{"report_id":"ff66ec22-b3b1-4236-9217-59de454f5831","version":0,"status":"done","tags":[],"date":"2026-10-11T12:24:45Z","url":{"schema":"http","addr":"spark-one.top/","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"spark-one.top/","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"title":"[Spark] - Buy ChatGPT Plus \u0026 Claude Pro | Instant AI Subscription Recharge","dom":{"size":67696,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53937)","md5":"41d976687c3e91b3203f5919d7014301","sha1":"bdfcbf865379e6126012b22d4720505acb93f497","sha256":"9a538f56fe36c5659a8fb9bce35effd2a4905277260c3ebd201a20e8074df8e8","sha512":"6e53979e80a0a03f9cf798938256771baf3ad3f4fa2a769064ddb73c4f177fea274ad2c27b9ab8008598744c640c7018c2469c8abb4e161adb8b46772510539d","ssdeep":"768:gs22vg3QYUYwYyYKYtYoYIYHY+YuY1YZ6xUcv14cK0nzY/5o31UcK0n3Y/3DjvYt:lvg3GaUZVDWsEam","tlshash":"bd63b5206208593f16278bd5f2d1fa2c555ef386c22ec168f2fe13b21ad2d55dd235e8","dom_hash":"domhash2587ffa8dac06b35b1df2ecd88918d0b","first_seen":"2026-10-11T12:19:00.948937Z","last_seen":"2026-10-11T12:24:54.22557Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"spark-one.top/","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T12:24:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"spark-one.top","ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"domain_registered":"2026-09-22","domain_rank":0,"first_seen":"2026-10-11T12:18:45.402196Z","last_seen":"2026-10-11T12:18:45.402196Z","alert_count":107,"request_count":107,"received_data":5141562,"sent_data":56176,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"spark-one.top/assets/loader-circle-v9f5enNb.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e44792b42a50bc728c23a8c1f74715d","sha1":"1cd72f36fa68f3388c5be00c29b23cf8f393569c","sha256":"2d57f8a75c453fd8ab29571365a0fec9c6dfc1dc8e49dff0b8daeb1151c701b2","sha512":"93a99f69b97fe39e0861cf0564bb2fdb9896cf88b86a87dd355081a33e351fc74a47fd9384cec73b924268d2dcc1adb5a7cc118089bb452c7acca91656f3ec70","ssdeep":"","tlshash":"d9c02b1b0e5840f501016b4c02016d001f53051913c105c1b056813dd3c20ebf1bff00","size":141,"data":"","first_seen":"2026-10-11T12:19:01.047391Z","last_seen":"2026-10-11T12:24:54.279238Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Home-BxZKiUEe.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e65189f63bd9db2f118539c017e5bc0e","sha1":"05c53785aebe8b42525ef01e692708ed46826078","sha256":"4bbfd48512954522168a2fa221c2a1a6fd30c0bc418b3268192ab6c10bcdae0f","sha512":"1285754b0aedb07b939b15adb651ec436381f260feac32aa34cafc8f50b15665baa7a5506cbd71c469f0dd0366a577b145b634684db87fd4e94e02199bafa906","ssdeep":"384:UKKAjhOJaxnmIKtvlODGPbK4AgHOLLLz5E7moomgu2PjRI2JhV:7K0IocflM2bKmOL9ov2Jv","tlshash":"dfb2e888e431867de153517870289088b91d9feec2c3ca9bf2fed93537c2c795a59398","size":23424,"data":"","first_seen":"2026-10-11T12:19:00.96499Z","last_seen":"2026-10-11T12:24:54.27295Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Checkout-B8MQn80N.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e15faf61550d0f803dc6966a0ca6600","sha1":"eb0f2b1b04696f08142b49b818ae210274b32ee5","sha256":"76cf595f8c6a8f3021bd55440a7cf38111acb72c443f14f689c8427ba2e12446","sha512":"0f32b58b0bce564f0175dc11639df4ee38d65720c36531c18b07e0f7897715744ea13e108030efb944cf78c728a3f41e03f962aee3000a4dea0e13ab073108be","ssdeep":"192:SA2uMUtMnHiicabIP+c/tp7J/xhFFme1KvA29wycpMbnEVwpYyy8iydvZ56xvau:V2P8MnOqIP+0dh3+HdxkMvi","tlshash":"2752a50190108abca5970635a155b555a10c5fffc0518eb7f2feef3c2799cba390bba2","size":14153,"data":"","first_seen":"2026-10-11T12:19:00.995429Z","last_seen":"2026-10-11T12:24:54.269051Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/usePayment-h53zivMg.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd257e3e9c5c321f30ef1563547e6a26","sha1":"013b1ae66cdd1a84e3488cd5f8af78050413e712","sha256":"0a95eaa371fbe611154d68a56d2e41ba56b301062d1f49d728ed605edf2ca645","sha512":"a8d41fc71882c1e9adff108ea2290f158872cc9f96fa2067b83a958b531523bffa64c89280776bff2a928d808e8acf76e35f06ff1cfb2456c5bff122f97fde85","ssdeep":"768:o+oZGTQPeQCW+cruDBckadssBcsaVTwqUPOFMz6JXhb6FwbujFiyipHGpCLHq:1QWVazA9K","tlshash":"91d21a80b1eb28b4c3b169d020640661b32daf569055c5e5f2ee4e56127bc73c9faf3d","size":29257,"data":"","first_seen":"2026-10-11T12:19:00.978067Z","last_seen":"2026-10-11T12:24:54.317462Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/copy-Cx1ixJRl.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"212ea8115bccad2ee8aae9195932f649","sha1":"c823642fa26a80543783f3c8cb0fa8912dd27023","sha256":"3fe89523ec41cb27567a68231ba17c200a7874836eec0ba0cd91100f3f4f64b3","sha512":"9aabf094f704d51bb5ffd9403dc9506bb67dd2b05d61f8f5d97b41f08cd731a3e3b4b22f39d9ec84ab085f1e765c00b084f92ff6a4bbf3ac9927be02a1f55ab7","ssdeep":"","tlshash":"81d0a71e8e2211fa641048881e432c9357a8167463848a95910b88375a555cf296eb47","size":228,"data":"","first_seen":"2026-10-11T12:19:01.133146Z","last_seen":"2026-10-11T12:24:54.233362Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Textarea.vue_vue_type_script_setup_true_lang-DvRgl50O.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ca2084505e07a72d9adbdcae61842b8","sha1":"20d30da1c0f3aca8007b58428c4f9bd0a291d0a9","sha256":"ff07bafa37039080bfe7428c57a8b65f8ac8a2c8916b59578e8f525e7b6d5089","sha512":"cc05133cbaf2fd800a6234cad17695bd84e73bc29eadbd299c74f842c47c2b36abd908080645d885783562cbc77c2233a383d238fb1827a2fafe968988b3e75d","ssdeep":"","tlshash":"0701205eb8f4defa005b8a9d718675021b0d3315ffb669b094d7212533e41c0ca0fc06","size":775,"data":"","first_seen":"2026-10-11T12:19:01.130474Z","last_seen":"2026-10-11T12:24:54.295925Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/external-link-DgqxegW5.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ac642fcc9a812d3046d22ad83b66e1c","sha1":"a954e417ced006762a2a425ca3449cec9081cfca","sha256":"3324204bee2542e86ea559fdd5991860a2c5ae6d9580b1caa2b6036f520a2f4b","sha512":"dc62890f7ff29b2e340dc39b282fb665ce774f53a7b6063d00fdcf462d933e8bc4e061d9dfdd4b15637e343b1597062e95c40c29ef0b99e4e2ca0e93b0bf3454","ssdeep":"","tlshash":"6bd05b5f4f88057e0801a68c1e4bf45547da117c32ca8c85b01e15728267246dda7f10","size":248,"data":"","first_seen":"2026-10-11T12:19:01.014819Z","last_seen":"2026-10-11T12:24:54.23242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useProduct-Wo1McxMY.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"483fa6cd196947ca08edfc8821c73a3c","sha1":"12928df2e5b9dcb3ee0d60a20452f295a825d507","sha256":"1c6275c90af183659308399adcb1df93278f6d77c7453fb521a6ccb95ed39ca3","sha512":"5712986694df4c7b1e354f90a2aba37a8ab5f461b9ca0939ab78c51f75d4a85a3e524952c0849a0a6ace4224c9a0306072dbd9f23969efe49578469792645187","ssdeep":"","tlshash":"e38145c6f8f36072826317a094614d02bfae0e1bb51e55e8e6592d326b27006b1b7d3d","size":3970,"data":"","first_seen":"2026-10-11T12:19:01.108413Z","last_seen":"2026-10-11T12:24:54.280906Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/order-CPPTkpY5.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f79857d059c2304b7f4fcd816af1c7","sha1":"27c09a1e1b732c0f606118c593e8f1cddc04a4ea","sha256":"a33866be2df8e3929474ba8958fc870317e13bb3d8e222d9c44d11dff7d9354a","sha512":"28b94e88f890be3cfae90da50ccd0c427eda3769bbaed36dd76d084666cae1e1537729d1b0b84b1e53f1f67fe04241ff174a941421a916a3cdfb3ec9e36b8bcc","ssdeep":"","tlshash":"5d41ad5eb008f7140fd799e646bb581cc498d7827c9e4669df253388ea28d17e232f29","size":2189,"data":"","first_seen":"2026-10-11T12:19:01.194174Z","last_seen":"2026-10-11T12:24:54.367695Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/content-qDtzSI6s.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e96e8c85a329e7d15b1462662c75a39","sha1":"758f34f58e4dc40582483b0af778056cd6461f9d","sha256":"bbbe9cdff9482327d2dcaa04aacfa22551d43bdb93ffd377251ff9d4aae06681","sha512":"f4518ea26395e8d50a7eb8360e4f1cad81b4e0d2007236fc83fa1699606f8b97cc6187e3ca0fe761d4b2ba43c2983bf2d0b0bd2fa2ce20f11d7eb6c5ca7a337d","ssdeep":"","tlshash":"c51123bfa159d17497a317e064122624953e0452598485d28e7cec3926385bef13fe4f","size":887,"data":"","first_seen":"2026-10-11T12:19:01.177112Z","last_seen":"2026-10-11T12:24:54.328178Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/package-open-CMaTPGgi.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3f1d05dccdaa67969ab3e6cff0778cf","sha1":"4044ad298d3e3471ac92805e057793785df1d8e0","sha256":"5cdb41dab82831fbd6dfaa97dcc5ee12bc5fa362c25eafc470d55791791d1c34","sha512":"979e3cc0d1ac2688cfcd4c01f0ecb60df2eec117cd49beb9426ddc05277529db8ef7770465bcd38e0ae6c0a543c112099a421492333b7bee894a5a92c62dbbf8","ssdeep":"","tlshash":"63f0c26f0e8a493d94139bbc1a63141c0b4f80b83fd68ad0e84de6778a52596d567910","size":576,"data":"","first_seen":"2026-10-11T12:19:01.180796Z","last_seen":"2026-10-11T12:24:54.290769Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/TurnstileCaptcha.vue_vue_type_script_setup_true_lang-Cw5kWbxK.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e28f94f37c50683710f7a167f44e61a4","sha1":"c00d8794aa960094f213407d7f49edc2fce56a7b","sha256":"040402b5de53a762174eb64127de7dfca85577ad666abc733dfbce7039fcfd00","sha512":"1e6623027698de80b3b3b8ebf944e58de1226f6b2044802e08fa3f91695be676a5d3f7497bfd090ed4a6b9db7b4b4b79d3b1fbe329ee03cead16bf20ab8922a1","ssdeep":"","tlshash":"3961949db9f0ddbe3b371595f20fa9e0ba0a530dd42440e2a4ae0a1d2f5ccd1c85666c","size":3266,"data":"","first_seen":"2026-10-11T12:19:01.213728Z","last_seen":"2026-10-11T12:24:54.302645Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/wallet-DzStXH-7.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"736ee588f868c676480de9563ba388b6","sha1":"dc5985096e91403256908f4621d8a3125d1d46e9","sha256":"27c1c6074beb030080f7ede9917a3f0d464486f02a7dc7a78b54c69302573555","sha512":"41be0a41974b7a550d654a5253459218fffb2834b45cadb1c6d4053ccc11897653a06941966903c6ede2b898380a4dc2aa900ff4845ba22164dd21b249632f4e","ssdeep":"","tlshash":"20f0f06e361c8330240a5f38828790e8402ed6de788800b82fa89f84662ac5f69cdf25","size":576,"data":"","first_seen":"2026-10-11T12:19:01.206799Z","last_seen":"2026-10-11T12:24:54.230466Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useCheckout-DcHfnyWm.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c2fc77da85ea195ec00a593b4f4bfe8","sha1":"852bf940ba853b3975a5f6e29ba9012455076699","sha256":"b96c8bae5355324359f52bb091e735eb792b0d62961ff99ef99c9018d8b3a9a8","sha512":"78ac32b953fd4441bacde92a0d4036b66ab9824c752bd429ea16f3ca09d203fc5a7e93c4bccae725dbb3069739edc645d5263243c92481463a2b919bb913b475","ssdeep":"384:bAQ8u2Yh7RbJ21qp4soIwujEbSc4YUFXu74XZ3eFNgUMqQG0Fm72RQmMPopcqk9v:cQX2Yeqp4soIwuKSc4jhu74XZ34gUMqF","tlshash":"d8a20a80f2f134719bb259e020504156b5281b5bf02ac6f6e5eb0e2a177bd83a4f7e7d","size":21829,"data":"","first_seen":"2026-10-11T12:19:01.151038Z","last_seen":"2026-10-11T12:24:54.247034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/arrow-right-D_nBc0qr.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad2a190b5ca9da722cdc1e9ad5a95463","sha1":"a310a549c2fa587288a76f1049bb399b71ef1f17","sha256":"32eebc81eeca5292a03d020e016c2fc1d9b90d4e011c5f48c45af34e1f36dbaf","sha512":"5b78dbc131426f852626be02452d3419c632220962f320ddf55123fbdff8569e632289d20f4ca7258932ba5e533fce1861e32ec1d9c96115e5310e5ae9a706e2","ssdeep":"","tlshash":"8cc08c4f8dd0a3f28505a2cf4a43691106a906ac539388d0740fa2b6c3514c7096db09","size":162,"data":"","first_seen":"2026-10-11T12:19:01.06786Z","last_seen":"2026-10-11T12:24:54.343131Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/chevron-right-tnpKnimj.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"542d8ff6f1ec1c246b047218a110d98e","sha1":"7e832bf83cd3ccc2e1f503e730b49537ff3cc4cf","sha256":"3896975d1f34916d4db3bb89ced7318be8c1525982e1aaff44bb5d4eb85c4323","sha512":"110ac81455c9b46472640282e49a93a355ae8bd033b2b2cd31f2bd1e25e5d5f21b4a9bb2c32ac04987c558050ea9f261f271063c6be63048541935779226bff1","ssdeep":"","tlshash":"e6b092072db491f30f496589a7551c8b86aa15ac2783d89da083a12992e19ab618cf10","size":127,"data":"","first_seen":"2026-10-11T12:19:01.202721Z","last_seen":"2026-10-11T12:24:54.252785Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Blog-CSx83RdB.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fad62d44d231e7345cc7ed1f0f5a6ca","sha1":"c426de3eb58f086f22974d59a9a6b9a0b49cb8ef","sha256":"8a86e4b55b140c4c87ca0a3532e2d1c5732e0174648a150f6e7da086df20a5a9","sha512":"26c3cb3d2846f03333e22c427735177193658c02803eab3d98e3bd1112e325244a170452f02b87cd27c3b381ae5b3dfc8d559d654c817d31085cc02a570e461b","ssdeep":"96:E/K+uKM+HnD5L8BUziT7BRcdok12kbz5zETNvF:EfuKNHnDtIUzCBidx9X5YhF","tlshash":"c591b805a140cdf8f1939538b085a024552cffffd2a18b69f3ec953937c18768b5a7a5","size":4525,"data":"","first_seen":"2026-10-11T12:19:01.057273Z","last_seen":"2026-10-11T12:24:54.338853Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/shield-check-DrOaLErp.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"201df1c78058fd3ababf2b4bdf1ef164","sha1":"8c50d0e45b93aadf4aeb36d73dfba8a06417a963","sha256":"97317103016d4e017ee07480cca8007836d76df3853f1bb0a57f4f34e3b5e498","sha512":"c28afdbe10b7821b845adb4e8d8b76ea6ca7bdb358d6cc490db9d8043adcc6b33d41f4fd7dc6f7dddd05eb2b9486cb1b8399cb36ffbb4b9c773155b8be5a5dee","ssdeep":"","tlshash":"8de0cd7b9f4c57fd15c7d6c9854324048fadd65c33a944e0f00c8c3a811288bc19fa25","size":317,"data":"","first_seen":"2026-10-11T12:19:01.038987Z","last_seen":"2026-10-11T12:24:54.251202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Products-DXTMEBSg.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64319757eb3c7ccdf33e34b06c0eaf","sha1":"cfc19ae9fb0252deceb9575a8079a4d0044baea9","sha256":"5330957a2caad1d74aee07ed60e624037a9cb7d5242dcb2872d6769fccd1602b","sha512":"edb059cd7689ff22fc854fb5cb66b526dc422724e9709be829a1df07dbb077e2483ade03edeffe0a3381c84e850e772cececd4831a62fb713b34326aadf6d18f","ssdeep":"96:dOn/D/9ikyzMxcxM/SAMTon38xZ68QDZUU8hJ1p2EL7RB0zYpWWc04PS:4FpbSAson38CjNUU8bNZB0z4WWtOS","tlshash":"21b1729af1359ef9a23bc8f1f060c1655a2e63778382c7d4e1ff46242b92c68c90c556","size":5462,"data":"","first_seen":"2026-10-11T12:19:00.972096Z","last_seen":"2026-10-11T12:24:54.292873Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useProductDetail-hcUepsJm.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"87505788ed54d46b288112174dee3114","sha1":"7c9a6b08e327c2a2f9c44ef37d70be74d91977b5","sha256":"b1b51b0aadd322dc5eca3a2fff17c1f02a5e713d3db78925b049f8357c83f23f","sha512":"49fb63273c85ec9f9b9b259afa65aa7aff150a1dc445a9285931b9cda2fe278b7f591dcfdcb52942aeed478146c00116a975cee930cabc79575126b476c9df60","ssdeep":"384:UnUe2HoxtmgmGTw7P6Nx0PQqy29kBFq0y5:sUe2HoH1SP6NxMkBFq0y5","tlshash":"6752cac2f1f2b0b4c37a53909850c88574ae075650bdc4f9e286661625bbc4be5fbe3e","size":13626,"data":"","first_seen":"2026-10-11T12:19:01.050398Z","last_seen":"2026-10-11T12:24:54.293786Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/buyNow-bIZpmNk2.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f9a14e050172d077ecbccac940e3163","sha1":"61ef9771cb6d9170db3475ea37418690783227ac","sha256":"3631d74904c8733c93ce4790b89802e80a6df234e496e87546382f41fcf94130","sha512":"029067c4a7e3581f749a2c926d2ed9701b2d3dc7e886a37c06e47d645564d4c02e5269900ccbc5bf47bc7f1a87a9c58857c55a15ffd6a3dc9e44a3906a9ad753","ssdeep":"","tlshash":"86d02e0f7810a2b1066488d8826189a102426b1437906ac0908f1a20a6f0ac5a1bed3e","size":258,"data":"","first_seen":"2026-10-11T12:19:00.968066Z","last_seen":"2026-10-11T12:24:54.274432Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/image-DIyfNFiU.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ec355f1ebaf05afae1e0fadc99e0428","sha1":"290fc4b89e2a441479fd45b1e98382845be43a0c","sha256":"cf23629848448eb7acb7e371a72f1207c0489507981c62f5b8b947bf1879592d","sha512":"f4eaebfff00f34025578ab2767ae44d44f8c51089590f50136b6b42bc38bf9f22da00ad685fe551d785029388fcbe35f22630105eeabe8707729ad89b61df468","ssdeep":"","tlshash":"e8d02e0a8a0b1ea6008140c82a9788432bac0bb83381c001d10be63a63408e36a2aa23","size":266,"data":"","first_seen":"2026-10-11T12:19:00.983393Z","last_seen":"2026-10-11T12:24:54.360282Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/lock-BeHPqH5I.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7ab0c42774aaa8d7fb087ee976b1918","sha1":"e1395fe6b9b1bd0980029093837833ec2ee7c11c","sha256":"e49cac23674b4a48ab236eeedc05b2068f124dd385affa454022d5ed32c37cd3","sha512":"7134a1e91cd17109f72e15c96bb3c7e3f4d805b86a0197c2aec435b26a1b867bf2af79d67b40ef631071c83d1efb0403635c9c605c912f8d5315bb9024560750","ssdeep":"","tlshash":"e6d0221b492a11b50101804e0b432c16876d823833c34440e24bf63a8b421cba6bab63","size":203,"data":"","first_seen":"2026-10-11T12:19:01.099692Z","last_seen":"2026-10-11T12:24:54.277482Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/chevron-left-CicxAIht.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"951408fff6c8d8b177823ed802a8ed59","sha1":"f4bd82ad566120b89f37774e06e114e082965924","sha256":"ff24b3ff1c8caf3fedaeef51dd81350d807a9cc2a542b768b356ba5b35a15813","sha512":"f1040926a2ef9821909c6fb14538c76dedf40bab7d119d6845f94da606c9923e13f30da72bc831bf4a58ba0a30c8c471cd4dea190989615d4901031b451bb9fd","ssdeep":"","tlshash":"12b092271a8041b307086a8c5642183686a655ac27938988e062662553d19cb66ace11","size":127,"data":"","first_seen":"2026-10-11T12:19:01.123159Z","last_seen":"2026-10-11T12:24:54.238049Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/status-BT9pW044.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"99ffb08aff48688b03130ae18ee1223d","sha1":"e645a4b18639cc57308a019afbc276e46fd806ff","sha256":"6b84b6ed3d3a19858093a338b70bfe01e88495c64f97366d2220d83d3880c2df","sha512":"563968fe1fd5b5912e80b4141c52940e62858fb4d855f4452a8fc29a4821dbfe72f243d2fb938cd1582e8de89f8e3bafdcf3c4d539ef1d2b634a61a3b7273f77","ssdeep":"","tlshash":"df012bf4b2cb46ed0b6dbe1b06866b313919cf3d4a153866d974e538c614984fc5d8c4","size":745,"data":"","first_seen":"2026-08-09T04:42:23.757354Z","last_seen":"2026-10-11T12:24:54.24807Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/plus-C06QSeZl.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"db30e107548695c298ee8d0870bfb044","sha1":"973f915e6d040d440bdd15deb16e7e0eca837e7d","sha256":"58aeb735988168c4130f8d6467e9a537cffc8fc5264185e08d0d43e6dfb118be","sha512":"41ded323b9dc381932fe4a49aee14f15e596792a9b8d250c951e3aa6e5f0d6a71296ceb6ef28a20cb2aadd9f3b44a539a2758e4ff95062443c2ce40d2d1d1d93","ssdeep":"","tlshash":"71c08c0f0d8443b32505964e055378010aba096c83d248c0e40a8222831088b8e69f07","size":150,"data":"","first_seen":"2026-10-11T12:19:01.162966Z","last_seen":"2026-10-11T12:24:54.349741Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/user-plus-ChvxEA71.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eebb66103d85b47e98d13b202bbb156","sha1":"24a4f93cb9845c8fb8cb611f8a42ceb5f578b6d9","sha256":"be20a55ebd4493c1641898405a732402526d4404e20004abd43843ee01e77421","sha512":"fe2ad8e605d274a12231edabb933cc943d1221954d9f514be1d83a4ec745d1e5da30f566ee5467edc9ed9ff1ee27bcc6cc83bf6af1e9e0be23b5fae323f357c1","ssdeep":"","tlshash":"c9e0c22f898b02ba0128d2cc2f8354440abe07ba73864093f487daa577610638a2df63","size":307,"data":"","first_seen":"2026-10-11T12:19:01.096816Z","last_seen":"2026-10-11T12:24:54.361004Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/money-CmSYA0w3.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7d447d8a3929615c071d724eacbe90","sha1":"9ad1022e516e429bb9a64d532dce3d08e1360162","sha256":"f9f782d28f266d626f630412bfaf29f43c9b697d49f2310d7d7906920eef5b86","sha512":"eb1007998b4f1c3359fee91c3834bba3a0c3b64adc4d7e0a1486ed9fe84d26532813e91f3b240a1f081575aa44d1b22641a9cd1371bd5a7ad8270da56c228f89","ssdeep":"","tlshash":"dd217081d2ad647a43971d6b02d8c196f90ca51be6fe45c8d13dddf226a7c87f0e4c60","size":1294,"data":"","first_seen":"2026-05-02T17:24:42.714287Z","last_seen":"2026-10-11T12:24:54.258233Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/userProfile-PQsPogzz.