{"report_id":"ff1c74f8-f53c-46ff-9fe2-b92481ab84a0","version":6,"status":"done","tags":[],"date":"2025-10-19T08:13:08Z","url":{"schema":"https","addr":"wneteacloud.top/","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wneteacloud.top/","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"title":"进入首页"},"submit":{"url":{"schema":"https","addr":"wneteacloud.top/","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-23T08:13:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"wneteacloud.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"wneteacloud.top","ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-02-23","domain_rank":0,"first_seen":"2025-10-19T08:13:08.935515Z","last_seen":"2025-10-19T08:13:08.935515Z","alert_count":9,"request_count":9,"received_data":551252,"sent_data":4290,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wneteacloud.top/static/fonts/ibmplexsans-regular.woff2","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wneteacloud.top/","date":"2025-10-19T08:12:50.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wneteacloud.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Feb 2025 14:43:50 GMT","end":"Sat, 24 May 2025 14:43:49 GMT"},"fingerprint":{"sha1":"B2:C0:AC:45:E7:6D:19:E7:00:D8:75:74:FE:20:2D:87:96:23:DC:9E","sha256":"F1:A3:48:67:3D:58:87:A3:51:DC:0C:4D:3B:43:1C:BA:B3:05:DF:2D:30:59:71:D3:60:B3:7D:5E:1C:0B:9A:BA"}}},"request":{"raw":"GET /static/fonts/ibmplexsans-regular.woff2 HTTP/1.1\r\nHost: wneteacloud.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wneteacloud.top/static/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 56184\r\nlast-modified: Wed, 13 Aug 2025 00:53:48 GMT\r\netag: \"689be21c-db78\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56184,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56184, version 3.65","md5":"bb07700dc58a6d40a80c0632e0e09c38","sha1":"1588c41e9e71a29264e9a841b5cd0d74a37b337e","sha256":"dd6cd52bf15d2f5bf7519cd3d876ae2d37306e77d1a95a63e867e6c95ab9c49e","sha512":"ee27f031ed8288646668cdaf197f10415361709e64f8bd877dd902523cece4a7b537542610908a0fb295b34eeaacf2daee5c166540f285298b93133693790b04","ssdeep":"1536:yPpIdbTCFoOKOaWLFhTK7QGOf/Vh4UaW6UVbByf2e:yPmRpv7QGOfcbUTW","tlshash":"5d43f178ce667025bc87b458db35003e976c5b8c74ef1ea0a29e8f41b6ce10e731a536","first_seen":"2023-04-10T19:06:25Z","last_seen":"2026-08-13T16:08:37.685931Z","times_seen":345,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":367,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"wneteacloud.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wneteacloud.top/","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-19T08:12:46.911Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: wneteacloud.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T02:04:44.628897Z","times_seen":17911053,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":440,"dns":0,"connect":165,"send":0,"wait":0,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"wneteacloud.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wneteacloud.top/","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-19T08:12:48.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wneteacloud.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Feb 2025 14:43:50 GMT","end":"Sat, 24 May 2025 14:43:49 GMT"},"fingerprint":{"sha1":"B2:C0:AC:45:E7:6D:19:E7:00:D8:75:74:FE:20:2D:87:96:23:DC:9E","sha256":"F1:A3:48:67:3D:58:87:A3:51:DC:0C:4D:3B:43:1C:BA:B3:05:DF:2D:30:59:71:D3:60:B3:7D:5E:1C:0B:9A:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wneteacloud.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 08 Oct 2025 13:28:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e66710-cb4\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3252,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1f47465ddafab458f69593101db289d6","sha1":"7d0d21e9ba5f92b9cf89413b63617b9aabaff73a","sha256":"5a83b9d7ca64491fde017d7c7d45e55550aaeda817acb7942aac72e067912811","sha512":"456b454d02a9930d666a0dfccf387c6a809703eac2d9b84bda64b773a39e3e7d2fff210cd4e87b1a43d4735583654cc0be3c3796cc2fa88c9ff0182c5e454c92","ssdeep":"","tlshash":"4c61f02355d0b41712b281a92ae9f388ffc5d107e61a6d02b5ee33df5ff1e04449391a","first_seen":"2025-10-19T08:06:51.365895Z","last_seen":"2025-10-19T08:15:13.577662Z","times_seen":9,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":331,"dns":1,"connect":160,"send":0,"wait":165,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"wneteacloud.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wneteacloud.top/static/css/main.css","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wneteacloud.top/","date":"2025-10-19T08:12:49.