","sha256":"411dfd1cb3c3c783e83c91513af65a30eddf810ee6bc99ad7acd8ebf9eebd441","sha512":"9e86e9d4306aaa6fae7a450b20578d6e03ab36da69868e9db0e6fc2088a540fd2a68ce55341a1dc98642382ae85902bc7b1590f00739141cb6c347a6a0e19887","ssdeep":"192:ChZNlRo7l7zg1+nWvXeZNRsfjTtQKdnUsf6G7JXYS7JXY1/3w2+Hsf4sfrnHg6wN:ChZNEJR0eZNihHH4wymrh","tlshash":"76b2445da754043b7c53d1fae698e99da117b1c0ee3aa2d7fd825600a7e27f72c83600","first_seen":"2025-12-21T06:10:02.015342Z","last_seen":"2026-03-23T15:12:29.75361Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2082,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"zxjkj66898.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxjkj66898.com/js/896.c3dd784c.js","fqdn":"zxjkj66898.com","domain":"zxjkj66898.com","tld":"com"},"ip":{"addr":"8.155.147.147","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zxjkj66898.com/","date":"2026-03-23T14:44:46.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"book.zxjkj66898.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 04:12:19 GMT","end":"Wed, 13 May 2026 04:12:18 GMT"},"fingerprint":{"sha1":"68:D1:72:0B:C1:3B:B2:89:3C:66:FF:2B:F8:F3:11:37:7A:8C:C0:36","sha256":"58:3F:8B:EE:70:29:66:9D:A7:48:D1:57:6B:AF:CE:07:9B:EC:42:15:3B:5B:26:C7:B1:9F:AB:C1:4E:42:A1:B6"}}},"request":{"raw":"GET /js/896.c3dd784c.js HTTP/1.1\r\nHost: zxjkj66898.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxjkj66898.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 14:44:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Nov 2025 11:45:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690895f0-ced4\"\r\nexpires: Tue, 24 Mar 2026 02:44:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52948,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52676)","md5":"319c7216123456a6898b4ccd2ff7a7fe","sha1":"12a1c19fef024dcfb9afa04543e9b0ede98a8a9a","sha256":"4b4e2a0aacadf3ecd3c1e2082243efe4b7110b2a3a8e3d79170e93bd74d0b9a8","sha512":"0bdc36bbde240b461e07eebfa51c2a9bd1582ab89061cd3f46eadfb1360de126e83ffc4960f88b2f01eaba2938250b17c87416aca18433ddbb193924b8e01e3f","ssdeep":"768:Rm67LWBRzJooeq/2TULAv9A296Qg4TgcvIx1iSzC2ubAxVDnmvWnL5JaobrRXBgc:RmJzJvOTUkjs2MMmrRR//xzxBEpTP+b","tlshash":"513309c676d1b0a243a754f5406f140af37a6a19b84dc490f268d8e77cba10e836bf7d","first_seen":"2026-03-23T14:45:10.30132Z","last_seen":"2026-03-23T15:12:29.747445Z","times_seen":2,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"zxjkj66898.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}