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a82220022169dd469a9bfda9af689a","sha1":"dad799d7db8a48b7e3433e5ecd960c09e29c535c","sha256":"1100f9bab8e7ffba0ac0f43888e9b203a39de9a3d1fba637d844f76d43f85838","sha512":"e694bc150e661900cd1d57f5fcf1805dd6eca550df155eb5230787bd315113da7ca2c93ad9706ed5ed92b5f340df9bda2c6cf3c13238f60703b35d00b6411084","ssdeep":"96:WhdZayGL6UVxtNVQDd35FXLLLRYdbe6zSYTPRzkisoURHLpcL3O+IooIlZRPZ4SB:WXZaHL9/QDd35FlCbOYbRz7mSO+foMrT","tlshash":"83a19762b6aef14857b0dcb1e06cb19e405befe8791e14c1b94c1d0f3237d92b8a584a","size":4912,"data":"","first_seen":"2026-10-11T12:19:01.230047Z","last_seen":"2026-10-11T12:24:54.281868Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/user-VLozCdjf.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d527add4c30264920e44475dc5518bb","sha1":"e1931d2482edb8bb9231714989cdc1f6aa098476","sha256":"462c188c0512569bb30825272a234f029bdaa08bdf1741ade6ca5adffbefa72b","sha512":"ed035210025894728d6d7293f9f0a736f5873a527479c1bc1d024663581358296d8b591e5692325a5bcf44817e278569cd81d6b8b31f3cbd106ec03b4e5f99d6","ssdeep":"","tlshash":"1911575a778c13aa2143b8f7f362b0159e18e9e4b99ba0f70b34978ac51cd077271d09","size":953,"data":"","first_seen":"2026-10-11T12:19:01.11948Z","last_seen":"2026-10-11T12:24:54.322123Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/publicStock-1AQ6tS6i.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"44e8708da49e31ced810fc8374041110","sha1":"c003ea80fba1b0ca0328add8950aab7406dede11","sha256":"579a5f4b14684d9136e0e0291edd402be7394ec243fe515239ce7ea8004dc998","sha512":"67c8c7557129d8fecdd70800ac999c3144390d3d22baaa3109f96242a2fdc46a92a4dc370a9447bef81a7f31e047ec4ab55f4af43d4925533e965b29d60a4cce","ssdeep":"","tlshash":"1721df4176f262b70b61d3f2505c0d13b0cd4e2bba5f11e4f26948427e2f953f07a91a","size":1406,"data":"","first_seen":"2026-08-09T04:42:23.858877Z","last_seen":"2026-10-11T12:24:54.348974Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/tag-C01HQ-tp.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"770dffd60c302cd0025f8beb16fcd8be","sha1":"d3df1789bbe9ab9ed246be63b67b95b3a34c61f7","sha256":"a1f068efec6bd1a5e682d4b6070dd86de70cc35b716af14d4441898da6d05896","sha512":"1939bc088bb9530de5236fa24b7b806ea555d2965de629a89c075653206c05a503cde32c4bcf39d1b9d8b043ddab03ae6fbcb1ab6388f55553964f5eae58ddfc","ssdeep":"","tlshash":"11e07d170dcc2bbf05004d8c5b02fc560f9ff1783e544481874e49ab26e00bbe83ba00","size":323,"data":"","first_seen":"2026-10-11T12:19:01.065147Z","last_seen":"2026-10-11T12:24:54.28466Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/browser-B2lUSF31.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3eaeec8c3265a53bbbb3561e34ca8bb","sha1":"65dfd1b5384018f31108e0b7eeefec7ee157371c","sha256":"1e29142efdad44ea6037b7c0e2b67fcff4062d0b474a20ae5a681dc69ce195e3","sha512":"a310b2285259ac858388685789dc5921f534b99e45419f704d5e06b33fd0f329206e047a465b822fc1bedd466effbefc7832d44a5c2f738b9f494f7468934618","ssdeep":"","tlshash":"2ab012150812507044554dcde22285a20e58d76c3388d3f00100625003110c10c0cd13","size":89,"data":"","first_seen":"2026-05-02T17:24:42.700823Z","last_seen":"2026-10-11T12:24:54.24881Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/product-CwFRTCTJ.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b230dfa2e467ffb8b66e1c95b2818d61","sha1":"e3719f119b6f4bece17b7a6ed39d25d9429dbaf9","sha256":"1775c2137f36c55e23ba385802c49b1f2827cf6e8de7176f08c99264e2a30572","sha512":"526fbf4e31e6cf3dfcc3af334a92df598cde5334ae928049d6ed7e6417d2bd04132df4ca89982e6e5f31c9476cf837c17a0eca4c277cb3d8d94e0da9438a5891","ssdeep":"","tlshash":"c9e06d3b462dcf7405c03c2ee2818657d613ad5cb1da28c82d095b918f646432b24bb6","size":408,"data":"","first_seen":"2026-10-11T12:19:01.082015Z","last_seen":"2026-10-11T12:24:54.235275Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/usePageSeo-BeBTBfVW.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee218754e3c315c3865be9a58859e3a3","sha1":"8809fd57bdf296c80e936f4200c39e9137c82e6c","sha256":"38399682bfa7d7c735c822366d4b178265c4d5be1e0a56d6b04dd3a803840de2","sha512":"9aa452e7640d7d2c5a4e3de4ff7c5f8cf4c28814fda5c6a9344a131487f9a0e5a6a167a4599e9c2030e3e73a4e37cbad5d0d2692e40a4f7d2d7c612176391af8","ssdeep":"","tlshash":"9741fd72f70274700bb64a80456264b9d1154f49a034def1d3af1a8b15eed4bc2baf0b","size":2242,"data":"","first_seen":"2026-10-11T12:19:01.198921Z","last_seen":"2026-10-11T12:24:54.341005Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/index-2BALaLQW.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9727edb0adeb9a202413cd269f4b9d93","sha1":"fb0630dcf262a055e477e863dfd09119e4383f4a","sha256":"1ce45912331cf6056fed5e11777622b1eb44d7c126d3d15f3bf0b0755ee6d924","sha512":"53aa98b1ef5935c2179a51207131d1de8c452f0420cc5127043770323565d9e5be474abb44bf56599182993d81619d37e100457260c49c988d5aa955625e80bd","ssdeep":"","tlshash":"6311af09fc39dffc52a72459fc68b670382c1a94ab6654c1b4fe12fd1741955513920e","size":870,"data":"","first_seen":"2026-10-11T12:19:01.124907Z","last_seen":"2026-10-11T12:24:54.323795Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/sku-CXAUOYY5.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b028bb7ad5ec162966d01b3f75cf86b5","sha1":"edd0850790bd832314e52de230f3fa65a9a14cbb","sha256":"27203fbdec4f715f2e4dff99f1a5c7e872263d47ad6786cb6d4d01aacb05df6c","sha512":"3fbe42a71f07bd50480498f6c4a5970af737d8eb89ff39ea4adcb6460db83d7b1a75cd5f3aaa6912054aadbd98e941f3e8930fa85224b0e99eb170a814d81d2c","ssdeep":"","tlshash":"f941ff91b0cbe02947ba9dd006b44121f52c0a1d708eebc0f1deae76665bd47c137b2e","size":2097,"data":"","first_seen":"2026-08-09T04:42:23.850746Z","last_seen":"2026-10-11T12:24:54.28396Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/zh-TW-BZ5QasDe.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"3a7252dd01ef365265c244e1ac3066d4","sha1":"48f4398a167003018acb51e532d9d87250c422ad","sha256":"b0847f6e21b80b366258bb3f663540446cf3f520369ec4ee1a780fd223d3f46b","sha512":"07f785e82bc57e7f2eeda3732ac0df4bdf595600587a65288c1094243eebbc4964c8c2216643b93393b3198cbe460c902fd885243fd6aac62143562a71f78e95","ssdeep":"1536:q0oOPECvzdfxdwmsCRy5kzgoQzOps5e8K96Lr1:ZPEqxx8QgYsioB","tlshash":"b8a34c9b4e6d0d78057587a18f6dd6a318ecd47479db93f24bba83042a79434bee0b0c","size":99180,"data":"","first_seen":"2026-10-11T12:19:00.969894Z","last_seen":"2026-10-11T12:24:54.245353Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/BuyerNoteInput.vue_vue_type_script_setup_true_lang-C7EWA8wW.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a346157e505d340592edf72af58dc22","sha1":"cdf4c7403c7f725db5b916a61fb643aef0d1e448","sha256":"65b4e1ab645494779daa30c0e201273ca06abe04d0c6137ebb41677341bffc4f","sha512":"f03f796a9c7b1cb1aab93142f5d2498e1dfaf3338b4f329db772c040a7566634b3f6cc91a7e54002169dd8964c9aab85aef20d6efc3f3523720c666750b89b7e","ssdeep":"","tlshash":"ad21f91addf02ffc2d27894ce7223090300fab8cf962458081ed1ab01796bc24a2347c","size":1140,"data":"","first_seen":"2026-10-11T12:19:01.074817Z","last_seen":"2026-10-11T12:24:54.239624Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/GoogleIdentityButton.vue_vue_type_script_setup_true_lang-EWbC_G0w.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"67e6c4ea3307cc341c8e21d4bef64c9e","sha1":"80f6bcc494c9b15a2adf14d633fced052ba65ec4","sha256":"5ee190ca2e70b284d280ebfbf977324b4ad7eeb5da00f9cd9cfed86aedec4856","sha512":"0062e49832f40c24ab908667bd76b523d4aac317a7d56074d9a0f3ae30684b7202d59af20ce5ca168d7937787c5caf6e6e040de67d0e838764fe7449a142fba0","ssdeep":"96:mvjfqSHYU49xlXIn+y9EmfGx7qWRxk9x3iqshyVlzNJdDWqblGEPzHayY/KXwIAH:mvDbAXlHy3f87RRIyDoVlzaEPrtHXwjv","tlshash":"dbc11843b0d6607726ba02dcb034a001b719470a785eede6f0ea481b1d9f9c691fb7f2","size":5638,"data":"","first_seen":"2026-10-11T12:19:01.171204Z","last_seen":"2026-10-11T12:24:54.324631Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/index-D5iKIM_e.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"408f7292af18a50553c008dd4859e75a","sha1":"1e8be41f04541aa2e2f130c4a2993428dee621f4","sha256":"8921a630d09015c31f26734db09f0095a247d4a2fc34aad6fda5650356d3a989","sha512":"3d6f0c7d97464e60e70bc905cf9b75ef9e99be8156ce2b23fe9282b554bee6a342fd8a86becda03d9029456b3ac7527cc0754fcea8d3d56edddd815f3329d305","ssdeep":"6144:UeZJavpaVY4az5uX63yV6ecsGcKJwGVxd1:ZZOaVY4atd3y0eNGcKJwGzf","tlshash":"6b64ea962e5d1d7802b647e59f7ed21260ac8560708fc3e0e37eca6537758247ee2b2c","size":334063,"data":"","first_seen":"2026-10-11T12:19:01.192561Z","last_seen":"2026-10-11T12:24:54.365922Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/resellerSupport-CozpMtgN.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9b5023692f47b0b2988fec3ed4a5aa0","sha1":"ca9472878d7df4ff6583213c39f54687e7cbd70b","sha256":"338f09c655b4c94d566b1e48e4c4d5008122cf7a81c7060f7a8cfd41cc266cfe","sha512":"d1773572e1c230faef220c75cf83f09638d6fad275a62f1ff0842b0b608cd7a094b8535051d5e68809271450a91a7e943affd1b25a53f7ad6598edfabae3c023","ssdeep":"","tlshash":"3d216380f325e2780b715a68322a180bb2cd21107d7accf1d356959a4f6b99be423f36","size":1175,"data":"","first_seen":"2026-10-11T12:19:01.002615Z","last_seen":"2026-10-11T12:24:54.339955Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useCart-Fxc34EHs.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c85d822e130d79f2d65b0f5896afd403","sha1":"031833d19c09e58a4d22f73f9b4fec91604b79ce","sha256":"b21e0be65e7ae613ce30330657df0a39b11591b430f5b5f422f1d8abb2a71c8a","sha512":"b1ee00a9e1618e8d2018117e65c4224b53b58f34533f7c2567329bbd0107ae914e9f398292c65daca3988f4cdd7fd84e6860818874dcb730ee3ecb4a4ad87ba0","ssdeep":"","tlshash":"fa5197c1b6b1b070577559f050200993f33d278e656f85d6c18a2f492b9780291b3f7f","size":3040,"data":"","first_seen":"2026-10-11T12:19:01.051965Z","last_seen":"2026-10-11T12:24:54.267738Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/trash-2-C5bouYOA.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1f562621ab814494fb083d9483d74e4","sha1":"0bff4556308b7076a0fd2d5580bc9c9deb167f30","sha256":"68f4ff51727995bb07aa64b1c6afb4bad5168b8223e314239855a38ec7516150","sha512":"b96782c970b93f388a4430c8e1fc6bbd86375920670c8a7bbd5c2a6db0691aa8b4519a4abdfe754eb3b054170cd37b5453ec473c07c05fb0f3433ed73530e466","ssdeep":"","tlshash":"f1e0bf5f8f8c52a90801d6981d5bf90047eea6bc278a4952b00e617691251969dbbb41","size":325,"data":"","first_seen":"2026-10-11T12:19:01.0551Z","last_seen":"2026-10-11T12:24:54.345481Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/alerts-LKRx7UNr.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"62d94e486428ee1fd62bb49c4628fb0b","sha1":"1cdd973ed44122bb8b8f45ce506726a926f89599","sha256":"e7fbbcae16b35716d784a330d92f05388eda616471761ea42621827d9c390c19","sha512":"5d097649bac82f9a7e79ebc8511f3bf091e9d97dd5254f2655216d2fedd8c5e533b0a69f29e877308211cf5e774aac4650ed27ceb3f05f72837a9b7a343f5b1b","ssdeep":"","tlshash":"d7c08c4a7ed0c2e2024fb2f16130cd83b0f00b0cd22362d8e00d99b58b122c027fa276","size":172,"data":"","first_seen":"2026-08-09T04:42:23.805386Z","last_seen":"2026-10-11T12:24:54.301254Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/guestOrderAuth-DxDOtMev.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"22e9cb9c38a4d55ab93df4f96fbbaeca","sha1":"5771aeb75b4c938a9f799ca3dcd569a1557c4aa7","sha256":"6cbae03d4a8e40056d22c4d87d1fa69b07ec2d81774ab95db8900d44754e2d8e","sha512":"46578439a5537887782bf370e8003bb9d758bffd468a552d38c051a2d21ddc751f628dcda1446ef37c4e2860555c156a267d22bbd28b3ff9f7709a7b6cba0b7b","ssdeep":"","tlshash":"9511c058794b963105f8c15e22512912e13d1397b55e0450d1ff8e2f3abfe0bc2b16c5","size":909,"data":"","first_seen":"2026-08-09T04:42:23.808067Z","last_seen":"2026-10-11T12:24:54.305135Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/paymentResumePolicy-ClAh5BJh.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"78237cb620de2d52d738939d73cf7e49","sha1":"c7e6db7719afb57e48a274cd338e87212d221356","sha256":"ee1136ad2abebb800817fdf8a397ff76e47df0e548d9538ae33ee527cda228d4","sha512":"1375e56fa5891439abf61d62df4180f1b4c5824d0f49efa65876fcdb4b1fcdb2180e0502ff9ba5bc74836865b53511f07fe3d6a2add6009372f8978792b1f5d4","ssdeep":"","tlshash":"7611cbd539a7a739d6878e9c228046b1b35ca9ca342c26e8f0a40b16d83fc12d565e51","size":1002,"data":"","first_seen":"2026-10-11T12:19:01.216203Z","last_seen":"2026-10-11T12:24:54.231517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/fulfillment-Dejrlbu4.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7355f811e7051ba34ab50e58acaba526","sha1":"36683bed31241661eebb2b3fea588ff9ba41b152","sha256":"9152360f2b2058b26a3a1c2cd311899c4685bac090425a1fecf59418070a67cc","sha512":"f43d113c5ebb8209b66f0d3a389c892730dc1d125412e312f172985507151d22f32adfa739a85c39c82cbcdcd09c7a2aeb253cf89b91597d95c684d0e0b8ee43","ssdeep":"","tlshash":"4de026edf4c58162d948c0bad0ec8134182d1e1f302c08cae39ba8c29b2136eca21d2a","size":336,"data":"","first_seen":"2026-07-01T21:01:43.664353Z","last_seen":"2026-10-11T12:24:54.363674Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/AnnouncementModal-UB9PCRs6.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e55f96dc1760819e2e2474dc06061304","sha1":"702234b2d257ca4c4db57f3730523d1b05452fe5","sha256":"a1e3f2a346b0efbf8f262605131ba956f9b56b3d35caad41750dd26719b63e75","sha512":"efbc8f848cc97958da8f7e839c0a4e42d6ffe2aabfb2bdd7bcf119d5fcc1c22526be2d22439d4f5ebf70b6a43945be3c94ec54d590d810d642f496abbb4b5703","ssdeep":"96:oVII+Ht+RFus/TasAH+pXkQrBAdOSGoXUNyoogrR4Jo+fLRxU+eVAY6e:O+HsFusbackaBTSLboJ11VAje","tlshash":"30b109c9792f4b395d2b02c520f08094b73e3ad1f06498c6f57d8f361ba9eac629971d","size":5579,"data":"","first_seen":"2026-10-11T12:19:01.120948Z","last_seen":"2026-10-11T12:24:54.229118Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/pencil-YpsDHJtQ.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a02f5a5da90cb5b322c9ffec5a023b1","sha1":"e68aa4630655086211f813c3fa3f668d32ffc7fe","sha256":"eb330111122043f578bda571eec838927df4df17866db82b8d9abaebabd712b3","sha512":"3d8513d861a5abd3e7e39bd686369532fc7a4494bd852be794fe5e9075dbe890efbab7a8eaf2d7052fa1ad883a843d76612c3f3320686cf43433bb56177c8cae","ssdeep":"","tlshash":"6fd02b4b0fac43ed0211e64c0e03b41007ed403c73c788d4dd0e525180620cbc45fb20","size":273,"data":"","first_seen":"2026-10-11T12:19:01.046107Z","last_seen":"2026-10-11T12:24:54.286239Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/vendor-vue-i18n-3z09OoOE.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"211b0fddce78904cb360a27b0da7ac83","sha1":"464542b030b09aacf5ce0674c60248d3e5c17460","sha256":"df2ede562af75c5f1f828af7e2223b0882e21159dac799480a3d2dc5f98f5629","sha512":"236cf1deb539bf599f7aac18d748cbf11018ec076ba712b42919138ef54481d8182d743585a8de675a7d1e7f2a8d098c9f3540923f1a0836429514aec04671e2","ssdeep":"1536:4u6nMFJX7GDeTcKBT/3nk75BtLi3mRLb+2/Om1sIqjSgOph+s:+nMncKBz3nk7/bRLb+nm2Ilg6+s","tlshash":"edb307e93196b06653ba09e650770006f32d2915380dd8e8f1adedcf3e3291652bbf6d","size":114027,"data":"","first_seen":"2026-10-11T12:19:01.019196Z","last_seen":"2026-10-11T12:24:54.243863Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/en-US-BdDDW2n2.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"78771b731fc328f369e3a5b461091db0","sha1":"ca0bb7eb24b9d821ca0fda269f3f9161a70aed86","sha256":"84ddbb693ce82fe6e4e5f5ec952d5bb72285969b6b6c3d1e32909410a6ae4cb3","sha512":"e9f7d35f44f6d08d402ce02b94e94de40c0b58141b0af2b027167ee0f9e920c11b35a0a180859729b75cbb5bfe07b44c86f97d8a9a2500c4a580f68980047cc5","ssdeep":"1536:RnUMeS5eYJ7Gq+LUfQ/H3wMQ3axIquP2i+ZoZ9oqflAyCK:2MTeYJ7k9xIquP2iiSoqf6K","tlshash":"4da32c975e1c1d3804a147b1af6ce27329ecc03571cbc3e647ae83282679865afe5b5c","size":101829,"data":"","first_seen":"2026-10-11T12:19:00.958051Z","last_seen":"2026-10-11T12:24:54.257027Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/ProductSupportLink.vue_vue_type_script_setup_true_lang-BJpn_EZ5.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4c2b6fc95fd12b02706cc54766db0ea","sha1":"49465e2d0a25230a83d61388fe51dd121d307b2f","sha256":"41509fcf6141a8b7a7de993dfea1b67b59963822df3711d1f8bdb1ddc8cc86cf","sha512":"9eb94001701ef4716a82b04b0496129cdf1652a37030185f76817ef20e746c8cb69fbcc49df7c271978553f16ac2562e1fdb99bef4465d6c6bce2ce04a715733","ssdeep":"","tlshash":"b51168cff4327a7a0163046071142462ff2d5268b5e5c5d1a0bf174932610d5df2f419","size":1020,"data":"","first_seen":"2026-10-11T12:19:01.138021Z","last_seen":"2026-10-11T12:24:54.359465Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/ProductDetail-DiPiINr6.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"31a2c4674162455b611dcf70176d374f","sha1":"4461d0c1b6051f9cae819249a8cf6ebf65afaf07","sha256":"0f602008cd7bb8f8608657a87cd58fae5f36b1b96e30e54ca5e2363005a1c021","sha512":"5a631932dd34249cd480f095dc660b863f3d3ddad8ad99a08319fe790477e534e5384294c934d5eca7418bceeb53d76aaff9c19615fbf23b974629ca1908929b","ssdeep":"384:P2sSMXf32DVwKxaAvYZiOBQLk+JrMZ0JllHDJkxYDzK:PnSmf39/wEQLlMZ0PljJkxYDzK","tlshash":"21a2c885a03189fd704b5130b42495857a9d4ffec281d69bf1fcb86a239fc3d2609bb5","size":22164,"data":"","first_seen":"2026-10-11T12:19:01.184925Z","last_seen":"2026-10-11T12:24:54.289845Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/usePostList-CJjsAPlw.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f203d9d0660bf5841a83085fa84ec86f","sha1":"da1cc84555d6e26c23e000ec2af37ae742a520b7","sha256":"ee29e20bc62af9fbaf077ab03ec9c9a2103cdc0764a7ceb3e95cb58af79767be","sha512":"0262d8e365239e35f962fd3ab7482452025c035c8d36785f55ea1251d5b394f4c51f99f8f41c84cbf3ba8e84b961b6c51e0cfd823371be48d9b8769205e690d8","ssdeep":"","tlshash":"b12163dbf01020f26ba64df580f809584a1071e831e21dc0a58e8a65331bcdfa35f7b8","size":1172,"data":"","first_seen":"2026-10-11T12:19:01.189786Z","last_seen":"2026-10-11T12:24:54.308832Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/mail-BM2gsp0V.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"528c4d83a81acd1376fc3a9f433fe2d9","sha1":"8e7095ae1bc56eb515f480262808f17154743c70","sha256":"50848d4176983e4d156c81daa99e8cfa540a167ba3efeae6fda478a524dfbd35","sha512":"965503a822d4790fc840e39950175a44347ae50a349e0622036d511ba671aa33b39231f2430bbef9de9e628f66a48fd353a02c0b6ab5ffaf5c8754005e278aa0","ssdeep":"","tlshash":"f6d0220b0b2a02fa0004808c1b07480b4fab0b3cb36a09d5c10a5a6e03a25c7aa2db05","size":210,"data":"","first_seen":"2026-10-11T12:19:01.017156Z","last_seen":"2026-10-11T12:24:54.240585Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/inbox-C33F_3xX.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c25614704d4c9b6e65824c925f715aa3","sha1":"b28af2ba470a8c47a8e72e9bb7d4757a24cb612e","sha256":"f32a25dac08bb6ec27e37c3a4b3165170f290ad34c1fb15f12ad2573ee69613d","sha512":"7d04629295da8685f74b939631f3a188d1c6d50c48bc7c250820631712668b3ccad0ee003fda164ec8a9702df7b3143a6b10d0ba0b6be8d4a8022ec5b26efd78","ssdeep":"","tlshash":"57d02b674ec963fe000644c41e77b406539e0638778d0dd2940e62f0e150b83df2fb18","size":283,"data":"","first_seen":"2026-10-11T12:19:01.20971Z","last_seen":"2026-10-11T12:24:54.280104Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/CheckoutSteps.vue_vue_type_script_setup_true_lang-BA2veqte.