{"report_id":"f7f18091-383f-4269-b383-9bbd621a7863","version":6,"status":"done","tags":[],"date":"2026-02-19T15:46:43Z","url":{"schema":"http","addr":"www-tele.com","fqdn":"www-tele.com","domain":"www-tele.com","tld":"com"},"ip":{"addr":"154.206.132.177","port":0,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"www-tele.com/","fqdn":"www-tele.com","domain":"www-tele.com","tld":"com"},"title":"Telegram 官网 - 端到端加密通讯工具 | 多平台免费下载","dom":{"size":33819,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"79a26d709be60961e127ce584f2a4c68","sha1":"5dbc06cb16bbcffb609ec6bd67a94955560dcfb5","sha256":"3f1ae24af7d6d8102fc328dcc2698ad88b513cd476ac22c5926e0b3c73d8a8a9","sha512":"06495621a2130f6eb903df6ec431f18e9921f5ff9cd6ec3af1a703829bdf3e6cd315128967ed7cb808814b4f446e56dba2941552b005ff8bdca7ef07e130e3a3","ssdeep":"768:fFOCaoaLI5GA08uCr1Dly+JZdq0oHrsByJnmzBqcmdSHG77:gCaoaLO08uCr1Dly+JZdq0oHrsByJnmA","tlshash":"7ce2751b52f3a876362351f72baa530a77a5f407dc5bce64769c0a859fc2de08c9320d","dom_hash":"domhashc2ed75cf17bbb6171dbecf7e5c2b7bcb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www-tele.com","fqdn":"www-tele.com","domain":"www-tele.com","tld":"com"},"ip":{"addr":"154.206.132.177","port":0,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-26T15:46:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"www-tele.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www-tele.com","ip":{"addr":"154.206.132.177","port":443,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":35945,"sent_data":2215,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"yinyue-yun.com.cn","ip":{"addr":"154.206.132.177","port":443,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-01-16","domain_rank":0,"first_seen":"2026-01-21T08:05:32.863978Z","last_seen":"2026-01-21T08:05:32.863978Z","alert_count":0,"request_count":2,"received_data":496530,"sent_data":1084,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www-tele.com/","fqdn":"www-tele.com","domain":"www-tele.com","tld":"com"},"ip":{"addr":"154.206.132.177","port":443,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aee772287faaf608555beff13c9d6b9","sha1":"bd53e96e27c5e49c039ebeff72be4206dba7ae62","sha256":"db2a2b02d7a6469fb7f48113e99551c704091b0da4c74e32947563d8815b38ad","sha512":"0f965782d25890571d7bb822a272ec55a78b0acf7d811e6b399d2df97e5104bd01b539895b9b81bdb48b77741f20df6f8c8474de42a29dc6af982c91ccdfaea1","ssdeep":"","tlshash":"19f0551b55be58350d3b529a5356d6826129a0c77090fcba3eac8f480fc4a686aa32c6","size":486,"data":"","first_seen":"2026-02-19T15:46:48.10432Z","last_seen":"2026-02-19T15:46:48.10432Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www-tele.com/android-poster.jpg","fqdn":"www-tele.com","domain":"www-tele.com","tld":"com"},"ip":{"addr":"154.206.132.177","port":443,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-tele.com/","date":"2026-02-19T15:46:23.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmkcqn.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 17:11:09 GMT","end":"Wed, 15 Apr 2026 17:11:08 GMT"},"fingerprint":{"sha1":"00:6E:69:55:E1:56:11:49:37:40:FD:4C:9C:61:89:5D:EA:BD:F2:02","sha256":"42:24:F1:77:E7:E2:7B:D2:F6:5E:91:EB:91:D2:C4:F7:8F:56:33:59:BB:7C:C2:2F:F0:82:67:37:1A:3D:AA:F7"}}},"request":{"raw":"GET /android-poster.jpg HTTP/1.1\r\nHost: www-tele.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-tele.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:46:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-28T07:53:23.033485Z","times_seen":544333,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"www-tele.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yinyue-yun.com.cn/template/news/zhifeiji001/static/picture/Android_demo.mp4","fqdn":"yinyue-yun.com.cn","domain":"yinyue-yun.com.cn","tld":"com.cn"},"ip":{"addr":"154.206.132.177","port":443,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www-tele.com/","date":"2026-02-19T15:46:23.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yinyue-yun.