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wneteacloud.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Feb 2025 14:43:50 GMT","end":"Sat, 24 May 2025 14:43:49 GMT"},"fingerprint":{"sha1":"B2:C0:AC:45:E7:6D:19:E7:00:D8:75:74:FE:20:2D:87:96:23:DC:9E","sha256":"F1:A3:48:67:3D:58:87:A3:51:DC:0C:4D:3B:43:1C:BA:B3:05:DF:2D:30:59:71:D3:60:B3:7D:5E:1C:0B:9A:BA"}}},"request":{"raw":"GET /static/css/main.css HTTP/1.1\r\nHost: wneteacloud.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wneteacloud.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Aug 2025 00:53:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689be224-3a263\"\r\nexpires: Sun, 19 Oct 2025 20:12:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":238179,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65406)","md5":"3d1cd2c4b032d11dc07d352556791c23","sha1":"97dbe60c058fb10aa9d83b063f25feac133e226d","sha256":"76e0531aec5f656204a0efba1827b0f559f106d1929c64ee798d6305e85dfe93","sha512":"24eadbcd8624fa72b4bcf053bb341c9c8d785ca7600f2afe9d01e4e70c1bb1f80d705d159f229090db7e9fa6980999fa8cccedd7c6b63494beabcd27608f854c","ssdeep":"1536:/uyjJr7bIMI6Ul10vaaS/NZXsoBSzvsi3SYi0ENM6HN26ZJPtTlHVO5mexV7EVZq:/uysBMki3SYi0ENM6HN26ixV7E/O","tlshash":"ce3473e7f5d1251de0a7c24ee090babe1a3f8546e7164eabf51b77b887482c71422d0c","first_seen":"2025-10-19T08:06:51.418324Z","last_seen":"2025-10-19T08:15:13.597368Z","times_seen":9,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"wneteacloud.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wneteacloud.top/favicon.ico","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wneteacloud.top/","date":"2025-10-19T08:12:49.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wneteacloud.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Feb 2025 14:43:50 GMT","end":"Sat, 24 May 2025 14:43:49 GMT"},"fingerprint":{"sha1":"B2:C0:AC:45:E7:6D:19:E7:00:D8:75:74:FE:20:2D:87:96:23:DC:9E","sha256":"F1:A3:48:67:3D:58:87:A3:51:DC:0C:4D:3B:43:1C:BA:B3:05:DF:2D:30:59:71:D3:60:B3:7D:5E:1C:0B:9A:BA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wneteacloud.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wneteacloud.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T01:55:25.647715Z","times_seen":551152,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"wneteacloud.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wneteacloud.top/static/fonts/ibmplexsans-medium.woff2","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wneteacloud.top/","date":"2025-10-19T08:12:49.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wneteacloud.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Feb 2025 14:43:50 GMT","end":"Sat, 24 May 2025 14:43:49 GMT"},"fingerprint":{"sha1":"B2:C0:AC:45:E7:6D:19:E7:00:D8:75:74:FE:20:2D:87:96:23:DC:9E","sha256":"F1:A3:48:67:3D:58:87:A3:51:DC:0C:4D:3B:43:1C:BA:B3:05:DF:2D:30:59:71:D3:60:B3:7D:5E:1C:0B:9A:BA"}}},"request":{"raw":"GET /static/fonts/ibmplexsans-medium.woff2 HTTP/1.1\r\nHost: wneteacloud.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wneteacloud.top/static/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 59736\r\nlast-modified: Wed, 13 Aug 2025 00:53:50 GMT\r\netag: \"689be21e-e958\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 59736, version 3.65","md5":"d6f5f2a2a3555fa332adee834987b164","sha1":"cb0eb434ca296153c1bcaa5bb0894fd91b83efa2","sha256":"a61c089861e3cd5bb3a48cf80da84cbe10bd65b5ef6a9276fa43f4e8599876cf","sha512":"7a22eaacb9e020c071540941e88990e8b7b1f95c3048ff17abeba62b35f12c99d61551f30b4be0fc30ea3fa7fe6f149b2f0166bad4db2a3d3797afb01dc27a86","ssdeep":"1536:lvFFpYFirPMZRXVHjj88X4zeXlOqBZ3ci8RUyLjasWT:lvbe20Zv/vX4zMOqBZ3cJ/jas+","tlshash":"e74302570f3289bf9040fe3c84b2055095c1f6c5db697fa52b638bd60fa584a613e727","first_seen":"2023-04-10T19:06:25Z","last_seen":"2026-08-01T12:16:05.993341Z","times_seen":325,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":272,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"wneteacloud.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wneteacloud.top/static/fonts/ibmplexsans-bold.woff2","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wneteacloud.top/","date":"2025-10-19T08:12:50.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wneteacloud.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Feb 2025 14:43:50 GMT","end":"Sat, 24 May 2025 14:43:49 GMT"},"fingerprint":{"sha1":"B2:C0:AC:45:E7:6D:19:E7:00:D8:75:74:FE:20:2D:87:96:23:DC:9E","sha256":"F1:A3:48:67:3D:58:87:A3:51:DC:0C:4D:3B:43:1C:BA:B3:05:DF:2D:30:59:71:D3:60:B3:7D:5E:1C:0B:9A:BA"}}},"request":{"raw":"GET /static/fonts/ibmplexsans-bold.woff2 HTTP/1.1\r\nHost: wneteacloud.