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6103ad735cf85e9c4744f879027a2081","sha1":"6a64cd1d259881c4f415a965f539c92c24dcb2c2","sha256":"3e26ac1213e330078bf821674ca29997980d72282a7030c2e9f37c8ccedd5b6a","sha512":"dad4875860cc12aa21fc245edfbef89571dca8926c8fccfd0f59f419f96f024c6559df4b4aff85ea25ab1a1e7d265b59ec400c5afc722c8a28293b30d1351b2d","ssdeep":"","tlshash":"db31980cd216cb3dc263960cf0aa9039aa2a8e40b8620e1ad2fc0c263742517ea9e754","size":1623,"data":"","first_seen":"2026-10-11T12:19:00.993122Z","last_seen":"2026-10-11T12:24:54.316424Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useLogin-Dp0yl29O.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"29f560042234ea6f08c5f79aab020d1b","sha1":"f2a344996225caaec483b9602ee0f3f1c1ef6292","sha256":"c75d5349e9e2e381c01e7bdf540e604b880248c587ce688d4b9e0987188797e1","sha512":"55deb972e008bb638a7516eac4bdcf7771a24d38878eff12fe659f1770419cb8ad5e154f47afe4db7e3770599672ad8f6552af48fed1cb7bf33b69ad99f9773e","ssdeep":"192:5hVh6lS/WNlMA0ghbJKtEl3WTYmMl5gMyqpo35L4juUbCAdX91O8xd9vpFowV:53h6EAXtWTDM7hyqpo35L4j/bCAdN1v5","tlshash":"4502fa8132c52572efb014ead05082d15606cf247029c5fef97f4b7a696dc42abbb736","size":8976,"data":"","first_seen":"2026-10-11T12:19:01.224931Z","last_seen":"2026-10-11T12:24:54.32975Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/eye-cOhHUppN.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"76787c448df4632247fd5659282f0f28","sha1":"0b416aeb5bc89aa85fe466735b2ea892c30da68e","sha256":"d97b48b5646a53312deed25eb6a235e4ebb7cdd1c3ea2824e07961b153bf0d2b","sha512":"ff224a192f4e37b13cd184a67634419f3e8639cb377f009d7cd938c53fcdc0e781e8d8316e1e8c1820e37b5aa7ca9f268aa3c2474448872536ae52c5a40934a9","ssdeep":"","tlshash":"c6d05b6789cd847d1003d7c80623501a175d857433514d61810f97346186ad99607d11","size":248,"data":"","first_seen":"2026-10-11T12:19:01.061025Z","last_seen":"2026-10-11T12:24:54.242441Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/minus-3pW-5avz.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"92b0a8d9aec8f3e135e210d9da1e6cff","sha1":"ba03534d66d7a9246179351c84945bbc4b29f4b2","sha256":"b564bf67754649bb517be1b87942ba48e78916409ee507bfd1a706186a408d1d","sha512":"6951ccd4de70854837a24ce41abb08d1888662f025a5408558f9259abee112b178db6c62aee183696015a52a31c67f48e48af6501e6abf04746151a0600ec0ad","ssdeep":"","tlshash":"62b0120f0d4463f717085589178768424eb6086c53a24ec4680f923593714c7c61df05","size":114,"data":"","first_seen":"2026-10-11T12:19:01.141579Z","last_seen":"2026-10-11T12:24:54.325566Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/PaginationNav.vue_vue_type_script_setup_true_lang-CpKIuCzK.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"608521d3c477089ba0574b66f2ace46a","sha1":"c7f3b142725a3da64da6e42a5b4c84f0ba81c4bc","sha256":"de0cf60ad75bafb3b306725f38bf9820a0e932b3ec583cc2998996c5517b7473","sha512":"8ba5052576a9aed6d0f350f43e8506762734e3746d18658dcef7a0fb8ad8c81f3f5886dc052c868762520489140858c1e0904c3f7ff6c3161fbadb336b19307c","ssdeep":"","tlshash":"6c41740084199679e2ca527cb0b95104336c376db68056c6a2fd6f3c332b9e66646ba1","size":1992,"data":"","first_seen":"2026-10-11T12:19:01.239857Z","last_seen":"2026-10-11T12:24:54.260895Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Cart-Bb6nstN7.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"928e9f46b3e3d237030a5bb2546675f2","sha1":"586546815b6edcc26ffda62c0c06515841c99a5c","sha256":"723b8cfe2bc605d266ce7856f422ea7cd3324160377884b3fef7e10fa3a92ea6","sha512":"e6d8d3b22753ddb4ab9b51af6d288e1ec6d2ca99c0a996b0e64cbe5e2a3c717f0f0f21eafe56356486e40e920a46f16a6581089baf52a43ef3edfcd7e45599f2","ssdeep":"96:r/NF3Cx3pI1amkg1fWCIjaIIN/TBXe0RoGNfYrJl+af:rcp4FkuWCUa5rBu0RxNfYrJl+af","tlshash":"73d1c4016014cafcb0935274e570e452b4486affc251c26be7fe9d282716c7acb09b7a","size":6390,"data":"","first_seen":"2026-10-11T12:19:01.0272Z","last_seen":"2026-10-11T12:24:54.31404Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/cartStock-DQDo-LHR.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"26965012d4960ce162c2ae450f57b412","sha1":"2c7f80e7811c9772ea30c43dc92eef35230a40a4","sha256":"eae6750d3ef1e61197e381f6555915620d52ac850989ebbfce61e42e6c2d24e0","sha512":"a3e8692e5af366f44b09cc0d5f35e4c6cef5fce62b9f16046815488e553050f72494e1872926d062d63cf93df96b12a34f7780bd9bd602176338231606115b58","ssdeep":"","tlshash":"9a519681b1f1a47256b006e090681e16f1bc4c77312fc1d6f12f1ca91d2f447b9bae2d","size":2684,"data":"","first_seen":"2026-10-11T12:19:01.168093Z","last_seen":"2026-10-11T12:24:54.356735Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Payment-Byuip_EU.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2a9ea142798dc891dd70231c838de58","sha1":"b8b06847a2b07398cdc4585f644ae7d025383c31","sha256":"52fea92b245399c2cd00df3e1ad2dbd18986bbe87684dfc83a9882163c5d4c04","sha512":"f83094f7edde2d42060121e75a6cd5faefa8688d90bb3ea7628a655d2b5fb188e411e2c7144eebf150638085c5bb4c9ed1f2eb8f7782d879f48baab0c07046ab","ssdeep":"192:iBJdChOIX/35KxoQirDLvuDnVsWWN+fgTXApG3WfDbCQQ/EZ2gicltHa51gffypl:iBJKO4IxS/zuDnV5SR2fSjE/H4s9jOT","tlshash":"29b2519474018ebdf06b5538b55c7a597208bffac102c21bf3ed8e291382c725e9eb65","size":23982,"data":"","first_seen":"2026-10-11T12:19:01.214938Z","last_seen":"2026-10-11T12:24:54.357562Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/vendor-qrcode-Dk1B7Knz.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ea22a1d76a91bac26ab9b50cf64550f","sha1":"5189327e30951f4485864e56c371531cec6b3aa3","sha256":"2a459b1b4f8c742a49837de1728017b76f4bac7bbadee67c036e2cfc1e974637","sha512":"2827de5a10f1202541f38c25fd8ae96d3b98bb48d9821fa7782ddc8460d5a4729e769d2e75d136d21854490456088849114f66334fa071fefd97df26e7156ded","ssdeep":"768:uVGQpPg9yblhiRJbKT7kavLrf9rIz4E74mtaRnU57HQkApXo8fGNGk:6Tzms89J","tlshash":"c2b2e7e933d2b1aa439365e9007f1809e2fe6c60342d556cea48a4d37d75dba81b2f1c","size":25433,"data":"","first_seen":"2026-05-02T17:24:42.711283Z","last_seen":"2026-10-11T12:24:54.307668Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Login-DpMhwu9D.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a94a08f30ebf25c1cd56b2da075e07a8","sha1":"8c8a14f1a0f51c2dff329700e20c50e1124ffae1","sha256":"68c2b7922cda7c874fde9698c00e46cf71c898045ea9b443e3a147415cebf809","sha512":"21865679055f70440cd9fcb44f370a727b4739c456eb9f64a9fed3c8b341133a3e1b19f9d124a56c9efdd8fba102d6316458565574ae3e2e8bfc7ed03db7502e","ssdeep":"192:tbMUcwKyv1dHY8rCtbOFNMXe63cnWXRd13FUgzDhhej:tbMUz9o0FNO/VjPCj","tlshash":"eb32a40134984afdf9139578f056a020301edfaed273cb59e6fc1e3a1f8ad881a15787","size":10988,"data":"","first_seen":"2026-10-11T12:19:01.15329Z","last_seen":"2026-10-11T12:24:54.3186Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/SmartImage.vue_vue_type_script_setup_true_lang-DF9TZDAh.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e72a96002afa0cd611eabfc326b4b4b8","sha1":"b42f9cef97f0934017d68c7eeed96286ecf3bda0","sha256":"00d006babc75eb0e5b8ab86b5d14e7469e0d886b3c95a92d51950b6957b131f6","sha512":"d36484a2bb8156bc9e40382a17d0e549eec604387b9961b2ed8024f3a5e2a8e9ae4a507078042e7c4f796c4bf93ce7b8f636b0ca8b2a4140f862dd268af1978a","ssdeep":"","tlshash":"eb0175cea708d7fe4707c1cc6962fc59522c2bac91b8bcc141be68b213e23b1674a255","size":842,"data":"","first_seen":"2026-10-11T12:19:00.974011Z","last_seen":"2026-10-11T12:24:54.266028Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useBannerCarousel-DQK2TKJ5.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b929231e7daf528b995d06df96f5cf3","sha1":"1e668e9aa20e390a36046f8b32a81a59c53d0ea4","sha256":"39140a63be5ffc43a99df621f77456059a54394a23e3b75b28ae699e29d93164","sha512":"b73982955322e8f4f2b2fecfe48745ca5e011a3da517e408ee3a5d8526ea1b1a0f92063e563ee22d4e2d9234ee2adc4fef57786bcbcd1655cb61d571d9864068","ssdeep":"","tlshash":"0c61d88af9b175b9c3725cd0a4d212a499380b71e63089d160b74c87267ee8381f6f3b","size":3200,"data":"","first_seen":"2026-10-11T12:19:01.134713Z","last_seen":"2026-10-11T12:24:54.320678Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/index-C334O8OE.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c75311a36ebedc30ef13da8c2d9e3f55","sha1":"208360077a4001b7d60c20d07bd2b0698e3c87ba","sha256":"b1c04fe7afb6c7f839aa84de97101f0f4a49bfa379dd105e9514c3cb5e47c047","sha512":"888c8ed65ee1d4c72c97a83e832e569699faf7d70ef7b5ea10200fcb74ef3d6dbf3ce3afc7334b91ded6f31a2a28ac0fc9a3796de60a1aec9a3b633b6bdbdf52","ssdeep":"","tlshash":"7021f02af520e7bc225fc87db35439a1690c0f8ce266fdd3f1de027616952590f7924a","size":1324,"data":"","first_seen":"2026-10-11T12:19:01.17521Z","last_seen":"2026-10-11T12:24:54.275989Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/CategorySidebar.vue_vue_type_script_setup_true_lang-BzgV4JZZ.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe916d10c6977135841030de975a0032","sha1":"55d46e475ea626861e94f33dba04c92619052416","sha256":"f18d12e06841def26fbd4934c4c4a8892ffd249bcb56e35a1c3065df0a101bb5","sha512":"33502a0ace8403dbb54ca1320df1e51645662664751ee9bbe078dcda34aff45ec90ce63839e480b403590f0bc69c85e1c24de28df26dda270e7701bcc034f7a9","ssdeep":"384:mGWIsfChpPgAkAzFCfxk5XxK/eUBtzGSZOqp8b+BojNGnhEIzvzX:mGHuCzPgtSsk5hTCHOqp8Fahzvr","tlshash":"30729559f4394abcb15763b85890a484b80c4fadc2d18e96f3fc9c3913868950f6b3dd","size":17352,"data":"","first_seen":"2026-10-11T12:19:01.165489Z","last_seen":"2026-10-11T12:24:54.354668Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/package-CRDJfatK.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"65688efc44ea13ceb4a2a6225a53c99b","sha1":"862a02255510d7397593636635b14c21ee9c5d88","sha256":"50a26b413587fe5e84498bfb03616a80a02a14b2fb8cb28436541047d5c2fc42","sha512":"5c5f8a2fc804020dc9aca9b04e3c9ba4d83bde1e9fdbc93a0f5c656bdb38b1809c60b705b732203be0a83cc38901858aece15cdda47ed3b8c7b73913c49bafa3","ssdeep":"","tlshash":"4be0df5b0f4913ae4901858c1b0bf0080fed23b9739888b0a80f02b68611947ce7bf19","size":369,"data":"","first_seen":"2026-10-11T12:19:01.243753Z","last_seen":"2026-10-11T12:24:54.262495Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Notice-DHGB0bjt.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"90d2bdee17696c91d959856fba5048c8","sha1":"cc040fbddb2eba0a1d3c35b3f07cc701a56984f3","sha256":"8efb8ab5be88bfa3a91fcfb16247255982bc3e2df2bde9f88fd74ad3c006ff09","sha512":"37d9b44c5595ade88846d225ba7f4a0f9d23a64cadc456a9f20d61354692167673de032abcbbf8b14be26204584d5f6b834e4fbec36d046ae4cf564ec34f2b4b","ssdeep":"","tlshash":"fa61670ae101cefcd6874874f0816065532abffed3e14ba5e2fd89353782469cb69364","size":3391,"data":"","first_seen":"2026-10-11T12:19:01.029536Z","last_seen":"2026-10-11T12:24:54.329069Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useFormValidation-BAE8ORYa.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc9721460b422085d0dc5de11946dafa","sha1":"fa3c54c7d2cdd31f7bb8f83931b0a0a17eb95d6a","sha256":"315974413b153e31cf860c116c97e42e00130056138f30a9f3052ba9d1733eeb","sha512":"468486b3d5d9ac8c9a4b46c935f802b595133b5d72b5f9a964004a5e52f83f946ac45bc5523bab931a77559954268fe23966df4cf13c1a41976f96dbd9660518","ssdeep":"","tlshash":"323128ceabced1ee1d0fc9c4455bd025e2bf84243496a840e06f446655dbd81c567e61","size":1587,"data":"","first_seen":"2026-10-11T12:19:01.102279Z","last_seen":"2026-10-11T12:24:54.250313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/BreadcrumbNav.vue_vue_type_script_setup_true_lang-CPfaLTLv.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"43a62222114f84e5d050adbfb626b99d","sha1":"f7d13433d0adfe249f3e564ee799a296c496b2e5","sha256":"6e7f6a7e3dde9d67be4b05519e2be4251220091d5a5dda81a164ed7c2d3b5d5c","sha512":"ec35ba92d059abbc09aae21c91507cf573e035017be586d827b53ee2de6f5fee0dff3c36ab94e6cde706174fb9293c5d7b41a2a562de330188d46f792ba9ba5d","ssdeep":"","tlshash":"044132050249547da237b1189c62a018b10d8fd8e857e6cbc3beae23369e84fd8b56b4","size":2013,"data":"","first_seen":"2026-10-11T12:19:01.070978Z","last_seen":"2026-10-11T12:24:54.334758Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Input.vue_vue_type_script_setup_true_lang-BeGOTxuW.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"aeffeb665bce91307b8209e7bef8cc0f","sha1":"eb2821a5ccfc424d6ccc8cbc969ee96aaec66da2","sha256":"c0403bf507b3dbac5d60988f5684af995889ac8853b5645183f74fb2d7123931","sha512":"05fa19d3f63ccfa9c7688c87f1740f721519bceac9b77142b25e015d092d274446092ec5d73b9635cfc389ec60d42294637a0fea783c9e7dc22a161dfb457735","ssdeep":"","tlshash":"c801126e7cf0d6f7446b4e5873c260022b0d1259eab1a9f194eb521133f91e0c60ed09","size":842,"data":"","first_seen":"2026-10-11T12:19:01.231939Z","last_seen":"2026-10-11T12:24:54.312229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/debounce-CZGZjV6W.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"caa88c69fc6852cf5975d1a33e9ccea7","sha1":"610fd747bcd5df3f59bfe4db1f117218c2ee445c","sha256":"7c202af48d2a44545b71ae50a42de2eb08626e4a8e5e6ea75380802da20a6928","sha512":"5e7dec00d68840bb3265ef18d0cea2982a1b248799365535273d16914f1fb6908486a94e97d00311c1168351c163370795eb41e9e05f6f0f9b9653c9a008f6d1","ssdeep":"","tlshash":"f4e0ab42572cf07b03a05cae827e8327f512051b384ca6e83a36af5331077823dc0e68","size":432,"data":"","first_seen":"2026-05-02T17:24:42.703111Z","last_seen":"2026-10-11T12:24:54.366946Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/ProductQuickBuy-hKjc-9IX.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4b2ba08beb9e3a3d21df3abf188e271","sha1":"44ac9923b1a43b4e33dcbf5a794f99c4766d2e1c","sha256":"50d1f787a188ab54863605417d21e32d7a1bb5d05459542584a26070f5ef8573","sha512":"8974c28bbd81f8242dafbb0bf2c80460120eb3b3ad94d71f774bec1bbd7effa9ff64bc1607d85805ebf9fae09ddce1f44d682e9276f550ecc7e0c00d12d072c7","ssdeep":"384:wmGBCXCNXPJGCfrxFChY9d///9GP0NBIhKUw0NwugLWmx23KWluyAhqUdcM55jAI:wxBCXCNXPJGCfrehs380yQUw0NwZWmxD","tlshash":"87b21984f072157b93b345b4601088d2b99e0ffdd0ea84d7e1bf6951329bc025bbab6d","size":24542,"data":"","first_seen":"2026-10-11T12:19:01.021819Z","last_seen":"2026-10-11T12:24:54.358433Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/EmptyState.vue_vue_type_script_setup_true_lang-CBQioOV9.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"87bc15fb09efe25172da586faee8df56","sha1":"aa2b43c5846e3d1bed32e888d5886cb003ea863d","sha256":"a1f581f0320f53d18ea96328c4d5c4ac46168c48700548948b398e4641318799","sha512":"3ac491e70d6b417cdcacef4be824322f95f714b542f8228500447754c48381f3f9828425cf32f90bb101093436704f55dd01114112add04ec1544bfaef9d34d4","ssdeep":"","tlshash":"6641974ab842f67cf18b0014d485584212384f6cf67566dde0ea0ba81b735f28a5f756","size":2219,"data":"","first_seen":"2026-10-11T12:19:01.241719Z","last_seen":"2026-10-11T12:24:54.361929Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/search-B6xR12Xf.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"38580b593c6441bd5d2bb2c5e4750d8b","sha1":"f0002eb98471d361b7d6b5c341f78b15c3e62098","sha256":"977212260979a7bc4090748da785f257c3b1c65c99516b063971058431a3d9f5","sha512":"fcb96bf0d4035af839a148619b7dc02c75c9ecf92c0a336afdca228566559faae1b109f20ce97edb99108cc732f92b036ef8d776f588115c5a26d6b9a0025983","ssdeep":"","tlshash":"cec08c1b9ca244662940598c164278190ee6422813918a8a8682b53a37d09bb214de82","size":166,"data":"","first_seen":"2026-10-11T12:19:01.143181Z","last_seen":"2026-10-11T12:24:54.288177Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/arrow-left-C1fNt3Nn.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d2e9f3028077463dcb68bb8c56d631d","sha1":"865f7dbec882c6c1fc1db44aaf4614d5b21bc0ae","sha256":"8f11fd8eacf7324030858578b4cdb81404bf5e0fd9917c0f6e896f8df287ccd2","sha512":"a0c78156e6ff10b6ef9eeac90c3ba278d51cb05fa799a365d5fca3f76e0e2ed1014227cf2c8adb0a867676de64fa855bf060452424e6bd26012a32308363d370","ssdeep":"","tlshash":"1fc08c4b0cd000f20628b68c4a03a8018ae481fc539be980b042607293a10a70ebcb14","size":162,"data":"","first_seen":"2026-10-11T12:19:01.245675Z","last_seen":"2026-10-11T12:24:54.337809Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/clipboard-CtQLYUT0.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8e1f6d8947757985c289d29fbc4d4b4","sha1":"2c8b12fd40aed26e951cd46c1cd1ef30305b64ae","sha256":"7f502c74b432601c969abd1d2f25a86c8c57c64164f4370a87823caa555aebf6","sha512":"7e320af66a606eba5339b06786b09bc72e74eeb94f0398d23ffbdc24122ca2952c63b155f6daa898801e752c1598e708c960407b5294f1ed62a66cc6aa33fcce","ssdeep":"","tlshash":"c5e0c62091240330c3a930ef25fcc6c038b1402c35038180e44d2a5a6368fa6822bdb0","size":336,"data":"","first_seen":"2026-08-09T04:42:23.737798Z","last_seen":"2026-10-11T12:24:54.297393Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/purify.es-Bf9VIfmD.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b66faf1bfbb355f3a5cd395b03bd4d88","sha1":"16a060e33ef861318e8cddddbc492a6846e19ec7","sha256":"c8490980addf2c6f78aef3c67262717b47432e9ecac179a777dfabbaaa89ea88","sha512":"d06c59863c29e22b2daf97898e7cfa36851ee74de808bf176c1cc9ecf247318a0ccaebe856d23502ecbd00617015f7117bc839c2e4e453b9c3a6ebdb1538e718","ssdeep":"384:/LeAgRvdrRAj87jieMJdh0tC8/sG5DE9MYL9lPsV5+WwjBgMN7oaFU1iecdotrFm:/qAgrrCj8hMJv0tC8/siYuYL9lPsV5+L","tlshash":"44a22c69bd856db65fdb41d8707b5d0c95bc000a740cc460e2ceecb608bae99606bf2f","size":22639,"data":"","first_seen":"2026-08-06T00:53:01.699883Z","last_seen":"2026-10-11T12:24:54.332336Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":" Dujiao-Next  Digital Commerce Platform ","filename":"https://spark-one.top/assets/index-D5iKIM_e.js","line_number":4,"column_number":120263},{"level":"log","text":"GitHub → https://github.com/dujiao-next","filename":"https://spark-one.top/assets/index-D5iKIM_e.js","line_number":4,"column_number":120486}]},"http":[{"url":{"schema":"https","addr":"spark-one.top/assets/AnnouncementModal-UB9PCRs6.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.921Z","timestamp":1791721450921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/AnnouncementModal-UB9PCRs6.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 83ca7d67-6bfa-45c2-9b67-a489dad4bd38\r\ncontent-length: 5579\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5579,"size_decoded":6416,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5577)","md5":"e55f96dc1760819e2e2474dc06061304","sha1":"702234b2d257ca4c4db57f3730523d1b05452fe5","sha256":"a1e3f2a346b0efbf8f262605131ba956f9b56b3d35caad41750dd26719b63e75","sha512":"efbc8f848cc97958da8f7e839c0a4e42d6ffe2aabfb2bdd7bcf119d5fcc1c22526be2d22439d4f5ebf70b6a43945be3c94ec54d590d810d642f496abbb4b5703","ssdeep":"96:oVII+Ht+RFus/TasAH+pXkQrBAdOSGoXUNyoogrR4Jo+fLRxU+eVAY6e:O+HsFusbackaBTSLboJ11VAje","tlshash":"30b109c9792f4b395d2b02c520f08094b73e3ad1f06498c6f57d8f361ba9eac629971d","first_seen":"2026-10-11T12:19:01.120948Z","last_seen":"2026-10-11T12:24:54.229118Z","times_seen":2,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/wallet-DzStXH-7.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.864Z","timestamp":1791721454864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/wallet-DzStXH-7.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 6dcaed9b-569d-4a33-b711-9583afeefb50\r\ncontent-length: 576\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":576,"size_decoded":1412,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (575)","md5":"736ee588f868c676480de9563ba388b6","sha1":"dc5985096e91403256908f4621d8a3125d1d46e9","sha256":"27c1c6074beb030080f7ede9917a3f0d464486f02a7dc7a78b54c69302573555","sha512":"41be0a41974b7a550d654a5253459218fffb2834b45cadb1c6d4053ccc11897653a06941966903c6ede2b898380a4dc2aa900ff4845ba22164dd21b249632f4e","ssdeep":"","tlshash":"20f0f06e361c8330240a5f38828790e8402ed6de788800b82fa89f84662ac5f69cdf25","first_seen":"2026-10-11T12:19:01.206799Z","last_seen":"2026-10-11T12:24:54.230466Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/paymentResumePolicy-ClAh5BJh.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:15.531Z","timestamp":1791721455531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/paymentResumePolicy-ClAh5BJh.