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 14:51:38 GMT","end":"Thu, 16 Apr 2026 14:51:37 GMT"},"fingerprint":{"sha1":"77:C5:74:F9:6F:95:27:07:19:36:D2:5D:22:E1:46:3F:FD:CC:CA:13","sha256":"2B:C5:42:7D:B4:14:A5:6E:4F:73:22:49:33:70:33:03:A1:F5:8A:35:89:B5:7F:5D:5D:46:BC:03:3F:B5:5B:4A"}}},"request":{"raw":"GET /template/news/zhifeiji001/static/picture/Android_demo.mp4 HTTP/1.1\r\nHost: yinyue-yun.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-tele.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:46:23 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 250838\r\nlast-modified: Sun, 18 Jan 2026 13:35:59 GMT\r\netag: \"696ce1bf-3d3d6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-250837/250838\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":250838,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"36bebc24f7516d37cbfbb4ee2aedf6f6","sha1":"c40bb63cbe7c48f67faf8db89240fd60f912e1ce","sha256":"03b2ae439d25e00e297b01942883f4ef8a6a5c87e01dd0faec6f1eef24b92816","sha512":"3d2864b0559642b0928f6a131b4e718d001cb6fa805faa4bcfe275fd051ad9f34d3434433f9819d31aec495fb8daf42f662250b304883c4bd8eaf4ea729abbf2","ssdeep":"6144:XdGaIZbpxUi1c9H9ItxUbrHXBpmSr0t7ZsbAx4UMgHZ:QaItmh9ItGbrRASr2J5","tlshash":"133402a215689f66f774c33ba0b512172b41044e0324ef3e5ffceba15b21eb21a69d61","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-07-24T09:02:44.029389Z","times_seen":1163,"resource_available":false,"data":null}},"time_used":3626,"timings":{"blocked":513,"dns":0,"connect":253,"send":0,"wait":1013,"receive":1586,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www-tele.com/favicon.ico","fqdn":"www-tele.com","domain":"www-tele.com","tld":"com"},"ip":{"addr":"154.206.132.177","port":443,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-tele.com/","date":"2026-02-19T15:46:23.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmkcqn.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 17:11:09 GMT","end":"Wed, 15 Apr 2026 17:11:08 GMT"},"fingerprint":{"sha1":"00:6E:69:55:E1:56:11:49:37:40:FD:4C:9C:61:89:5D:EA:BD:F2:02","sha256":"42:24:F1:77:E7:E2:7B:D2:F6:5E:91:EB:91:D2:C4:F7:8F:56:33:59:BB:7C:C2:2F:F0:82:67:37:1A:3D:AA:F7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www-tele.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-tele.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:46:23 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 0\r\nlast-modified: Tue, 30 Jul 2019 15:51:36 GMT\r\netag: \"5d406788-0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T07:56:17.395008Z","times_seen":17575932,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"www-tele.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-tele.com/favicon.ico","fqdn":"www-tele.com","domain":"www-tele.com","tld":"com"},"ip":{"addr":"154.206.132.177","port":443,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-tele.com/","date":"2026-02-19T15:46:23.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmkcqn.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 17:11:09 GMT","end":"Wed, 15 Apr 2026 17:11:08 GMT"},"fingerprint":{"sha1":"00:6E:69:55:E1:56:11:49:37:40:FD:4C:9C:61:89:5D:EA:BD:F2:02","sha256":"42:24:F1:77:E7:E2:7B:D2:F6:5E:91:EB:91:D2:C4:F7:8F:56:33:59:BB:7C:C2:2F:F0:82:67:37:1A:3D:AA:F7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www-tele.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-tele.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:46:23 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 0\r\nlast-modified: Tue, 30 Jul 2019 15:51:36 GMT\r\netag: \"5d406788-0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T07:56:17.395008Z","times_seen":17575932,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"www-tele.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-tele.com/","fqdn":"www-tele.com","domain":"www-tele.com","tld":"com"},"ip":{"addr":"154.206.132.177","port":443,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-19T15:46:21.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmkcqn.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 17:11:09 GMT","end":"Wed, 15 Apr 2026 17:11:08 GMT"},"fingerprint":{"sha1":"00:6E:69:55:E1:56:11:49:37:40:FD:4C:9C:61:89:5D:EA:BD:F2:02","sha256":"42:24:F1:77:E7:E2:7B:D2:F6:5E:91:EB:91:D2:C4:F7:8F:56:33:59:BB:7C:C2:2F:F0:82:67:37:1A:3D:AA:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www-tele.