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wneteacloud.top/static/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 56112\r\nlast-modified: Wed, 13 Aug 2025 00:53:54 GMT\r\netag: \"689be222-db30\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56112,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56112, version 3.65","md5":"88468edcbb512ffa28964dacf404bd0f","sha1":"02b035c1280e92f474f1b46606ee5b03b733bf87","sha256":"8899b62d74d06f482f132b600d49c9a51cf13a3d830ac35d158f8cce65079c20","sha512":"8d5800b5aab6805df6967b39a19f3c5cada240ec3ac0dd30f8bdd7d836363bfad904f6552a42c8567021d1840242d5e9c82baca412c15004702d6cfc37778b5f","ssdeep":"768:Deg/rR6FDgT2UGGI4prQUhADMwXeoay+XtYTuHVPyuofsTdV1vAx5aPg0On:qg/rRNFG34IMwpj+X6TqTdDvoa40On","tlshash":"0f430298c259b1f5e832296403642bcc2a76d135d2d79e2b41f138f5c8fe5eece8b611","first_seen":"2023-04-10T19:06:25Z","last_seen":"2026-05-19T09:27:20.086107Z","times_seen":148,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":327,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"wneteacloud.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wneteacloud.top/static/picture/logo_word_zh.7d8620d0.png","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wneteacloud.top/","date":"2025-10-19T08:12:49.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wneteacloud.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Feb 2025 14:43:50 GMT","end":"Sat, 24 May 2025 14:43:49 GMT"},"fingerprint":{"sha1":"B2:C0:AC:45:E7:6D:19:E7:00:D8:75:74:FE:20:2D:87:96:23:DC:9E","sha256":"F1:A3:48:67:3D:58:87:A3:51:DC:0C:4D:3B:43:1C:BA:B3:05:DF:2D:30:59:71:D3:60:B3:7D:5E:1C:0B:9A:BA"}}},"request":{"raw":"GET /static/picture/logo_word_zh.7d8620d0.png HTTP/1.1\r\nHost: wneteacloud.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wneteacloud.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 00:53:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689be1fc-1547\"\r\nexpires: Tue, 18 Nov 2025 08:12:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5447,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 41, 8-bit/color RGBA, non-interlaced","md5":"c7436d7677c45e89af2e6782f14bb952","sha1":"c5947ea20106fff04204ba93ac6144b40eeed2d6","sha256":"f800b39f486983d6dcd97d6bc94baf14726bb5fe0117ef7c97048a514e60581e","sha512":"a9e357b8390e95ca9a957c1d9501fba3060370833828e630f5cf96e4a5f5123974a132da383475272016bce2d40053433ac616bf3bcacafbab4992160e9a4016","ssdeep":"96:nSSOpJhKs/N5036E7ZC3qTP72zLKeeRRor7yzZEr1gE7:nSSOpLKs/NW7XTPaMRwyzZnE7","tlshash":"91b18f85044c90ad67df3f8bd9e31fe8c0418350217482159a6ec7683d7a205797bade","first_seen":"2023-05-20T20:07:45Z","last_seen":"2026-05-27T07:16:49.660163Z","times_seen":67,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"wneteacloud.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wneteacloud.top/static/picture/mockup1.png","fqdn":"wneteacloud.top","domain":"wneteacloud.top","tld":"top"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wneteacloud.top/","date":"2025-10-19T08:12:49.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wneteacloud.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Feb 2025 14:43:50 GMT","end":"Sat, 24 May 2025 14:43:49 GMT"},"fingerprint":{"sha1":"B2:C0:AC:45:E7:6D:19:E7:00:D8:75:74:FE:20:2D:87:96:23:DC:9E","sha256":"F1:A3:48:67:3D:58:87:A3:51:DC:0C:4D:3B:43:1C:BA:B3:05:DF:2D:30:59:71:D3:60:B3:7D:5E:1C:0B:9A:BA"}}},"request":{"raw":"GET /static/picture/mockup1.png HTTP/1.1\r\nHost: wneteacloud.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wneteacloud.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:12:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Aug 2025 00:53:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689be1fe-1fb76\"\r\nexpires: Tue, 18 Nov 2025 08:12:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 612 x 355, 8-bit/color RGBA, non-interlaced","md5":"b6a3f37f91d2afca476a408fcd9dbd68","sha1":"79fa9a36b1b8845a9de0984ecd7c9b2d3450b77c","sha256":"a54974bde764331aa8c20fd514b03e8d6318c231c2c72f519d5211577a390611","sha512":"50f851acb788577c404a4ae4b9b4e950618a0bf47ad46354591c565731c8356bbda3d85a6418f469aacc7a2a2538e48444cbc956b49f699c97a993b6d9c0fc66","ssdeep":"3072:fW8tIK4ghsvGJjR0ZWcfYu+k129Jh2Hzai1KwX6V+H/GGk:f9yFGFR01fZ1CJhkagh6AH/Zk","tlshash":"0dc3124300c8bb77c77c4b25196d3b1f13e6ad4e4267680c663235666af92c6e6ef280","first_seen":"2023-05-20T20:07:45Z","last_seen":"2026-05-27T07:16:49.679404Z","times_seen":57,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"wneteacloud.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}