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: e54bd3bb-0a9b-4e35-8248-818bdde21efd\r\ncontent-length: 1002\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1002,"size_decoded":1839,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1001)","md5":"78237cb620de2d52d738939d73cf7e49","sha1":"c7e6db7719afb57e48a274cd338e87212d221356","sha256":"ee1136ad2abebb800817fdf8a397ff76e47df0e548d9538ae33ee527cda228d4","sha512":"1375e56fa5891439abf61d62df4180f1b4c5824d0f49efa65876fcdb4b1fcdb2180e0502ff9ba5bc74836865b53511f07fe3d6a2add6009372f8978792b1f5d4","ssdeep":"","tlshash":"7611cbd539a7a739d6878e9c228046b1b35ca9ca342c26e8f0a40b16d83fc12d565e51","first_seen":"2026-10-11T12:19:01.216203Z","last_seen":"2026-10-11T12:24:54.231517Z","times_seen":2,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/external-link-DgqxegW5.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:15.537Z","timestamp":1791721455537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/external-link-DgqxegW5.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: ad135995-df1d-4cfa-9940-01f8154bdaee\r\ncontent-length: 248\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248,"size_decoded":1084,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"3ac642fcc9a812d3046d22ad83b66e1c","sha1":"a954e417ced006762a2a425ca3449cec9081cfca","sha256":"3324204bee2542e86ea559fdd5991860a2c5ae6d9580b1caa2b6036f520a2f4b","sha512":"dc62890f7ff29b2e340dc39b282fb665ce774f53a7b6063d00fdcf462d933e8bc4e061d9dfdd4b15637e343b1597062e95c40c29ef0b99e4e2ca0e93b0bf3454","ssdeep":"","tlshash":"6bd05b5f4f88057e0801a68c1e4bf45547da117c32ca8c85b01e15728267246dda7f10","first_seen":"2026-10-11T12:19:01.014819Z","last_seen":"2026-10-11T12:24:54.23242Z","times_seen":2,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/copy-Cx1ixJRl.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:15.538Z","timestamp":1791721455538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/copy-Cx1ixJRl.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 066289c5-0c85-4e0a-ad07-24606b619d4a\r\ncontent-length: 228\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228,"size_decoded":1064,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"212ea8115bccad2ee8aae9195932f649","sha1":"c823642fa26a80543783f3c8cb0fa8912dd27023","sha256":"3fe89523ec41cb27567a68231ba17c200a7874836eec0ba0cd91100f3f4f64b3","sha512":"9aabf094f704d51bb5ffd9403dc9506bb67dd2b05d61f8f5d97b41f08cd731a3e3b4b22f39d9ec84ab085f1e765c00b084f92ff6a4bbf3ac9927be02a1f55ab7","ssdeep":"","tlshash":"81d0a71e8e2211fa641048881e432c9357a8167463848a95910b88375a555cf296eb47","first_seen":"2026-10-11T12:19:01.133146Z","last_seen":"2026-10-11T12:24:54.233362Z","times_seen":2,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/product-CwFRTCTJ.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.886Z","timestamp":1791721450886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/product-CwFRTCTJ.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: b3668dcb-7c2c-4c53-b299-b81c98bce21b\r\ncontent-length: 408\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":408,"size_decoded":1244,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (407)","md5":"b230dfa2e467ffb8b66e1c95b2818d61","sha1":"e3719f119b6f4bece17b7a6ed39d25d9429dbaf9","sha256":"1775c2137f36c55e23ba385802c49b1f2827cf6e8de7176f08c99264e2a30572","sha512":"526fbf4e31e6cf3dfcc3af334a92df598cde5334ae928049d6ed7e6417d2bd04132df4ca89982e6e5f31c9476cf837c17a0eca4c277cb3d8d94e0da9438a5891","ssdeep":"","tlshash":"c9e06d3b462dcf7405c03c2ee2818657d613ad5cb1da28c82d095b918f646432b24bb6","first_seen":"2026-10-11T12:19:01.082015Z","last_seen":"2026-10-11T12:24:54.235275Z","times_seen":2,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/chevron-left-CicxAIht.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.943Z","timestamp":1791721450943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/chevron-left-CicxAIht.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 705ca474-f1a5-4ac1-a6ee-d237528eb54b\r\ncontent-length: 127\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127,"size_decoded":963,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"951408fff6c8d8b177823ed802a8ed59","sha1":"f4bd82ad566120b89f37774e06e114e082965924","sha256":"ff24b3ff1c8caf3fedaeef51dd81350d807a9cc2a542b768b356ba5b35a15813","sha512":"f1040926a2ef9821909c6fb14538c76dedf40bab7d119d6845f94da606c9923e13f30da72bc831bf4a58ba0a30c8c471cd4dea190989615d4901031b451bb9fd","ssdeep":"","tlshash":"12b092271a8041b307086a8c5642183686a655ac27938988e062662553d19cb66ace11","first_seen":"2026-10-11T12:19:01.123159Z","last_seen":"2026-10-11T12:24:54.238049Z","times_seen":2,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/BuyerNoteInput.vue_vue_type_script_setup_true_lang-C7EWA8wW.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.857Z","timestamp":1791721454857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/BuyerNoteInput.vue_vue_type_script_setup_true_lang-C7EWA8wW.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: d304965b-0f31-4a4e-8f20-9db3a9e30128\r\ncontent-length: 1140\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1140,"size_decoded":1977,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1055)","md5":"3a346157e505d340592edf72af58dc22","sha1":"cdf4c7403c7f725db5b916a61fb643aef0d1e448","sha256":"65b4e1ab645494779daa30c0e201273ca06abe04d0c6137ebb41677341bffc4f","sha512":"f03f796a9c7b1cb1aab93142f5d2498e1dfaf3338b4f329db772c040a7566634b3f6cc91a7e54002169dd8964c9aab85aef20d6efc3f3523720c666750b89b7e","ssdeep":"","tlshash":"ad21f91addf02ffc2d27894ce7223090300fab8cf962458081ed1ab01796bc24a2347c","first_seen":"2026-10-11T12:19:01.074817Z","last_seen":"2026-10-11T12:24:54.239624Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/mail-BM2gsp0V.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:17.792Z","timestamp":1791721457792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/mail-BM2gsp0V.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 71bcea34-c95d-4e66-91f8-e961f300e1fb\r\ncontent-length: 210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":210,"size_decoded":1046,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"528c4d83a81acd1376fc3a9f433fe2d9","sha1":"8e7095ae1bc56eb515f480262808f17154743c70","sha256":"50848d4176983e4d156c81daa99e8cfa540a167ba3efeae6fda478a524dfbd35","sha512":"965503a822d4790fc840e39950175a44347ae50a349e0622036d511ba671aa33b39231f2430bbef9de9e628f66a48fd353a02c0b6ab5ffaf5c8754005e278aa0","ssdeep":"","tlshash":"f6d0220b0b2a02fa0004808c1b07480b4fab0b3cb36a09d5c10a5a6e03a25c7aa2db05","first_seen":"2026-10-11T12:19:01.017156Z","last_seen":"2026-10-11T12:24:54.240585Z","times_seen":2,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/eye-cOhHUppN.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:17.794Z","timestamp":1791721457794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/eye-cOhHUppN.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: c41af3a9-b368-4ab8-80f4-8dce92106497\r\ncontent-length: 248\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248,"size_decoded":1084,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"76787c448df4632247fd5659282f0f28","sha1":"0b416aeb5bc89aa85fe466735b2ea892c30da68e","sha256":"d97b48b5646a53312deed25eb6a235e4ebb7cdd1c3ea2824e07961b153bf0d2b","sha512":"ff224a192f4e37b13cd184a67634419f3e8639cb377f009d7cd938c53fcdc0e781e8d8316e1e8c1820e37b5aa7ca9f268aa3c2474448872536ae52c5a40934a9","ssdeep":"","tlshash":"c6d05b6789cd847d1003d7c80623501a175d857433514d61810f97346186ad99607d11","first_seen":"2026-10-11T12:19:01.061025Z","last_seen":"2026-10-11T12:24:54.242441Z","times_seen":2,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/vendor-vue-i18n-3z09OoOE.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:08.919Z","timestamp":1791721448919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/vendor-vue-i18n-3z09OoOE.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 57ee2ce5-fa3d-4a54-aa40-46a071c0ded9\r\ncontent-length: 114027\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114027,"size_decoded":114866,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"211b0fddce78904cb360a27b0da7ac83","sha1":"464542b030b09aacf5ce0674c60248d3e5c17460","sha256":"df2ede562af75c5f1f828af7e2223b0882e21159dac799480a3d2dc5f98f5629","sha512":"236cf1deb539bf599f7aac18d748cbf11018ec076ba712b42919138ef54481d8182d743585a8de675a7d1e7f2a8d098c9f3540923f1a0836429514aec04671e2","ssdeep":"1536:4u6nMFJX7GDeTcKBT/3nk75BtLi3mRLb+2/Om1sIqjSgOph+s:+nMncKBz3nk7/bRLb+nm2Ilg6+s","tlshash":"edb307e93196b06653ba09e650770006f32d2915380dd8e8f1adedcf3e3291652bbf6d","first_seen":"2026-10-11T12:19:01.019196Z","last_seen":"2026-10-11T12:24:54.243863Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":984,"receive":492,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/zh-TW-BZ5QasDe.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:11.632Z","timestamp":1791721451632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/zh-TW-BZ5QasDe.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/assets/index-D5iKIM_e.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: bb0e78d1-bbcf-48c9-969b-fbf147fcdb7e\r\ncontent-length: 99384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99384,"size_decoded":100222,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (51874), with no line terminators","md5":"3a7252dd01ef365265c244e1ac3066d4","sha1":"48f4398a167003018acb51e532d9d87250c422ad","sha256":"b0847f6e21b80b366258bb3f663540446cf3f520369ec4ee1a780fd223d3f46b","sha512":"07f785e82bc57e7f2eeda3732ac0df4bdf595600587a65288c1094243eebbc4964c8c2216643b93393b3198cbe460c902fd885243fd6aac62143562a71f78e95","ssdeep":"1536:q0oOPECvzdfxdwmsCRy5kzgoQzOps5e8K96Lr1:ZPEqxx8QgYsioB","tlshash":"b8a34c9b4e6d0d78057587a18f6dd6a318ecd47479db93f24bba83042a79434bee0b0c","first_seen":"2026-10-11T12:19:00.969894Z","last_seen":"2026-10-11T12:24:54.245353Z","times_seen":2,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useCheckout-DcHfnyWm.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.861Z","timestamp":1791721454861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/useCheckout-DcHfnyWm.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 59111815-b7a0-40e7-82d7-254af086fa7e\r\ncontent-length: 21829\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21829,"size_decoded":22667,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (21828)","md5":"7c2fc77da85ea195ec00a593b4f4bfe8","sha1":"852bf940ba853b3975a5f6e29ba9012455076699","sha256":"b96c8bae5355324359f52bb091e735eb792b0d62961ff99ef99c9018d8b3a9a8","sha512":"78ac32b953fd4441bacde92a0d4036b66ab9824c752bd429ea16f3ca09d203fc5a7e93c4bccae725dbb3069739edc645d5263243c92481463a2b919bb913b475","ssdeep":"384:bAQ8u2Yh7RbJ21qp4soIwujEbSc4YUFXu74XZ3eFNgUMqQG0Fm72RQmMPopcqk9v:cQX2Yeqp4soIwuKSc4jhu74XZ34gUMqF","tlshash":"d8a20a80f2f134719bb259e020504156b5281b5bf02ac6f6e5eb0e2a177bd83a4f7e7d","first_seen":"2026-10-11T12:19:01.151038Z","last_seen":"2026-10-11T12:24:54.247034Z","times_seen":2,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/status-BT9pW044.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:15.528Z","timestamp":1791721455528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/status-BT9pW044.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: d9b6cdf1-7465-49ea-959b-9bcbd2ac74ca\r\ncontent-length: 745\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":745,"size_decoded":1581,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (744)","md5":"99ffb08aff48688b03130ae18ee1223d","sha1":"e645a4b18639cc57308a019afbc276e46fd806ff","sha256":"6b84b6ed3d3a19858093a338b70bfe01e88495c64f97366d2220d83d3880c2df","sha512":"563968fe1fd5b5912e80b4141c52940e62858fb4d855f4452a8fc29a4821dbfe72f243d2fb938cd1582e8de89f8e3bafdcf3c4d539ef1d2b634a61a3b7273f77","ssdeep":"","tlshash":"df012bf4b2cb46ed0b6dbe1b06866b313919cf3d4a153866d974e538c614984fc5d8c4","first_seen":"2026-08-09T04:42:23.757354Z","last_seen":"2026-10-11T12:24:54.24807Z","times_seen":7,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/browser-B2lUSF31.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:15.533Z","timestamp":1791721455533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/browser-B2lUSF31.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 6dbb2943-dd60-4828-8308-bb73c51bbbb3\r\ncontent-length: 89\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89,"size_decoded":924,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"c3eaeec8c3265a53bbbb3561e34ca8bb","sha1":"65dfd1b5384018f31108e0b7eeefec7ee157371c","sha256":"1e29142efdad44ea6037b7c0e2b67fcff4062d0b474a20ae5a681dc69ce195e3","sha512":"a310b2285259ac858388685789dc5921f534b99e45419f704d5e06b33fd0f329206e047a465b822fc1bedd466effbefc7832d44a5c2f738b9f494f7468934618","ssdeep":"","tlshash":"2ab012150812507044554dcde22285a20e58d76c3388d3f00100625003110c10c0cd13","first_seen":"2026-05-02T17:24:42.700823Z","last_seen":"2026-10-11T12:24:54.24881Z","times_seen":11,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Notice-DD9oXTw0.css","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:17.121Z","timestamp":1791721457121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Notice-DD9oXTw0.css HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: e0773ba1-802f-4f8b-b2aa-e73e73156cd1\r\ncontent-length: 130\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130,"size_decoded":959,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7a932ba2a8ebb4e2996166e3610423dc","sha1":"14e51fe310df730cfc36a635219f327b5b5a3285","sha256":"46ca068efcb3dbc798c2ef64e53d38ebc8e1b50d4f8d9fa2ecede3dd52bf6898","sha512":"042a028421743fa954d83b7a857c7552de99795124fc0b07243cd4e0f687e805a2775cdb6e22fc96b3eb1b3bdd35ab20c4aa98ee8b92048b3899f0ab8517ebbb","ssdeep":"","tlshash":"dbc09b6f95445b209013dd0057c9251b53718e73150009b745f0574c4b4ff4505c5406","first_seen":"2026-08-09T04:42:23.819279Z","last_seen":"2026-10-11T12:24:54.249623Z","times_seen":6,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useFormValidation-BAE8ORYa.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:17.791Z","timestamp":1791721457791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/useFormValidation-BAE8ORYa.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 036cd343-08a5-4cac-83de-1372efaef0e8\r\ncontent-length: 1587\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1587,"size_decoded":2424,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1586)","md5":"dc9721460b422085d0dc5de11946dafa","sha1":"fa3c54c7d2cdd31f7bb8f83931b0a0a17eb95d6a","sha256":"315974413b153e31cf860c116c97e42e00130056138f30a9f3052ba9d1733eeb","sha512":"468486b3d5d9ac8c9a4b46c935f802b595133b5d72b5f9a964004a5e52f83f946ac45bc5523bab931a77559954268fe23966df4cf13c1a41976f96dbd9660518","ssdeep":"","tlshash":"323128ceabced1ee1d0fc9c4455bd025e2bf84243496a840e06f446655dbd81c567e61","first_seen":"2026-10-11T12:19:01.102279Z","last_seen":"2026-10-11T12:24:54.250313Z","times_seen":2,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/shield-check-DrOaLErp.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:17.796Z","timestamp":1791721457796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/shield-check-DrOaLErp.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 86608618-22e7-42d1-8500-60445c1eb432\r\ncontent-length: 317\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":317,"size_decoded":1153,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (316)","md5":"201df1c78058fd3ababf2b4bdf1ef164","sha1":"8c50d0e45b93aadf4aeb36d73dfba8a06417a963","sha256":"97317103016d4e017ee07480cca8007836d76df3853f1bb0a57f4f34e3b5e498","sha512":"c28afdbe10b7821b845adb4e8d8b76ea6ca7bdb358d6cc490db9d8043adcc6b33d41f4fd7dc6f7dddd05eb2b9486cb1b8399cb36ffbb4b9c773155b8be5a5dee","ssdeep":"","tlshash":"8de0cd7b9f4c57fd15c7d6c9854324048fadd65c33a944e0f00c8c3a811288bc19fa25","first_seen":"2026-10-11T12:19:01.038987Z","last_seen":"2026-10-11T12:24:54.251202Z","times_seen":2,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/chevron-right-tnpKnimj.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.938Z","timestamp":1791721450938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/chevron-right-tnpKnimj.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 8510776d-e2ff-4417-91fc-1d641a66215c\r\ncontent-length: 127\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127,"size_decoded":963,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"542d8ff6f1ec1c246b047218a110d98e","sha1":"7e832bf83cd3ccc2e1f503e730b49537ff3cc4cf","sha256":"3896975d1f34916d4db3bb89ced7318be8c1525982e1aaff44bb5d4eb85c4323","sha512":"110ac81455c9b46472640282e49a93a355ae8bd033b2b2cd31f2bd1e25e5d5f21b4a9bb2c32ac04987c558050ea9f261f271063c6be63048541935779226bff1","ssdeep":"","tlshash":"e6b092072db491f30f496589a7551c8b86aa15ac2783d89da083a12992e19ab618cf10","first_seen":"2026-10-11T12:19:01.202721Z","last_seen":"2026-10-11T12:24:54.252785Z","times_seen":2,"resource_available":true,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/qifeng/chatgpt-minimal-20260920.jpg","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:12.431Z","timestamp":1791721452431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /qifeng/chatgpt-minimal-20260920.jpg HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 12:24:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 785f251b-33f1-4497-b25d-c66004cf8655\r\ncontent-length: 195537\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195537,"size_decoded":196329,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1448x1086, components 3","md5":"b338b54bd618006837b17f06997d03ca","sha1":"80f49443cb5017287231d4552ae640ce05f174c2","sha256":"7e99c73dadc2fd776506fdf902b88feea8df52f2c4719215b4436b7168f1ec54","sha512":"69c612bc12f4fae0464dc34442f52c316651bd3bd86b3192bd83398af593bb416080d2e8995dc695b2ff1cbd799173b497d3e9f47fb9943cabca409818150c57","ssdeep":"3072:7uaQdkFPRnHi+CasUNx/R/78idfwarzXkkH/RUP6LEQxJodk6pWWdglG/SV71BM:RFPyLsR/78idZXdY64QxK6NWdv2pBM","tlshash":"1e14129fd3870667db2e42fa290c9435b38a66f73265d600dd81ed09f6edc5878d410a","first_seen":"2026-10-11T12:19:01.146226Z","last_seen":"2026-10-11T12:24:54.254275Z","times_seen":2,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Blog-D059wWsQ.css","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:16.447Z","timestamp":1791721456447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Blog-D059wWsQ.css HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: f02555b9-5257-40b3-b135-361da3d823f1\r\ncontent-length: 259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":259,"size_decoded":1088,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5a556ae7d3c197d8845720f344872dd6","sha1":"92e06d2011a5a4f09e607291c34e74c4c664ee02","sha256":"277a58e42c0d26e35cba8efd3c391a06fb2f39a69298b8f197de81a97e73613f","sha512":"7ec8b5f8ffba19befd258093f18c9f9c8ba3e4485a8846e05a046a04f64e0be96748b48a082b33ba7a122dc14e40540ae2ef14d9a45a2038a5fcad54dc4d8512","ssdeep":"","tlshash":"f0d09e4b96855720d013dd0053cd3666a3f2eeb316804cf986f05b5c8f9ff954b85d0a","first_seen":"2026-08-09T04:42:23.790576Z","last_seen":"2026-10-11T12:24:54.25545Z","times_seen":4,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/en-US-BdDDW2n2.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.500Z","timestamp":1791721450500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/en-US-BdDDW2n2.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/assets/index-D5iKIM_e.