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:46:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34106,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with LF, NEL line terminators","md5":"ba4184912a5223e28bd52d1995a1c278","sha1":"2da33d2272aa7372be4c1ed65d78acafd182d9b7","sha256":"04ca4f610210b7cf6697dcd079b8cfe71f6a30a96212ca943a92433859cadbea","sha512":"d8b52837cd73efba9e293d0b138a67fc8a4af4df764012d4937140476f25b93750d9a223b8bcc96b8ecd42be72a86ff9828fd2baf40617c1dec71f6f25aa9d6e","ssdeep":"768:SFOCaoaLE5GA08uCr1Dly+D3RccEZdE2SBze2uRVKHvceks1zgtbmPWTU00qf:vCaoaLa08uCr1Dly+7RDEZdE2SBze2up","tlshash":"59036f1b43f3c3727a9361f22f6563492b74e08b9c8eda95379d45d49fd2ea88c52208","first_seen":"2026-02-19T15:46:48.100355Z","last_seen":"2026-02-19T15:46:48.100355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1455,"timings":{"blocked":565,"dns":47,"connect":253,"send":0,"wait":325,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"www-tele.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-tele.com/ios-poster.jpg","fqdn":"www-tele.com","domain":"www-tele.com","tld":"com"},"ip":{"addr":"154.206.132.177","port":443,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-tele.com/","date":"2026-02-19T15:46:23.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmkcqn.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 17:11:09 GMT","end":"Wed, 15 Apr 2026 17:11:08 GMT"},"fingerprint":{"sha1":"00:6E:69:55:E1:56:11:49:37:40:FD:4C:9C:61:89:5D:EA:BD:F2:02","sha256":"42:24:F1:77:E7:E2:7B:D2:F6:5E:91:EB:91:D2:C4:F7:8F:56:33:59:BB:7C:C2:2F:F0:82:67:37:1A:3D:AA:F7"}}},"request":{"raw":"GET /ios-poster.jpg HTTP/1.1\r\nHost: www-tele.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-tele.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:46:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-28T07:53:23.033485Z","times_seen":544333,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"www-tele.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yinyue-yun.com.cn/template/news/zhifeiji001/static/picture/iOS_demo.mp4","fqdn":"yinyue-yun.com.cn","domain":"yinyue-yun.com.cn","tld":"com.cn"},"ip":{"addr":"154.206.132.177","port":443,"asn":133180,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www-tele.com/","date":"2026-02-19T15:46:23.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yinyue-yun.com.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 14:51:38 GMT","end":"Thu, 16 Apr 2026 14:51:37 GMT"},"fingerprint":{"sha1":"77:C5:74:F9:6F:95:27:07:19:36:D2:5D:22:E1:46:3F:FD:CC:CA:13","sha256":"2B:C5:42:7D:B4:14:A5:6E:4F:73:22:49:33:70:33:03:A1:F5:8A:35:89:B5:7F:5D:5D:46:BC:03:3F:B5:5B:4A"}}},"request":{"raw":"GET /template/news/zhifeiji001/static/picture/iOS_demo.mp4 HTTP/1.1\r\nHost: yinyue-yun.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-tele.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 19 Feb 2026 15:46:23 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 244748\r\nlast-modified: Sun, 18 Jan 2026 13:35:59 GMT\r\netag: \"696ce1bf-3bc0c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-244747/244748\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244748,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"91daa37e09df8b688f7832e7d6d80aa6","sha1":"fc59e29275e98dd5dce1efc9b982ec1ba5ad4276","sha256":"eaf99fdddbab6953d53df2a7e81b5275e90e221e0a7ebd3d99f42cf4b6aba6d2","sha512":"96944b45cdaecbb55cf9869004d3644daffc9198b9a7033f581b0c2be769aca586944f9be48c68278df9f0159eb0b248d1a4c5122283e392827ff7d8304e2378","ssdeep":"6144:0j5FgtXKqm3eK60anWDVUK0u4a45U00kYUUe2F1IU77a:wyBKqSe6anW2K0Na45ULjUUeuL7G","tlshash":"423412a69ddd2b00cacfc2354ea81fbb015137692709a193f09c4ec53de897b236ed65","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-07-24T09:02:44.032038Z","times_seen":1116,"resource_available":false,"data":null}},"time_used":2886,"timings":{"blocked":505,"dns":27,"connect":264,"send":0,"wait":1016,"receive":802,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}