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 0690ac13-3d5b-40bd-b39f-2df1733b9295\r\ncontent-length: 101829\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101829,"size_decoded":102668,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65509), with no line terminators","md5":"78771b731fc328f369e3a5b461091db0","sha1":"ca0bb7eb24b9d821ca0fda269f3f9161a70aed86","sha256":"84ddbb693ce82fe6e4e5f5ec952d5bb72285969b6b6c3d1e32909410a6ae4cb3","sha512":"e9f7d35f44f6d08d402ce02b94e94de40c0b58141b0af2b027167ee0f9e920c11b35a0a180859729b75cbb5bfe07b44c86f97d8a9a2500c4a580f68980047cc5","ssdeep":"1536:RnUMeS5eYJ7Gq+LUfQ/H3wMQ3axIquP2i+ZoZ9oqflAyCK:2MTeYJ7k9xIquP2iiSoqf6K","tlshash":"4da32c975e1c1d3804a147b1af6ce27329ecc03571cbc3e647ae83282679865afe5b5c","first_seen":"2026-10-11T12:19:00.958051Z","last_seen":"2026-10-11T12:24:54.257027Z","times_seen":2,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/money-CmSYA0w3.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.890Z","timestamp":1791721450890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/money-CmSYA0w3.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 86a7cd8a-4014-4f43-943d-7018c230bb5d\r\ncontent-length: 1294\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1294,"size_decoded":2131,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1293)","md5":"9e7d447d8a3929615c071d724eacbe90","sha1":"9ad1022e516e429bb9a64d532dce3d08e1360162","sha256":"f9f782d28f266d626f630412bfaf29f43c9b697d49f2310d7d7906920eef5b86","sha512":"eb1007998b4f1c3359fee91c3834bba3a0c3b64adc4d7e0a1486ed9fe84d26532813e91f3b240a1f081575aa44d1b22641a9cd1371bd5a7ad8270da56c228f89","ssdeep":"","tlshash":"dd217081d2ad647a43971d6b02d8c196f90ca51be6fe45c8d13dddf226a7c87f0e4c60","first_seen":"2026-05-02T17:24:42.714287Z","last_seen":"2026-10-11T12:24:54.258233Z","times_seen":22,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useBannerCarousel-CX2BY84I.css","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.892Z","timestamp":1791721450892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/useBannerCarousel-CX2BY84I.css HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: b1546bca-b592-4661-94af-e6421799036a\r\ncontent-length: 116\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116,"size_decoded":945,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6dee33b176bdae179b9b74edb9c83ccf","sha1":"f5f952a695c9adaaf05bf84af3bc68c9ca394fa7","sha256":"7ee8c7118bae8b6180640891209ad0d1c0ae709d6b9196c18e408a48ca843f9f","sha512":"e857f5ffcd8fd328189c84787ca3ed89a350bfbc9c2fae08e4804a0a511df2bd1b0ca3309b4b4a48d0d003f601961e05b16df39d47cf5872bb5cf5bf435b6628","ssdeep":"","tlshash":"cab0920a60cf60584437b20962a00968f832b615db1ea55b0042e2c5aa8788409b7beb","first_seen":"2026-10-11T12:19:01.228376Z","last_seen":"2026-10-11T12:24:54.258902Z","times_seen":2,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/PaginationNav.vue_vue_type_script_setup_true_lang-CpKIuCzK.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.942Z","timestamp":1791721450942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/PaginationNav.vue_vue_type_script_setup_true_lang-CpKIuCzK.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: e263ad85-9b09-4add-8b35-16a2074233de\r\ncontent-length: 1992\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1992,"size_decoded":2829,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1991)","md5":"608521d3c477089ba0574b66f2ace46a","sha1":"c7f3b142725a3da64da6e42a5b4c84f0ba81c4bc","sha256":"de0cf60ad75bafb3b306725f38bf9820a0e932b3ec583cc2998996c5517b7473","sha512":"8ba5052576a9aed6d0f350f43e8506762734e3746d18658dcef7a0fb8ad8c81f3f5886dc052c868762520489140858c1e0904c3f7ff6c3161fbadb336b19307c","ssdeep":"","tlshash":"6c41740084199679e2ca527cb0b95104336c376db68056c6a2fd6f3c332b9e66646ba1","first_seen":"2026-10-11T12:19:01.239857Z","last_seen":"2026-10-11T12:24:54.260895Z","times_seen":2,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/package-CRDJfatK.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.953Z","timestamp":1791721450953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/package-CRDJfatK.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 108fbc5a-02a2-4713-9512-47d9623e11c5\r\ncontent-length: 369\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":369,"size_decoded":1205,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (368)","md5":"65688efc44ea13ceb4a2a6225a53c99b","sha1":"862a02255510d7397593636635b14c21ee9c5d88","sha256":"50a26b413587fe5e84498bfb03616a80a02a14b2fb8cb28436541047d5c2fc42","sha512":"5c5f8a2fc804020dc9aca9b04e3c9ba4d83bde1e9fdbc93a0f5c656bdb38b1809c60b705b732203be0a83cc38901858aece15cdda47ed3b8c7b73913c49bafa3","ssdeep":"","tlshash":"4be0df5b0f4913ae4901858c1b0bf0080fed23b9739888b0a80f02b68611947ce7bf19","first_seen":"2026-10-11T12:19:01.243753Z","last_seen":"2026-10-11T12:24:54.262495Z","times_seen":2,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/SmartImage.vue_vue_type_script_setup_true_lang-DF9TZDAh.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.177Z","timestamp":1791721454177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/SmartImage.vue_vue_type_script_setup_true_lang-DF9TZDAh.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:14 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 412f6458-49ff-4759-914f-f9eaf289abc5\r\ncontent-length: 842\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":842,"size_decoded":1678,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (841)","md5":"e72a96002afa0cd611eabfc326b4b4b8","sha1":"b42f9cef97f0934017d68c7eeed96286ecf3bda0","sha256":"00d006babc75eb0e5b8ab86b5d14e7469e0d886b3c95a92d51950b6957b131f6","sha512":"d36484a2bb8156bc9e40382a17d0e549eec604387b9961b2ed8024f3a5e2a8e9ae4a507078042e7c4f796c4bf93ce7b8f636b0ca8b2a4140f862dd268af1978a","ssdeep":"","tlshash":"eb0175cea708d7fe4707c1cc6962fc59522c2bac91b8bcc141be68b213e23b1674a255","first_seen":"2026-10-11T12:19:00.974011Z","last_seen":"2026-10-11T12:24:54.266028Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useCart-Fxc34EHs.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.180Z","timestamp":1791721454180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/useCart-Fxc34EHs.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:14 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 00836a33-29bd-474d-a9d8-5c8771c5da4d\r\ncontent-length: 3040\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3040,"size_decoded":3877,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3039)","md5":"c85d822e130d79f2d65b0f5896afd403","sha1":"031833d19c09e58a4d22f73f9b4fec91604b79ce","sha256":"b21e0be65e7ae613ce30330657df0a39b11591b430f5b5f422f1d8abb2a71c8a","sha512":"b1ee00a9e1618e8d2018117e65c4224b53b58f34533f7c2567329bbd0107ae914e9f398292c65daca3988f4cdd7fd84e6860818874dcb730ee3ecb4a4ad87ba0","ssdeep":"","tlshash":"fa5197c1b6b1b070577559f050200993f33d278e656f85d6c18a2f492b9780291b3f7f","first_seen":"2026-10-11T12:19:01.051965Z","last_seen":"2026-10-11T12:24:54.267738Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Checkout-B8MQn80N.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.853Z","timestamp":1791721454853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Checkout-B8MQn80N.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: d2bd8f9b-366f-490b-9836-a64b8016cde2\r\ncontent-length: 14153\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14153,"size_decoded":14991,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (14140)","md5":"0e15faf61550d0f803dc6966a0ca6600","sha1":"eb0f2b1b04696f08142b49b818ae210274b32ee5","sha256":"76cf595f8c6a8f3021bd55440a7cf38111acb72c443f14f689c8427ba2e12446","sha512":"0f32b58b0bce564f0175dc11639df4ee38d65720c36531c18b07e0f7897715744ea13e108030efb944cf78c728a3f41e03f962aee3000a4dea0e13ab073108be","ssdeep":"192:SA2uMUtMnHiicabIP+c/tp7J/xhFFme1KvA29wycpMbnEVwpYyy8iydvZ56xvau:V2P8MnOqIP+0dh3+HdxkMvi","tlshash":"2752a50190108abca5970635a155b555a10c5fffc0518eb7f2feef3c2799cba390bba2","first_seen":"2026-10-11T12:19:00.995429Z","last_seen":"2026-10-11T12:24:54.269051Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Home-DmOfVfAT.css","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.956Z","timestamp":1791721450956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Home-DmOfVfAT.css HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: bed9a5d5-3e2d-43a5-a9d1-ce20d28385f7\r\ncontent-length: 205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205,"size_decoded":1034,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a598e0579e870eec43fcb101c088a5b4","sha1":"c9c6a44c8c9ee9508c0f696242e538d205640442","sha256":"efb399111cdb16ceed4871033ac8ae0edb306474d6e2b15ce523f846d712c4e5","sha512":"89a1e7de0648b8cecb0a3942cfe2c79885a4be17f696319aedb9bf840aa0dca553deaaa3095e38b1bad3c4283c1861c3f7bc9ca13fb8c752b826134822e24605","ssdeep":"","tlshash":"8ed0c9342e1d683300a7c5472ac49e8c40bcbbe2942304c7224a68f24ff71ea50322cf","first_seen":"2026-10-11T12:19:01.048981Z","last_seen":"2026-10-11T12:24:54.27101Z","times_seen":2,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Home-BxZKiUEe.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.880Z","timestamp":1791721450880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Home-BxZKiUEe.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 10fbcc85-36e5-4680-aee8-a597570c35f0\r\ncontent-length: 23424\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":23424,"size_decoded":24262,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (23422)","md5":"e65189f63bd9db2f118539c017e5bc0e","sha1":"05c53785aebe8b42525ef01e692708ed46826078","sha256":"4bbfd48512954522168a2fa221c2a1a6fd30c0bc418b3268192ab6c10bcdae0f","sha512":"1285754b0aedb07b939b15adb651ec436381f260feac32aa34cafc8f50b15665baa7a5506cbd71c469f0dd0366a577b145b634684db87fd4e94e02199bafa906","ssdeep":"384:UKKAjhOJaxnmIKtvlODGPbK4AgHOLLLz5E7moomgu2PjRI2JhV:7K0IocflM2bKmOL9ov2Jv","tlshash":"dfb2e888e431867de153517870289088b91d9feec2c3ca9bf2fed93537c2c795a59398","first_seen":"2026-10-11T12:19:00.96499Z","last_seen":"2026-10-11T12:24:54.27295Z","times_seen":2,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/buyNow-bIZpmNk2.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.898Z","timestamp":1791721450898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/buyNow-bIZpmNk2.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 68452a5a-8146-47bc-9ccc-2c311625a35d\r\ncontent-length: 258\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258,"size_decoded":1094,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"0f9a14e050172d077ecbccac940e3163","sha1":"61ef9771cb6d9170db3475ea37418690783227ac","sha256":"3631d74904c8733c93ce4790b89802e80a6df234e496e87546382f41fcf94130","sha512":"029067c4a7e3581f749a2c926d2ed9701b2d3dc7e886a37c06e47d645564d4c02e5269900ccbc5bf47bc7f1a87a9c58857c55a15ffd6a3dc9e44a3906a9ad753","ssdeep":"","tlshash":"86d02e0f7810a2b1066488d8826189a102426b1437906ac0908f1a20a6f0ac5a1bed3e","first_seen":"2026-10-11T12:19:00.968066Z","last_seen":"2026-10-11T12:24:54.274432Z","times_seen":2,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/index-C334O8OE.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.909Z","timestamp":1791721450909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/index-C334O8OE.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: f07a9a5e-a914-409f-b89a-3447d648b3a5\r\ncontent-length: 1324\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1324,"size_decoded":2161,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1323)","md5":"c75311a36ebedc30ef13da8c2d9e3f55","sha1":"208360077a4001b7d60c20d07bd2b0698e3c87ba","sha256":"b1c04fe7afb6c7f839aa84de97101f0f4a49bfa379dd105e9514c3cb5e47c047","sha512":"888c8ed65ee1d4c72c97a83e832e569699faf7d70ef7b5ea10200fcb74ef3d6dbf3ce3afc7334b91ded6f31a2a28ac0fc9a3796de60a1aec9a3b633b6bdbdf52","ssdeep":"","tlshash":"7021f02af520e7bc225fc87db35439a1690c0f8ce266fdd3f1de027616952590f7924a","first_seen":"2026-10-11T12:19:01.17521Z","last_seen":"2026-10-11T12:24:54.275989Z","times_seen":2,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/lock-BeHPqH5I.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.931Z","timestamp":1791721450931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/lock-BeHPqH5I.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 61db9b78-2442-4756-8807-64daf0909089\r\ncontent-length: 203\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203,"size_decoded":1039,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"f7ab0c42774aaa8d7fb087ee976b1918","sha1":"e1395fe6b9b1bd0980029093837833ec2ee7c11c","sha256":"e49cac23674b4a48ab236eeedc05b2068f124dd385affa454022d5ed32c37cd3","sha512":"7134a1e91cd17109f72e15c96bb3c7e3f4d805b86a0197c2aec435b26a1b867bf2af79d67b40ef631071c83d1efb0403635c9c605c912f8d5315bb9024560750","ssdeep":"","tlshash":"e6d0221b492a11b50101804e0b432c16876d823833c34440e24bf63a8b421cba6bab63","first_seen":"2026-10-11T12:19:01.099692Z","last_seen":"2026-10-11T12:24:54.277482Z","times_seen":2,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/loader-circle-v9f5enNb.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.946Z","timestamp":1791721450946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/loader-circle-v9f5enNb.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: ccd15de2-7c25-48fe-9293-4a1c0538b552\r\ncontent-length: 141\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141,"size_decoded":977,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"1e44792b42a50bc728c23a8c1f74715d","sha1":"1cd72f36fa68f3388c5be00c29b23cf8f393569c","sha256":"2d57f8a75c453fd8ab29571365a0fec9c6dfc1dc8e49dff0b8daeb1151c701b2","sha512":"93a99f69b97fe39e0861cf0564bb2fdb9896cf88b86a87dd355081a33e351fc74a47fd9384cec73b924268d2dcc1adb5a7cc118089bb452c7acca91656f3ec70","ssdeep":"","tlshash":"d9c02b1b0e5840f501016b4c02016d001f53051913c105c1b056813dd3c20ebf1bff00","first_seen":"2026-10-11T12:19:01.047391Z","last_seen":"2026-10-11T12:24:54.279238Z","times_seen":2,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/inbox-C33F_3xX.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.949Z","timestamp":1791721450949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/inbox-C33F_3xX.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 01278865-7aa5-4d35-bca1-fd08e9d862ae\r\ncontent-length: 283\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":283,"size_decoded":1119,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"c25614704d4c9b6e65824c925f715aa3","sha1":"b28af2ba470a8c47a8e72e9bb7d4757a24cb612e","sha256":"f32a25dac08bb6ec27e37c3a4b3165170f290ad34c1fb15f12ad2573ee69613d","sha512":"7d04629295da8685f74b939631f3a188d1c6d50c48bc7c250820631712668b3ccad0ee003fda164ec8a9702df7b3143a6b10d0ba0b6be8d4a8022ec5b26efd78","ssdeep":"","tlshash":"57d02b674ec963fe000644c41e77b406539e0638778d0dd2940e62f0e150b83df2fb18","first_seen":"2026-10-11T12:19:01.20971Z","last_seen":"2026-10-11T12:24:54.280104Z","times_seen":2,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useProduct-Wo1McxMY.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.889Z","timestamp":1791721450889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/useProduct-Wo1McxMY.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: cf9efa42-549c-4837-a18b-c7cb2f5bd350\r\ncontent-length: 3970\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3970,"size_decoded":4807,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3969)","md5":"483fa6cd196947ca08edfc8821c73a3c","sha1":"12928df2e5b9dcb3ee0d60a20452f295a825d507","sha256":"1c6275c90af183659308399adcb1df93278f6d77c7453fb521a6ccb95ed39ca3","sha512":"5712986694df4c7b1e354f90a2aba37a8ab5f461b9ca0939ab78c51f75d4a85a3e524952c0849a0a6ace4224c9a0306072dbd9f23969efe49578469792645187","ssdeep":"","tlshash":"e38145c6f8f36072826317a094614d02bfae0e1bb51e55e8e6592d326b27006b1b7d3d","first_seen":"2026-10-11T12:19:01.108413Z","last_seen":"2026-10-11T12:24:54.280906Z","times_seen":2,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/userProfile-PQsPogzz.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.899Z","timestamp":1791721450899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/userProfile-PQsPogzz.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 3d66854f-4be4-42ea-9676-17b3bfd0cf3d\r\ncontent-length: 4912\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4912,"size_decoded":5749,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4761)","md5":"05a82220022169dd469a9bfda9af689a","sha1":"dad799d7db8a48b7e3433e5ecd960c09e29c535c","sha256":"1100f9bab8e7ffba0ac0f43888e9b203a39de9a3d1fba637d844f76d43f85838","sha512":"e694bc150e661900cd1d57f5fcf1805dd6eca550df155eb5230787bd315113da7ca2c93ad9706ed5ed92b5f340df9bda2c6cf3c13238f60703b35d00b6411084","ssdeep":"96:WhdZayGL6UVxtNVQDd35FXLLLRYdbe6zSYTPRzkisoURHLpcL3O+IooIlZRPZ4SB:WXZaHL9/QDd35FlCbOYbRz7mSO+foMrT","tlshash":"83a19762b6aef14857b0dcb1e06cb19e405befe8791e14c1b94c1d0f3237d92b8a584a","first_seen":"2026-10-11T12:19:01.230047Z","last_seen":"2026-10-11T12:24:54.281868Z","times_seen":2,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/uploads/reseller/2026/09/8f9df659-ffad-49dd-bda5-74a7938d436b.png","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.901Z","timestamp":1791721450901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /uploads/reseller/2026/09/8f9df659-ffad-49dd-bda5-74a7938d436b.png HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: image/png\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nlast-modified: Tue, 22 Sep 2026 13:17:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 4377e8b6-3c5b-45f5-8782-c7cee4b6e636\r\ncontent-length: 1478317\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1478317,"size_decoded":1479130,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"f07bcb93c0a196e728d61e28881cc739","sha1":"b88ccecc40183f67c6f753481a7c17e5e2548ae0","sha256":"6c3fe3b6997c7651f855f907388998c25037bc39d8a0332889edbae3ebe962e7","sha512":"ec0dd467f2b1b7b22b53b82afd1235d21c90aeb872585a9a9b287042e9ce73d66b68cc556e07ad4e5724b5222b67017ceb6ea9653eba2f87f1f47ef318f42725","ssdeep":"24576:orEkMXJI7EuYYqYoZy5YBb3yJFG0+t61xCDcqP4xaGXFduNG759Rpov9:IMJIYudY+FG03D+MdDuQRe1","tlshash":"76253388ff6ad6f3c1f29774150b0e9fcc2623a327854259ec6ac5a95438781e7d7e80","first_seen":"2026-10-11T12:19:01.10606Z","last_seen":"2026-10-11T12:24:54.283277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/sku-CXAUOYY5.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.907Z","timestamp":1791721450907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/sku-CXAUOYY5.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: ed283f16-a825-429e-aded-73ac0a74c115\r\ncontent-length: 2097\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2097,"size_decoded":2934,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2096)","md5":"b028bb7ad5ec162966d01b3f75cf86b5","sha1":"edd0850790bd832314e52de230f3fa65a9a14cbb","sha256":"27203fbdec4f715f2e4dff99f1a5c7e872263d47ad6786cb6d4d01aacb05df6c","sha512":"3fbe42a71f07bd50480498f6c4a5970af737d8eb89ff39ea4adcb6460db83d7b1a75cd5f3aaa6912054aadbd98e941f3e8930fa85224b0e99eb170a814d81d2c","ssdeep":"","tlshash":"f941ff91b0cbe02947ba9dd006b44121f52c0a1d708eebc0f1deae76665bd47c137b2e","first_seen":"2026-08-09T04:42:23.850746Z","last_seen":"2026-10-11T12:24:54.28396Z","times_seen":7,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/tag-C01HQ-tp.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.916Z","timestamp":1791721450916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/tag-C01HQ-tp.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 91d9a1b6-40b9-427d-9a72-319e4fcc54d5\r\ncontent-length: 323\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323,"size_decoded":1159,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (322)","md5":"770dffd60c302cd0025f8beb16fcd8be","sha1":"d3df1789bbe9ab9ed246be63b67b95b3a34c61f7","sha256":"a1f068efec6bd1a5e682d4b6070dd86de70cc35b716af14d4441898da6d05896","sha512":"1939bc088bb9530de5236fa24b7b806ea555d2965de629a89c075653206c05a503cde32c4bcf39d1b9d8b043ddab03ae6fbcb1ab6388f55553964f5eae58ddfc","ssdeep":"","tlshash":"11e07d170dcc2bbf05004d8c5b02fc560f9ff1783e544481874e49ab26e00bbe83ba00","first_seen":"2026-10-11T12:19:01.065147Z","last_seen":"2026-10-11T12:24:54.28466Z","times_seen":2,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/pencil-YpsDHJtQ.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.934Z","timestamp":1791721450934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/pencil-YpsDHJtQ.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 2a68776f-4c09-4676-9137-d894578cbdae\r\ncontent-length: 273\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":273,"size_decoded":1109,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"1a02f5a5da90cb5b322c9ffec5a023b1","sha1":"e68aa4630655086211f813c3fa3f668d32ffc7fe","sha256":"eb330111122043f578bda571eec838927df4df17866db82b8d9abaebabd712b3","sha512":"3d8513d861a5abd3e7e39bd686369532fc7a4494bd852be794fe5e9075dbe890efbab7a8eaf2d7052fa1ad883a843d76612c3f3320686cf43433bb56177c8cae","ssdeep":"","tlshash":"6fd02b4b0fac43ed0211e64c0e03b41007ed403c73c788d4dd0e525180620cbc45fb20","first_seen":"2026-10-11T12:19:01.046107Z","last_seen":"2026-10-11T12:24:54.286239Z","times_seen":2,"resource_available":true,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/search-B6xR12Xf.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.951Z","timestamp":1791721450951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/search-B6xR12Xf.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 1ebdc56d-7822-48ff-b113-34d3386fbd5c\r\ncontent-length: 166\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166,"size_decoded":1002,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"38580b593c6441bd5d2bb2c5e4750d8b","sha1":"f0002eb98471d361b7d6b5c341f78b15c3e62098","sha256":"977212260979a7bc4090748da785f257c3b1c65c99516b063971058431a3d9f5","sha512":"fcb96bf0d4035af839a148619b7dc02c75c9ecf92c0a336afdca228566559faae1b109f20ce97edb99108cc732f92b036ef8d776f588115c5a26d6b9a0025983","ssdeep":"","tlshash":"cec08c1b9ca244662940598c164278190ee6422813918a8a8682b53a37d09bb214de82","first_seen":"2026-10-11T12:19:01.143181Z","last_seen":"2026-10-11T12:24:54.288177Z","times_seen":2,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/ProductDetail-DiPiINr6.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:13.509Z","timestamp":1791721453509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/ProductDetail-DiPiINr6.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: aef621f3-04b9-4f6d-8664-ee22eb3eac9b\r\ncontent-length: 22164\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22164,"size_decoded":23002,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (22159)","md5":"31a2c4674162455b611dcf70176d374f","sha1":"4461d0c1b6051f9cae819249a8cf6ebf65afaf07","sha256":"0f602008cd7bb8f8608657a87cd58fae5f36b1b96e30e54ca5e2363005a1c021","sha512":"5a631932dd34249cd480f095dc660b863f3d3ddad8ad99a08319fe790477e534e5384294c934d5eca7418bceeb53d76aaff9c19615fbf23b974629ca1908929b","ssdeep":"384:P2sSMXf32DVwKxaAvYZiOBQLk+JrMZ0JllHDJkxYDzK:PnSmf39/wEQLlMZ0PljJkxYDzK","tlshash":"21a2c885a03189fd704b5130b42495857a9d4ffec281d69bf1fcb86a239fc3d2609bb5","first_seen":"2026-10-11T12:19:01.184925Z","last_seen":"2026-10-11T12:24:54.289845Z","times_seen":2,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/package-open-CMaTPGgi.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.954Z","timestamp":1791721450954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/package-open-CMaTPGgi.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 8c6c5aea-a4a6-4071-88a1-f0321b5a4936\r\ncontent-length: 576\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":576,"size_decoded":1412,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (575)","md5":"e3f1d05dccdaa67969ab3e6cff0778cf","sha1":"4044ad298d3e3471ac92805e057793785df1d8e0","sha256":"5cdb41dab82831fbd6dfaa97dcc5ee12bc5fa362c25eafc470d55791791d1c34","sha512":"979e3cc0d1ac2688cfcd4c01f0ecb60df2eec117cd49beb9426ddc05277529db8ef7770465bcd38e0ae6c0a543c112099a421492333b7bee894a5a92c62dbbf8","ssdeep":"","tlshash":"63f0c26f0e8a493d94139bbc1a63141c0b4f80b83fd68ad0e84de6778a52596d567910","first_seen":"2026-10-11T12:19:01.180796Z","last_seen":"2026-10-11T12:24:54.290769Z","times_seen":2,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/api/v1/analytics/events","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:11.620Z","timestamp":1791721451620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"POST /api/v1/analytics/events HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://spark-one.top/\r\nContent-Length: 252\r\nOrigin: https://spark-one.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":252,"data":"{\"version\":1,\"source\":{\"source\":\"direct\",\"medium\":\"\",\"campaign\":\"\",\"content\":\"\"},\"events\":[{\"id\":\"60233f02-4dfd-4d6d-9b04-7219789aec3e\",\"name\":\"page_view\",\"page\":\"shop\",\"at\":1791721451594,\"view\":\"41f35cab-6ad2-4cb1-a05a-ff77ef1ef8b1\",\"entry\":\"other\"}]}"}},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nset-cookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86; Path=/; Max-Age=7776000; HttpOnly; Secure; SameSite=Lax\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 793e1729-89f5-43a2-b67b-736113cee2ad\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86","quoted":false,"path":"/","max_age":7776000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86; Path=/; Max-Age=7776000; HttpOnly; Secure; SameSite=Lax"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1655,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T15:43:35.306156Z","times_seen":19031085,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/dj.svg","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.776Z","timestamp":1791721450776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /dj.svg HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: image/svg+xml\r\ndate: Sun, 11 Oct 2026 12:24:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: b81a4daa-5e81-476b-9297-0696e5e09141\r\ncontent-length: 374662\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":374662,"size_decoded":375457,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1826ee9ae83bb406b322b90849f2357c","sha1":"a2e864f93e536d97a1b0d1af5bd5a037bbca2053","sha256":"20a516705644c081d1b4ac187cf04a2ba01461223ff5b2744cad8598ad03fca9","sha512":"6681d1b362c283b3f19f63f6ee2263cad3ca93a97e6c0ab8a3ae25d5597e76ac6c94fa30a0f75b024acdc2c0ef718bc5751b1e4e4558ad310657fd2430f073eb","ssdeep":"3072:rzyUwWrc+9kk/ubpLC82PsD67Pz6A2qLS76o:AusDoNLpo","tlshash":"7584d7e4b72440f8de6d43918df65cad1b2f61fb3b028424ce1e6ae14c33a5d959e8c6","first_seen":"2026-05-24T22:26:21.936629Z","last_seen":"2026-10-11T12:24:54.292185Z","times_seen":13,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Products-DXTMEBSg.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:12.852Z","timestamp":1791721452852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Products-DXTMEBSg.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 91a19da5-5e60-4951-8651-f48122c70da3\r\ncontent-length: 5462\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":5462,"size_decoded":6299,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (5461)","md5":"4b64319757eb3c7ccdf33e34b06c0eaf","sha1":"cfc19ae9fb0252deceb9575a8079a4d0044baea9","sha256":"5330957a2caad1d74aee07ed60e624037a9cb7d5242dcb2872d6769fccd1602b","sha512":"edb059cd7689ff22fc854fb5cb66b526dc422724e9709be829a1df07dbb077e2483ade03edeffe0a3381c84e850e772cececd4831a62fb713b34326aadf6d18f","ssdeep":"96:dOn/D/9ikyzMxcxM/SAMTon38xZ68QDZUU8hJ1p2EL7RB0zYpWWc04PS:4FpbSAson38CjNUU8bNZB0z4WWtOS","tlshash":"21b1729af1359ef9a23bc8f1f060c1655a2e63778382c7d4e1ff46242b92c68c90c556","first_seen":"2026-10-11T12:19:00.972096Z","last_seen":"2026-10-11T12:24:54.292873Z","times_seen":2,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useProductDetail-hcUepsJm.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:13.512Z","timestamp":1791721453512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/useProductDetail-hcUepsJm.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 3def45a5-faef-4e27-9d84-d049e32b5a68\r\ncontent-length: 13626\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13626,"size_decoded":14464,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (13625)","md5":"87505788ed54d46b288112174dee3114","sha1":"7c9a6b08e327c2a2f9c44ef37d70be74d91977b5","sha256":"b1b51b0aadd322dc5eca3a2fff17c1f02a5e713d3db78925b049f8357c83f23f","sha512":"49fb63273c85ec9f9b9b259afa65aa7aff150a1dc445a9285931b9cda2fe278b7f591dcfdcb52942aeed478146c00116a975cee930cabc79575126b476c9df60","ssdeep":"384:UnUe2HoxtmgmGTw7P6Nx0PQqy29kBFq0y5:sUe2HoH1SP6NxMkBFq0y5","tlshash":"6752cac2f1f2b0b4c37a53909850c88574ae075650bdc4f9e286661625bbc4be5fbe3e","first_seen":"2026-10-11T12:19:01.050398Z","last_seen":"2026-10-11T12:24:54.293786Z","times_seen":2,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Cart-9Ryh3Nu2.css","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.183Z","timestamp":1791721454183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Cart-9Ryh3Nu2.css HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:14 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 1df290db-e890-4401-a659-cc58cd92a757\r\ncontent-length: 408\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":408,"size_decoded":1237,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (407)","md5":"6756e12c3c5805bac6b62c4dc803b45f","sha1":"f16fb2c1a1aeabb715a5fc2f9b17e91002782a6f","sha256":"e794d9b27b6220eb9deff1d02117bdc59553bcb32706bed56470a246023fb73d","sha512":"bc6007e83f51392c7d038831cc2210ef89b721486fb9adab5b90df30d678673e6e4472e137e0b4602fd3cbd923e5a576d59cb4ed46471a9e06b30df4bfda84ee","ssdeep":"","tlshash":"1ae0a03f1a40477081338e0913c768363205b5b34981486a81906f9db78fe671adac8e","first_seen":"2026-08-09T04:42:23.743952Z","last_seen":"2026-10-11T12:24:54.294661Z","times_seen":4,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Textarea.vue_vue_type_script_setup_true_lang-DvRgl50O.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.863Z","timestamp":1791721454863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Textarea.vue_vue_type_script_setup_true_lang-DvRgl50O.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 7f9d0371-77aa-408a-9d9c-9eb858d05980\r\ncontent-length: 775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":775,"size_decoded":1611,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (774)","md5":"3ca2084505e07a72d9adbdcae61842b8","sha1":"20d30da1c0f3aca8007b58428c4f9bd0a291d0a9","sha256":"ff07bafa37039080bfe7428c57a8b65f8ac8a2c8916b59578e8f525e7b6d5089","sha512":"cc05133cbaf2fd800a6234cad17695bd84e73bc29eadbd299c74f842c47c2b36abd908080645d885783562cbc77c2233a383d238fb1827a2fafe968988b3e75d","ssdeep":"","tlshash":"0701205eb8f4defa005b8a9d718675021b0d3315ffb669b094d7212533e41c0ca0fc06","first_seen":"2026-10-11T12:19:01.130474Z","last_seen":"2026-10-11T12:24:54.295925Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/clipboard-CtQLYUT0.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:15.527Z","timestamp":1791721455527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/clipboard-CtQLYUT0.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: b11395cc-1f50-4ec1-96e1-d0dd471fc6fc\r\ncontent-length: 336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336,"size_decoded":1172,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (335)","md5":"b8e1f6d8947757985c289d29fbc4d4b4","sha1":"2c8b12fd40aed26e951cd46c1cd1ef30305b64ae","sha256":"7f502c74b432601c969abd1d2f25a86c8c57c64164f4370a87823caa555aebf6","sha512":"7e320af66a606eba5339b06786b09bc72e74eeb94f0398d23ffbdc24122ca2952c63b155f6daa898801e752c1598e708c960407b5294f1ed62a66cc6aa33fcce","ssdeep":"","tlshash":"c5e0c62091240330c3a930ef25fcc6c038b1402c35038180e44d2a5a6368fa6822bdb0","first_seen":"2026-08-09T04:42:23.737798Z","last_seen":"2026-10-11T12:24:54.297393Z","times_seen":7,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/api/v1/public/banners?position=home_hero\u0026limit=5","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:11.624Z","timestamp":1791721451624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /api/v1/public/banners?position=home_hero\u0026limit=5 HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nX-Lang: en-US\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: adb91d5b-3261-4939-a33f-8a1f7835ffce\r\ncontent-length: 501\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":501,"size_decoded":1264,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9cae5897c39b2199c91ab65a671948fc","sha1":"938c91480f589947fd0ea44279fe7ee3325623c8","sha256":"8e4b38a592011bc3fee23055e69d8f3eadddc775352bf438df6e6a54b4d31296","sha512":"e860f63a9a56c69d3d177cf0a06f235192a499f56025e209bd82d3b34c579a05563c697885677796b3d40e3dcf5ab7a9bd35cb856e81b45c544e027649945dbe","ssdeep":"","tlshash":"4ff09e1ba5004d75812b0b880fd3f0081874073698c3cf15d674eb4556cdbc7831a532","first_seen":"2026-10-11T12:19:01.023822Z","last_seen":"2026-10-11T12:24:54.298153Z","times_seen":2,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/api/v1/public/products?page=1\u0026page_size=15","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:11.626Z","timestamp":1791721451626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /api/v1/public/products?page=1\u0026page_size=15 HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nX-Lang: en-US\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 45d46362-9bed-4e9d-88fa-5b8999fb4262\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12571,"size_decoded":13313,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b913f1da35fbb2338ce6409679ee410","sha1":"918f294db64264d5f5e889bae20f6220972fa8ff","sha256":"bd8ab4410ad95158ff97924e9ce3cbd898b63550260830f8503674e3cd88e8c1","sha512":"53a8d6ed5afaa4076a61b345e33833f89d0ac2d840d0e19f0fc076db3c6bb90b129c012c6f73899c632d138c4e5b075733c44bcf0bc6eb52b2b601b97fad2c10","ssdeep":"192:SONQg9jcBFxnjsmj6CH4UFxZjr0BNQyF6hn2rDUFxC5jrPdv3mBFxYjsv:SSXIj6COB/zg","tlshash":"a642521841f81cb626bb8250cc39fb0e71ec152d1b5edaa3edf99912df5844e163ed22","first_seen":"2026-10-11T12:19:01.004248Z","last_seen":"2026-10-11T12:24:54.298932Z","times_seen":2,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/api/v1/public/posts?page=1\u0026page_size=3","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:11.627Z","timestamp":1791721451627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /api/v1/public/posts?page=1\u0026page_size=3 HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nX-Lang: en-US\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 712f69df-26d5-41ca-9bba-2f1c60368189\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8241,"size_decoded":8983,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b62c508a622c479001f99bbd86f851f","sha1":"db5a48f292dc2673f2293c9eaf5b6a12ca604b6e","sha256":"0e98e763bcf524b6cd0844f7409bc7e83dcd89d5213f74002b34c50f422a31be","sha512":"1622eb88153acfb20233870f9fcaa27465bd2af4b28589ced98c051fc124a4963583bc13ef652dcb5ae0674049f1bee32906f3e78a3ba28f44e7ff58f6997ca5","ssdeep":"96:gbTCEEJtPnnp8ewcb3RG5Xwmp8ewcb3RG5Xwqp8ewcb3RG5Xwj:gbTCvJtPnnp9p16Amp9p16Aqp9p16Aj","tlshash":"6902ed5882f818db25bfe670ed32e16c38d9b11e272ed0a35ff38682d794d284626715","first_seen":"2026-10-11T12:19:00.985153Z","last_seen":"2026-10-11T12:24:54.299779Z","times_seen":2,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/alerts-LKRx7UNr.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.858Z","timestamp":1791721454858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/alerts-LKRx7UNr.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 8812414e-4b71-4d93-acbf-ca7a6f9f42e5\r\ncontent-length: 172\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172,"size_decoded":1008,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"62d94e486428ee1fd62bb49c4628fb0b","sha1":"1cdd973ed44122bb8b8f45ce506726a926f89599","sha256":"e7fbbcae16b35716d784a330d92f05388eda616471761ea42621827d9c390c19","sha512":"5d097649bac82f9a7e79ebc8511f3bf091e9d97dd5254f2655216d2fedd8c5e533b0a69f29e877308211cf5e774aac4650ed27ceb3f05f72837a9b7a343f5b1b","ssdeep":"","tlshash":"d7c08c4a7ed0c2e2024fb2f16130cd83b0f00b0cd22362d8e00d99b58b122c027fa276","first_seen":"2026-08-09T04:42:23.805386Z","last_seen":"2026-10-11T12:24:54.301254Z","times_seen":7,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/TurnstileCaptcha.vue_vue_type_script_setup_true_lang-Cw5kWbxK.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.860Z","timestamp":1791721454860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/TurnstileCaptcha.vue_vue_type_script_setup_true_lang-Cw5kWbxK.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 98a21e62-1d12-4ac0-b8e4-9263c406eb6e\r\ncontent-length: 3266\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3266,"size_decoded":4103,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3265)","md5":"e28f94f37c50683710f7a167f44e61a4","sha1":"c00d8794aa960094f213407d7f49edc2fce56a7b","sha256":"040402b5de53a762174eb64127de7dfca85577ad666abc733dfbce7039fcfd00","sha512":"1e6623027698de80b3b3b8ebf944e58de1226f6b2044802e08fa3f91695be676a5d3f7497bfd090ed4a6b9db7b4b4b79d3b1fbe329ee03cead16bf20ab8922a1","ssdeep":"","tlshash":"3961949db9f0ddbe3b371595f20fa9e0ba0a530dd42440e2a4ae0a1d2f5ccd1c85666c","first_seen":"2026-10-11T12:19:01.213728Z","last_seen":"2026-10-11T12:24:54.302645Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/guestOrderAuth-DxDOtMev.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.865Z","timestamp":1791721454865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/guestOrderAuth-DxDOtMev.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 1532ae84-1c37-441b-824c-64cb03790c12\r\ncontent-length: 909\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":909,"size_decoded":1745,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (908)","md5":"22e9cb9c38a4d55ab93df4f96fbbaeca","sha1":"5771aeb75b4c938a9f799ca3dcd569a1557c4aa7","sha256":"6cbae03d4a8e40056d22c4d87d1fa69b07ec2d81774ab95db8900d44754e2d8e","sha512":"46578439a5537887782bf370e8003bb9d758bffd468a552d38c051a2d21ddc751f628dcda1446ef37c4e2860555c156a267d22bbd28b3ff9f7709a7b6cba0b7b","ssdeep":"","tlshash":"9511c058794b963105f8c15e22512912e13d1397b55e0450d1ff8e2f3abfe0bc2b16c5","first_seen":"2026-08-09T04:42:23.808067Z","last_seen":"2026-10-11T12:24:54.305135Z","times_seen":3,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/vendor-qrcode-Dk1B7Knz.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:15.534Z","timestamp":1791721455534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/vendor-qrcode-Dk1B7Knz.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 4e170775-d133-4069-b748-8c7622af6155\r\ncontent-length: 25433\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25433,"size_decoded":26271,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8660)","md5":"6ea22a1d76a91bac26ab9b50cf64550f","sha1":"5189327e30951f4485864e56c371531cec6b3aa3","sha256":"2a459b1b4f8c742a49837de1728017b76f4bac7bbadee67c036e2cfc1e974637","sha512":"2827de5a10f1202541f38c25fd8ae96d3b98bb48d9821fa7782ddc8460d5a4729e769d2e75d136d21854490456088849114f66334fa071fefd97df26e7156ded","ssdeep":"768:uVGQpPg9yblhiRJbKT7kavLrf9rIz4E74mtaRnU57HQkApXo8fGNGk:6Tzms89J","tlshash":"c2b2e7e933d2b1aa439365e9007f1809e2fe6c60342d556cea48a4d37d75dba81b2f1c","first_seen":"2026-05-02T17:24:42.711283Z","last_seen":"2026-10-11T12:24:54.307668Z","times_seen":16,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/usePostList-CJjsAPlw.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:16.445Z","timestamp":1791721456445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/usePostList-CJjsAPlw.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 5c51afe3-3dcf-4c5c-8cf1-db26bf3669ee\r\ncontent-length: 1172\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1172,"size_decoded":2009,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1171)","md5":"f203d9d0660bf5841a83085fa84ec86f","sha1":"da1cc84555d6e26c23e000ec2af37ae742a520b7","sha256":"ee29e20bc62af9fbaf077ab03ec9c9a2103cdc0764a7ceb3e95cb58af79767be","sha512":"0262d8e365239e35f962fd3ab7482452025c035c8d36785f55ea1251d5b394f4c51f99f8f41c84cbf3ba8e84b961b6c51e0cfd823371be48d9b8769205e690d8","ssdeep":"","tlshash":"b12163dbf01020f26ba64df580f809584a1071e831e21dc0a58e8a65331bcdfa35f7b8","first_seen":"2026-10-11T12:19:01.189786Z","last_seen":"2026-10-11T12:24:54.308832Z","times_seen":2,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/api/v1/analytics/config","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.495Z","timestamp":1791721450495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /api/v1/analytics/config HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 3d13fcad-a8ca-4ff6-bbd4-05fde81d3acd\r\ncontent-length: 130\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130,"size_decoded":918,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"798fdf9f7833d98f3c212fc93b3c27b8","sha1":"d451512988cea8e38961ad1bc14154c14395bbdf","sha256":"fe7db2d413d72ff101121b509168114ab727508957237cb77fc06a53ea118b4f","sha512":"8239c5e1b373613cd3a1519034ef2f96688387c73e2b5c5fd1eb8b449609339a30622574d7e084e3b335c00b1e834c673f6f24e6093e46c3ca2c405eb04a969a","ssdeep":"","tlshash":"c0c02b230cd808ca0cd9d4c0c007eb0141f5183d59010001c00c5031310a2407267813","first_seen":"2026-10-11T12:19:00.979822Z","last_seen":"2026-10-11T12:24:54.309917Z","times_seen":2,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/api/v1/public/config","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.504Z","timestamp":1791721450504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /api/v1/public/config HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nX-Lang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 51c6a355-b8e3-48cf-84f8-0a28c110dd21\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5640,"size_decoded":6382,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b6905c4fa5c1f5f6835357acc0f7ddb2","sha1":"7956cf51fd84b7ce7fe7e15616de4b75a26b5b25","sha256":"2d802ed04dbedfab9b1306325fd77f12cfe18094ab142a19ca0a2da11ae9d010","sha512":"af9b79d3c62f773b989699d73cc9e681457a2fe1b398c71c26d634f716168b6ff9779ff854e67b310596de2dd15089484d078365af05263ce07d0633a59835e0","ssdeep":"96:X9jOyrVmal1TN1GyZHV2sscXQkQ0ZmxmUbUz898qfhe9jOyrVpzbJ4bxThDCK:JOuf1TN1GA12sscA3hh4z898ckOuHkD/","tlshash":"33c10a1865387df522eb17a0ddf67c0d423e663975cb9b20d1e8a94c63ce34a820fd12","first_seen":"2026-10-11T12:24:54.310894Z","last_seen":"2026-10-11T12:24:54.310894Z","times_seen":1,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Input.vue_vue_type_script_setup_true_lang-BeGOTxuW.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.940Z","timestamp":1791721450940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Input.vue_vue_type_script_setup_true_lang-BeGOTxuW.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 75140742-3516-458e-85a0-1e7f8c74c9b6\r\ncontent-length: 842\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":842,"size_decoded":1678,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (841)","md5":"aeffeb665bce91307b8209e7bef8cc0f","sha1":"eb2821a5ccfc424d6ccc8cbc969ee96aaec66da2","sha256":"c0403bf507b3dbac5d60988f5684af995889ac8853b5645183f74fb2d7123931","sha512":"05fa19d3f63ccfa9c7688c87f1740f721519bceac9b77142b25e015d092d274446092ec5d73b9635cfc389ec60d42294637a0fea783c9e7dc22a161dfb457735","ssdeep":"","tlshash":"c801126e7cf0d6f7446b4e5873c260022b0d1259eab1a9f194eb521133f91e0c60ed09","first_seen":"2026-10-11T12:19:01.231939Z","last_seen":"2026-10-11T12:24:54.312229Z","times_seen":2,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/uploads/reseller/2026/09/86269c0a-1f9a-4df2-b446-a737cfda53ae.png","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:11.616Z","timestamp":1791721451616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /uploads/reseller/2026/09/86269c0a-1f9a-4df2-b446-a737cfda53ae.png HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: image/png\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nlast-modified: Tue, 22 Sep 2026 13:41:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 3f4f7d73-417e-462e-b60f-88ae600c4ade\r\ncontent-length: 1478317\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1478317,"size_decoded":1479130,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"f07bcb93c0a196e728d61e28881cc739","sha1":"b88ccecc40183f67c6f753481a7c17e5e2548ae0","sha256":"6c3fe3b6997c7651f855f907388998c25037bc39d8a0332889edbae3ebe962e7","sha512":"ec0dd467f2b1b7b22b53b82afd1235d21c90aeb872585a9a9b287042e9ce73d66b68cc556e07ad4e5724b5222b67017ceb6ea9653eba2f87f1f47ef318f42725","ssdeep":"24576:orEkMXJI7EuYYqYoZy5YBb3yJFG0+t61xCDcqP4xaGXFduNG759Rpov9:IMJIYudY+FG03D+MdDuQRe1","tlshash":"76253388ff6ad6f3c1f29774150b0e9fcc2623a327854259ec6ac5a95438781e7d7e80","first_seen":"2026-10-11T12:19:01.10606Z","last_seen":"2026-10-11T12:24:54.283277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Cart-Bb6nstN7.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.174Z","timestamp":1791721454174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Cart-Bb6nstN7.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:14 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 017f4bcc-d46b-478d-bd1d-dc61777ef45b\r\ncontent-length: 6390\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6390,"size_decoded":7227,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6385)","md5":"928e9f46b3e3d237030a5bb2546675f2","sha1":"586546815b6edcc26ffda62c0c06515841c99a5c","sha256":"723b8cfe2bc605d266ce7856f422ea7cd3324160377884b3fef7e10fa3a92ea6","sha512":"e6d8d3b22753ddb4ab9b51af6d288e1ec6d2ca99c0a996b0e64cbe5e2a3c717f0f0f21eafe56356486e40e920a46f16a6581089baf52a43ef3edfcd7e45599f2","ssdeep":"96:r/NF3Cx3pI1amkg1fWCIjaIIN/TBXe0RoGNfYrJl+af:rcp4FkuWCUa5rBu0RxNfYrJl+af","tlshash":"73d1c4016014cafcb0935274e570e452b4486affc251c26be7fe9d282716c7acb09b7a","first_seen":"2026-10-11T12:19:01.0272Z","last_seen":"2026-10-11T12:24:54.31404Z","times_seen":2,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/CheckoutSteps.vue_vue_type_script_setup_true_lang-BA2veqte.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.178Z","timestamp":1791721454178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/CheckoutSteps.vue_vue_type_script_setup_true_lang-BA2veqte.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:14 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 6239fc9a-86a7-4483-9ac5-e1d69b796d17\r\ncontent-length: 1623\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1623,"size_decoded":2460,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1622)","md5":"6103ad735cf85e9c4744f879027a2081","sha1":"6a64cd1d259881c4f415a965f539c92c24dcb2c2","sha256":"3e26ac1213e330078bf821674ca29997980d72282a7030c2e9f37c8ccedd5b6a","sha512":"dad4875860cc12aa21fc245edfbef89571dca8926c8fccfd0f59f419f96f024c6559df4b4aff85ea25ab1a1e7d265b59ec400c5afc722c8a28293b30d1351b2d","ssdeep":"","tlshash":"db31980cd216cb3dc263960cf0aa9039aa2a8e40b8620e1ad2fc0c263742517ea9e754","first_seen":"2026-10-11T12:19:00.993122Z","last_seen":"2026-10-11T12:24:54.316424Z","times_seen":2,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/usePayment-h53zivMg.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:15.523Z","timestamp":1791721455523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/usePayment-h53zivMg.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 71bb574e-cd4c-4ef5-aaa8-cc0f3788ca70\r\ncontent-length: 29257\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29257,"size_decoded":30095,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (28775)","md5":"bd257e3e9c5c321f30ef1563547e6a26","sha1":"013b1ae66cdd1a84e3488cd5f8af78050413e712","sha256":"0a95eaa371fbe611154d68a56d2e41ba56b301062d1f49d728ed605edf2ca645","sha512":"a8d41fc71882c1e9adff108ea2290f158872cc9f96fa2067b83a958b531523bffa64c89280776bff2a928d808e8acf76e35f06ff1cfb2456c5bff122f97fde85","ssdeep":"768:o+oZGTQPeQCW+cruDBckadssBcsaVTwqUPOFMz6JXhb6FwbujFiyipHGpCLHq:1QWVazA9K","tlshash":"91d21a80b1eb28b4c3b169d020640661b32daf569055c5e5f2ee4e56127bc73c9faf3d","first_seen":"2026-10-11T12:19:00.978067Z","last_seen":"2026-10-11T12:24:54.317462Z","times_seen":2,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Login-DpMhwu9D.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:17.784Z","timestamp":1791721457784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Login-DpMhwu9D.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: cad719df-6e59-4413-b6fd-22a582cc7a29\r\ncontent-length: 10988\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10988,"size_decoded":11826,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (10987)","md5":"a94a08f30ebf25c1cd56b2da075e07a8","sha1":"8c8a14f1a0f51c2dff329700e20c50e1124ffae1","sha256":"68c2b7922cda7c874fde9698c00e46cf71c898045ea9b443e3a147415cebf809","sha512":"21865679055f70440cd9fcb44f370a727b4739c456eb9f64a9fed3c8b341133a3e1b19f9d124a56c9efdd8fba102d6316458565574ae3e2e8bfc7ed03db7502e","ssdeep":"192:tbMUcwKyv1dHY8rCtbOFNMXe63cnWXRd13FUgzDhhej:tbMUz9o0FNO/VjPCj","tlshash":"eb32a40134984afdf9139578f056a020301edfaed273cb59e6fc1e3a1f8ad881a15787","first_seen":"2026-10-11T12:19:01.15329Z","last_seen":"2026-10-11T12:24:54.3186Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useBannerCarousel-DQK2TKJ5.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.884Z","timestamp":1791721450884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/useBannerCarousel-DQK2TKJ5.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 2eb44798-0828-49eb-8c69-aebfa119fa11\r\ncontent-length: 3200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3200,"size_decoded":4037,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3195)","md5":"2b929231e7daf528b995d06df96f5cf3","sha1":"1e668e9aa20e390a36046f8b32a81a59c53d0ea4","sha256":"39140a63be5ffc43a99df621f77456059a54394a23e3b75b28ae699e29d93164","sha512":"b73982955322e8f4f2b2fecfe48745ca5e011a3da517e408ee3a5d8526ea1b1a0f92063e563ee22d4e2d9234ee2adc4fef57786bcbcd1655cb61d571d9864068","ssdeep":"","tlshash":"0c61d88af9b175b9c3725cd0a4d212a499380b71e63089d160b74c87267ee8381f6f3b","first_seen":"2026-10-11T12:19:01.134713Z","last_seen":"2026-10-11T12:24:54.320678Z","times_seen":2,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/user-VLozCdjf.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.902Z","timestamp":1791721450902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/user-VLozCdjf.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: c2bb010a-2847-4d6e-8f40-5cedbfc2c303\r\ncontent-length: 953\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":953,"size_decoded":1789,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (952)","md5":"8d527add4c30264920e44475dc5518bb","sha1":"e1931d2482edb8bb9231714989cdc1f6aa098476","sha256":"462c188c0512569bb30825272a234f029bdaa08bdf1741ade6ca5adffbefa72b","sha512":"ed035210025894728d6d7293f9f0a736f5873a527479c1bc1d024663581358296d8b591e5692325a5bcf44817e278569cd81d6b8b31f3cbd106ec03b4e5f99d6","ssdeep":"","tlshash":"1911575a778c13aa2143b8f7f362b0159e18e9e4b99ba0f70b34978ac51cd077271d09","first_seen":"2026-10-11T12:19:01.11948Z","last_seen":"2026-10-11T12:24:54.322123Z","times_seen":2,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Products-Q-pA2XTM.css","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:12.855Z","timestamp":1791721452855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Products-Q-pA2XTM.css HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: b1d85b56-83a1-48ba-a1eb-67b6e387f569\r\ncontent-length: 259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":259,"size_decoded":1088,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3cba0caf57b679784deb47d029de55d3","sha1":"f5057db212eae44b1488aeeebd9e6c44a634d8ac","sha256":"991ee4dc88332f9b545ec979c07bd882621fc047b9fa18b60c56c54f5a9cf67e","sha512":"b0697dd55eae771bbf2387df29a6315711aad87cd9478c1290bf4f240d0ce218a31825901feaa7be8532f944df9151f873216206f864d02925f2b94c02e103eb","ssdeep":"","tlshash":"e2d05eab92949b20d013ce055bc9666693b69e73150008b595f15b5c8bdff890a9441a","first_seen":"2026-08-09T04:42:23.820187Z","last_seen":"2026-10-11T12:24:54.323041Z","times_seen":6,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/index-2BALaLQW.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:13.514Z","timestamp":1791721453514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/index-2BALaLQW.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 1fc12ef1-b0ce-437e-9009-c80ad0c79b49\r\ncontent-length: 870\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":870,"size_decoded":1706,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (869)","md5":"9727edb0adeb9a202413cd269f4b9d93","sha1":"fb0630dcf262a055e477e863dfd09119e4383f4a","sha256":"1ce45912331cf6056fed5e11777622b1eb44d7c126d3d15f3bf0b0755ee6d924","sha512":"53aa98b1ef5935c2179a51207131d1de8c452f0420cc5127043770323565d9e5be474abb44bf56599182993d81619d37e100457260c49c988d5aa955625e80bd","ssdeep":"","tlshash":"6311af09fc39dffc52a72459fc68b670382c1a94ab6654c1b4fe12fd1741955513920e","first_seen":"2026-10-11T12:19:01.124907Z","last_seen":"2026-10-11T12:24:54.323795Z","times_seen":2,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/GoogleIdentityButton.vue_vue_type_script_setup_true_lang-EWbC_G0w.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:17.789Z","timestamp":1791721457789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/GoogleIdentityButton.vue_vue_type_script_setup_true_lang-EWbC_G0w.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 59318221-4e8d-4b97-8339-c64000d304b5\r\ncontent-length: 5638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5638,"size_decoded":6475,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5637)","md5":"67e6c4ea3307cc341c8e21d4bef64c9e","sha1":"80f6bcc494c9b15a2adf14d633fced052ba65ec4","sha256":"5ee190ca2e70b284d280ebfbf977324b4ad7eeb5da00f9cd9cfed86aedec4856","sha512":"0062e49832f40c24ab908667bd76b523d4aac317a7d56074d9a0f3ae30684b7202d59af20ce5ca168d7937787c5caf6e6e040de67d0e838764fe7449a142fba0","ssdeep":"96:mvjfqSHYU49xlXIn+y9EmfGx7qWRxk9x3iqshyVlzNJdDWqblGEPzHayY/KXwIAH:mvDbAXlHy3f87RRIyDoVlzaEPrtHXwjv","tlshash":"dbc11843b0d6607726ba02dcb034a001b719470a785eede6f0ea481b1d9f9c691fb7f2","first_seen":"2026-10-11T12:19:01.171204Z","last_seen":"2026-10-11T12:24:54.324631Z","times_seen":2,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/minus-3pW-5avz.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.917Z","timestamp":1791721450917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/minus-3pW-5avz.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 3d4648a7-d59d-40ed-aa3f-ac71f2d86cb3\r\ncontent-length: 114\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114,"size_decoded":950,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"92b0a8d9aec8f3e135e210d9da1e6cff","sha1":"ba03534d66d7a9246179351c84945bbc4b29f4b2","sha256":"b564bf67754649bb517be1b87942ba48e78916409ee507bfd1a706186a408d1d","sha512":"6951ccd4de70854837a24ce41abb08d1888662f025a5408558f9259abee112b178db6c62aee183696015a52a31c67f48e48af6501e6abf04746151a0600ec0ad","ssdeep":"","tlshash":"62b0120f0d4463f717085589178768424eb6086c53a24ec4680f923593714c7c61df05","first_seen":"2026-10-11T12:19:01.141579Z","last_seen":"2026-10-11T12:24:54.325566Z","times_seen":2,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/ProductQuickBuy-D1lYA_YI.css","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.920Z","timestamp":1791721450920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/ProductQuickBuy-D1lYA_YI.css HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: ca92a33b-5192-40a5-b079-59ec5f4fe254\r\ncontent-length: 930\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":930,"size_decoded":1759,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (929)","md5":"d319d73bdf4b9a613d2e8d942cb61dbd","sha1":"6d99c631e49853bc3d45ec9064bbd3ac1430df16","sha256":"ec970d169336a0212cb24645e3efd3411d50a0819fe7ab3bdc68ad5c75d11a11","sha512":"fe39bc2c61175337b491fe5894f112997261ddd8ee00c33f5771358636aead7c72a08431ee5f5e80af9a1e96c8be0ac40ec66e428ac1123ddcab3e44360c5105","ssdeep":"","tlshash":"f2116309aa89004884e38388fdc9df28827ce7e7357258dfb34a44076b632dd2df1596","first_seen":"2026-10-11T12:19:01.195703Z","last_seen":"2026-10-11T12:24:54.326703Z","times_seen":2,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/content-qDtzSI6s.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.924Z","timestamp":1791721450924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/content-qDtzSI6s.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: c127da0f-1151-4a72-b30c-f1592dbf004c\r\ncontent-length: 887\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":887,"size_decoded":1723,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (886)","md5":"4e96e8c85a329e7d15b1462662c75a39","sha1":"758f34f58e4dc40582483b0af778056cd6461f9d","sha256":"bbbe9cdff9482327d2dcaa04aacfa22551d43bdb93ffd377251ff9d4aae06681","sha512":"f4518ea26395e8d50a7eb8360e4f1cad81b4e0d2007236fc83fa1699606f8b97cc6187e3ca0fe761d4b2ba43c2983bf2d0b0bd2fa2ce20f11d7eb6c5ca7a337d","ssdeep":"","tlshash":"c51123bfa159d17497a317e064122624953e0452598485d28e7cec3926385bef13fe4f","first_seen":"2026-10-11T12:19:01.177112Z","last_seen":"2026-10-11T12:24:54.328178Z","times_seen":2,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Notice-DHGB0bjt.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:17.117Z","timestamp":1791721457117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Notice-DHGB0bjt.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 5e15121b-7f62-4137-ab88-4c01ee135c1b\r\ncontent-length: 3391\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3391,"size_decoded":4228,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3390)","md5":"90d2bdee17696c91d959856fba5048c8","sha1":"cc040fbddb2eba0a1d3c35b3f07cc701a56984f3","sha256":"8efb8ab5be88bfa3a91fcfb16247255982bc3e2df2bde9f88fd74ad3c006ff09","sha512":"37d9b44c5595ade88846d225ba7f4a0f9d23a64cadc456a9f20d61354692167673de032abcbbf8b14be26204584d5f6b834e4fbec36d046ae4cf564ec34f2b4b","ssdeep":"","tlshash":"fa61670ae101cefcd6874874f0816065532abffed3e14ba5e2fd89353782469cb69364","first_seen":"2026-10-11T12:19:01.029536Z","last_seen":"2026-10-11T12:24:54.329069Z","times_seen":2,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/useLogin-Dp0yl29O.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:17.788Z","timestamp":1791721457788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/useLogin-Dp0yl29O.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:17 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: bcef93af-3b44-4489-8935-6a6d863f8dd9\r\ncontent-length: 8976\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8976,"size_decoded":9813,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8975)","md5":"29f560042234ea6f08c5f79aab020d1b","sha1":"f2a344996225caaec483b9602ee0f3f1c1ef6292","sha256":"c75d5349e9e2e381c01e7bdf540e604b880248c587ce688d4b9e0987188797e1","sha512":"55deb972e008bb638a7516eac4bdcf7771a24d38878eff12fe659f1770419cb8ad5e154f47afe4db7e3770599672ad8f6552af48fed1cb7bf33b69ad99f9773e","ssdeep":"192:5hVh6lS/WNlMA0ghbJKtEl3WTYmMl5gMyqpo35L4juUbCAdX91O8xd9vpFowV:53h6EAXtWTDM7hyqpo35L4j/bCAdN1v5","tlshash":"4502fa8132c52572efb014ead05082d15606cf247029c5fef97f4b7a696dc42abbb736","first_seen":"2026-10-11T12:19:01.224931Z","last_seen":"2026-10-11T12:24:54.32975Z","times_seen":2,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T12:24:07.293Z","timestamp":1791721447293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:08 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: b6b41500-f0b2-4809-b3df-91750d477f1b\r\ncontent-length: 472\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":472,"size_decoded":1253,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1bf38e0eb2905b3788a5147be03ff0d5","sha1":"1fee0bf0153e58477afcdd5a3aa523846112681d","sha256":"65d50d841ee32005ed3ee1e9d12c42e23afcbd6b82e47efd991169149f45c826","sha512":"3221c4a8bbb77383bf1c5e112769136a32f8c00b5229fc27f6a68c8d0322da926d9e0df1ab3e79124b1102a209787efc2a1244c15ad6475011a1f76604849e30","ssdeep":"","tlshash":"13f09706a800c91a83741b246cc0e98851c7fb0986899e8050f7a07d2cc478aceaf83c","first_seen":"2026-10-11T12:19:01.155848Z","last_seen":"2026-10-11T12:24:54.330496Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1359,"timings":{"blocked":-1,"dns":605,"connect":245,"send":0,"wait":247,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/purify.es-Bf9VIfmD.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.923Z","timestamp":1791721450923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/purify.es-Bf9VIfmD.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 72b858ba-509b-4dea-8d00-d29257a50ba5\r\ncontent-length: 22639\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22639,"size_decoded":23477,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22077)","md5":"b66faf1bfbb355f3a5cd395b03bd4d88","sha1":"16a060e33ef861318e8cddddbc492a6846e19ec7","sha256":"c8490980addf2c6f78aef3c67262717b47432e9ecac179a777dfabbaaa89ea88","sha512":"d06c59863c29e22b2daf97898e7cfa36851ee74de808bf176c1cc9ecf247318a0ccaebe856d23502ecbd00617015f7117bc839c2e4e453b9c3a6ebdb1538e718","ssdeep":"384:/LeAgRvdrRAj87jieMJdh0tC8/sG5DE9MYL9lPsV5+WwjBgMN7oaFU1iecdotrFm:/qAgrrCj8hMJv0tC8/siYuYL9lPsV5+L","tlshash":"44a22c69bd856db65fdb41d8707b5d0c95bc000a740cc460e2ceecb608bae99606bf2f","first_seen":"2026-08-06T00:53:01.699883Z","last_seen":"2026-10-11T12:24:54.332336Z","times_seen":7,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/uploads/product/2026/09/bbb86511-c7da-4ae0-9dca-25fd43d254cb.jpg","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:12.433Z","timestamp":1791721452433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /uploads/product/2026/09/bbb86511-c7da-4ae0-9dca-25fd43d254cb.jpg HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 12:24:12 GMT\r\nlast-modified: Wed, 30 Sep 2026 15:53:43 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 822ef39d-72b6-4174-b2a6-ff07ec6ce3bf\r\ncontent-length: 195537\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195537,"size_decoded":196350,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1448x1086, components 3","md5":"b338b54bd618006837b17f06997d03ca","sha1":"80f49443cb5017287231d4552ae640ce05f174c2","sha256":"7e99c73dadc2fd776506fdf902b88feea8df52f2c4719215b4436b7168f1ec54","sha512":"69c612bc12f4fae0464dc34442f52c316651bd3bd86b3192bd83398af593bb416080d2e8995dc695b2ff1cbd799173b497d3e9f47fb9943cabca409818150c57","ssdeep":"3072:7uaQdkFPRnHi+CasUNx/R/78idfwarzXkkH/RUP6LEQxJodk6pWWdglG/SV71BM:RFPyLsR/78idZXdY64QxK6NWdv2pBM","tlshash":"1e14129fd3870667db2e42fa290c9435b38a66f73265d600dd81ed09f6edc5878d410a","first_seen":"2026-10-11T12:19:01.146226Z","last_seen":"2026-10-11T12:24:54.254275Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/BreadcrumbNav.vue_vue_type_script_setup_true_lang-CPfaLTLv.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:13.513Z","timestamp":1791721453513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/BreadcrumbNav.vue_vue_type_script_setup_true_lang-CPfaLTLv.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 3a0b299b-0ffe-4831-a77d-c6c0a9459e0d\r\ncontent-length: 2013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2013,"size_decoded":2850,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2012)","md5":"43a62222114f84e5d050adbfb626b99d","sha1":"f7d13433d0adfe249f3e564ee799a296c496b2e5","sha256":"6e7f6a7e3dde9d67be4b05519e2be4251220091d5a5dda81a164ed7c2d3b5d5c","sha512":"ec35ba92d059abbc09aae21c91507cf573e035017be586d827b53ee2de6f5fee0dff3c36ab94e6cde706174fb9293c5d7b41a2a562de330188d46f792ba9ba5d","ssdeep":"","tlshash":"044132050249547da237b1189c62a018b10d8fd8e857e6cbc3beae23369e84fd8b56b4","first_seen":"2026-10-11T12:19:01.070978Z","last_seen":"2026-10-11T12:24:54.334758Z","times_seen":2,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/arrow-left-C1fNt3Nn.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:13.516Z","timestamp":1791721453516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/arrow-left-C1fNt3Nn.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 70c29cf8-d4b1-404a-be44-da6abca0251f\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162,"size_decoded":998,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"0d2e9f3028077463dcb68bb8c56d631d","sha1":"865f7dbec882c6c1fc1db44aaf4614d5b21bc0ae","sha256":"8f11fd8eacf7324030858578b4cdb81404bf5e0fd9917c0f6e896f8df287ccd2","sha512":"a0c78156e6ff10b6ef9eeac90c3ba278d51cb05fa799a365d5fca3f76e0e2ed1014227cf2c8adb0a867676de64fa855bf060452424e6bd26012a32308363d370","ssdeep":"","tlshash":"1fc08c4b0cd000f20628b68c4a03a8018ae481fc539be980b042607293a10a70ebcb14","first_seen":"2026-10-11T12:19:01.245675Z","last_seen":"2026-10-11T12:24:54.337809Z","times_seen":2,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Blog-CSx83RdB.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:16.441Z","timestamp":1791721456441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Blog-CSx83RdB.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 5791a56a-ac10-41b4-a523-7a5d0be4226d\r\ncontent-length: 4525\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4525,"size_decoded":5362,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (4524)","md5":"5fad62d44d231e7345cc7ed1f0f5a6ca","sha1":"c426de3eb58f086f22974d59a9a6b9a0b49cb8ef","sha256":"8a86e4b55b140c4c87ca0a3532e2d1c5732e0174648a150f6e7da086df20a5a9","sha512":"26c3cb3d2846f03333e22c427735177193658c02803eab3d98e3bd1112e325244a170452f02b87cd27c3b381ae5b3dfc8d559d654c817d31085cc02a570e461b","ssdeep":"96:E/K+uKM+HnD5L8BUziT7BRcdok12kbz5zETNvF:EfuKNHnDtIUzCBidx9X5YhF","tlshash":"c591b805a140cdf8f1939538b085a024552cffffd2a18b69f3ec953937c18768b5a7a5","first_seen":"2026-10-11T12:19:01.057273Z","last_seen":"2026-10-11T12:24:54.338853Z","times_seen":2,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/resellerSupport-CozpMtgN.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.897Z","timestamp":1791721450897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/resellerSupport-CozpMtgN.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 2dfa69e7-e304-4ee1-819e-d4840e046698\r\ncontent-length: 1175\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1175,"size_decoded":2012,"mime_type":"text/javascript; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"e9b5023692f47b0b2988fec3ed4a5aa0","sha1":"ca9472878d7df4ff6583213c39f54687e7cbd70b","sha256":"338f09c655b4c94d566b1e48e4c4d5008122cf7a81c7060f7a8cfd41cc266cfe","sha512":"d1773572e1c230faef220c75cf83f09638d6fad275a62f1ff0842b0b608cd7a094b8535051d5e68809271450a91a7e943affd1b25a53f7ad6598edfabae3c023","ssdeep":"","tlshash":"3d216380f325e2780b715a68322a180bb2cd21107d7accf1d356959a4f6b99be423f36","first_seen":"2026-10-11T12:19:01.002615Z","last_seen":"2026-10-11T12:24:54.339955Z","times_seen":2,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/usePageSeo-BeBTBfVW.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.927Z","timestamp":1791721450927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/usePageSeo-BeBTBfVW.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 4cda63d2-841e-43b8-a624-c8b71c8b90f4\r\ncontent-length: 2242\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2242,"size_decoded":3079,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2241)","md5":"ee218754e3c315c3865be9a58859e3a3","sha1":"8809fd57bdf296c80e936f4200c39e9137c82e6c","sha256":"38399682bfa7d7c735c822366d4b178265c4d5be1e0a56d6b04dd3a803840de2","sha512":"9aa452e7640d7d2c5a4e3de4ff7c5f8cf4c28814fda5c6a9344a131487f9a0e5a6a167a4599e9c2030e3e73a4e37cbad5d0d2692e40a4f7d2d7c612176391af8","ssdeep":"","tlshash":"9741fd72f70274700bb64a80456264b9d1154f49a034def1d3af1a8b15eed4bc2baf0b","first_seen":"2026-10-11T12:19:01.198921Z","last_seen":"2026-10-11T12:24:54.341005Z","times_seen":2,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/arrow-right-D_nBc0qr.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.935Z","timestamp":1791721450935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/arrow-right-D_nBc0qr.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 8f6ecfdd-a203-42e0-816a-6220dedbf4cd\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162,"size_decoded":998,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"ad2a190b5ca9da722cdc1e9ad5a95463","sha1":"a310a549c2fa587288a76f1049bb399b71ef1f17","sha256":"32eebc81eeca5292a03d020e016c2fc1d9b90d4e011c5f48c45af34e1f36dbaf","sha512":"5b78dbc131426f852626be02452d3419c632220962f320ddf55123fbdff8569e632289d20f4ca7258932ba5e533fce1861e32ec1d9c96115e5310e5ae9a706e2","ssdeep":"","tlshash":"8cc08c4f8dd0a3f28505a2cf4a43691106a906ac539388d0740fa2b6c3514c7096db09","first_seen":"2026-10-11T12:19:01.06786Z","last_seen":"2026-10-11T12:24:54.343131Z","times_seen":2,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/trash-2-C5bouYOA.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.182Z","timestamp":1791721454182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/trash-2-C5bouYOA.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:14 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 78563597-e949-4c80-8f37-1e69e1ef43d6\r\ncontent-length: 325\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325,"size_decoded":1161,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (324)","md5":"c1f562621ab814494fb083d9483d74e4","sha1":"0bff4556308b7076a0fd2d5580bc9c9deb167f30","sha256":"68f4ff51727995bb07aa64b1c6afb4bad5168b8223e314239855a38ec7516150","sha512":"b96782c970b93f388a4430c8e1fc6bbd86375920670c8a7bbd5c2a6db0691aa8b4519a4abdfe754eb3b054170cd37b5453ec473c07c05fb0f3433ed73530e466","ssdeep":"","tlshash":"f1e0bf5f8f8c52a90801d6981d5bf90047eea6bc278a4952b00e617691251969dbbb41","first_seen":"2026-10-11T12:19:01.0551Z","last_seen":"2026-10-11T12:24:54.345481Z","times_seen":2,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/usePayment-B4MWvwTw.css","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:15.536Z","timestamp":1791721455536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/usePayment-B4MWvwTw.css HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 3a3a3fc0-4be9-40ef-8d34-f3285655fb6d\r\ncontent-length: 1588\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1588,"size_decoded":2418,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1587)","md5":"7236785f4493950e297c49ca77a01060","sha1":"04f35882992bb84bdb25886f4d64ccae28944ff9","sha256":"d6315450fbb27373cb5289e6af1109c1bf78a7405c67161ef4fe2c06b755ae12","sha512":"e958476249cd6b084e410e41f91825a133ed0fc9cf014c6ccb03a9daeb58951ebc21c7a2e9ac515810d4aa40986797ae1a915ef275ad8dc4887b12d453dcdbd8","ssdeep":"","tlshash":"71310052b10d243ab43be6926480d2febb8227a39415c5fcdda7a330d88b1b2671d744","first_seen":"2026-10-11T12:19:01.011915Z","last_seen":"2026-10-11T12:24:54.347065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/index-BMRL81p0.css","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:08.920Z","timestamp":1791721448920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/index-BMRL81p0.css HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 8c5f17bb-b9ac-47b4-8e5b-402a69f5e5ff\r\ncontent-length: 164277\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164277,"size_decoded":165109,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"fda47deeb839251d0725ca776d83d751","sha1":"e4e249e295ca9c897626eebc857367dacae9a785","sha256":"ab4f339aca220348900f4d25e8070250a8ebc5206625f7c26796f42ce077f4f2","sha512":"aca1207048ca9561c6ec50e2e85f34294086de60a735f28f0723ee2cf6a8d5311147b8398e993ec4a991effb10e853711642c70a17feb9bcffaab8e99d1c22b3","ssdeep":"3072:Ke+rEeGcZSC0tOS0GF+XvXfc6Fngohznvzg0zD8iuGcl6I8Dz+0aK2fLwNXccw+u:Ke+rEeGcZSC0tOS0GF+XvXfc6Fngohz2","tlshash":"1bf39464e374da3bbc3771bc92ace80c720a71a1dea54bedf921b1015bc3bf61856524","first_seen":"2026-10-11T12:19:00.998405Z","last_seen":"2026-10-11T12:24:54.34801Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":983,"receive":492,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/publicStock-1AQ6tS6i.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.908Z","timestamp":1791721450908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/publicStock-1AQ6tS6i.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: ffa8abd1-a86d-4c09-9b7b-130bc8e61c6b\r\ncontent-length: 1406\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1406,"size_decoded":2243,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1405)","md5":"44e8708da49e31ced810fc8374041110","sha1":"c003ea80fba1b0ca0328add8950aab7406dede11","sha256":"579a5f4b14684d9136e0e0291edd402be7394ec243fe515239ce7ea8004dc998","sha512":"67c8c7557129d8fecdd70800ac999c3144390d3d22baaa3109f96242a2fdc46a92a4dc370a9447bef81a7f31e047ec4ab55f4af43d4925533e965b29d60a4cce","ssdeep":"","tlshash":"1721df4176f262b70b61d3f2505c0d13b0cd4e2bba5f11e4f26948427e2f953f07a91a","first_seen":"2026-08-09T04:42:23.858877Z","last_seen":"2026-10-11T12:24:54.348974Z","times_seen":7,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/plus-C06QSeZl.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.918Z","timestamp":1791721450918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/plus-C06QSeZl.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 8bb41c32-bee3-48ed-8bb3-e4d48b304261\r\ncontent-length: 150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150,"size_decoded":986,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"db30e107548695c298ee8d0870bfb044","sha1":"973f915e6d040d440bdd15deb16e7e0eca837e7d","sha256":"58aeb735988168c4130f8d6467e9a537cffc8fc5264185e08d0d43e6dfb118be","sha512":"41ded323b9dc381932fe4a49aee14f15e596792a9b8d250c951e3aa6e5f0d6a71296ceb6ef28a20cb2aadd9f3b44a539a2758e4ff95062443c2ce40d2d1d1d93","ssdeep":"","tlshash":"71c08c0f0d8443b32505964e055378010aba096c83d248c0e40a8222831088b8e69f07","first_seen":"2026-10-11T12:19:01.162966Z","last_seen":"2026-10-11T12:24:54.349741Z","times_seen":2,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/AnnouncementModal-hNIJB99t.css","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.926Z","timestamp":1791721450926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/AnnouncementModal-hNIJB99t.css HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: bbfcb50e-b26b-447e-ab44-55a33849a2b3\r\ncontent-length: 3552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3552,"size_decoded":4382,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3551)","md5":"46332d089342802a129399f1b22796af","sha1":"5bf832cdb090402a8b8bfaa6566f611970d39109","sha256":"949198914f77db7d963ef79ae7b1ec61816f94adeba37ed8df299f68c1e7d607","sha512":"b4a421c6912e26e70c73c0e803cda4259279a8469bdd9d5a616d65c19c91331005db340ca5a663f3f55e7c1e0b1e66222432cfcd2f040243ca169bc5cc88544c","ssdeep":"","tlshash":"407156e4752935247cbfc04d67c0a44f65a0b32fc116e2dcda7c773648b6c1a39a9247","first_seen":"2026-10-11T12:19:01.208394Z","last_seen":"2026-10-11T12:24:54.35132Z","times_seen":2,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/CategorySidebar.vue_vue_type_script_setup_true_lang-BzgV4JZZ.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.928Z","timestamp":1791721450928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/CategorySidebar.vue_vue_type_script_setup_true_lang-BzgV4JZZ.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: d31db6aa-0747-45be-9206-2ab799218555\r\ncontent-length: 17352\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17352,"size_decoded":18190,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (17350)","md5":"fe916d10c6977135841030de975a0032","sha1":"55d46e475ea626861e94f33dba04c92619052416","sha256":"f18d12e06841def26fbd4934c4c4a8892ffd249bcb56e35a1c3065df0a101bb5","sha512":"33502a0ace8403dbb54ca1320df1e51645662664751ee9bbe078dcda34aff45ec90ce63839e480b403590f0bc69c85e1c24de28df26dda270e7701bcc034f7a9","ssdeep":"384:mGWIsfChpPgAkAzFCfxk5XxK/eUBtzGSZOqp8b+BojNGnhEIzvzX:mGHuCzPgtSsk5hTCHOqp8Fahzvr","tlshash":"30729559f4394abcb15763b85890a484b80c4fadc2d18e96f3fc9c3913868950f6b3dd","first_seen":"2026-10-11T12:19:01.165489Z","last_seen":"2026-10-11T12:24:54.354668Z","times_seen":2,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/qifeng/hero-minimal-20260920.jpg","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:11.927Z","timestamp":1791721451927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /qifeng/hero-minimal-20260920.jpg HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 12:24:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 360c4029-b325-4887-8f8f-a59a32568835\r\ncontent-length: 131180\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131180,"size_decoded":131972,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 2048x768, components 3","md5":"135d7ff2b43751b98e635aa466f136d0","sha1":"8abdc82ebe77771bb6c9fbf5186c36e0873df407","sha256":"5e10f9f5a6f73e9295d4b2b548e58cdced15d5038f1845ed3b918e12f2faa331","sha512":"b8fa24bf9bebe76fe258693799833cf1634d169590086763e19ad591112d1d8befd772ae6209c8eff1a74c766451d26449e904931f01e4e752200467c09aa80d","ssdeep":"3072:L+/50rX0suvw2zsB2kJm+I8zSuP55wAlA8H+RJiqLB+3Z7AS:y/5cUzzUJ9+uh5w+qwJ7AS","tlshash":"28d312cf9684e6672264d0cb872467b801b3b14e81a49bddcda7887645313db2b64c7e","first_seen":"2026-10-11T12:19:01.183019Z","last_seen":"2026-10-11T12:24:54.355641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/cartStock-DQDo-LHR.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:14.181Z","timestamp":1791721454181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/cartStock-DQDo-LHR.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:14 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 79c088e1-80a8-413d-8499-739ed7023c64\r\ncontent-length: 2684\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2684,"size_decoded":3521,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2683)","md5":"26965012d4960ce162c2ae450f57b412","sha1":"2c7f80e7811c9772ea30c43dc92eef35230a40a4","sha256":"eae6750d3ef1e61197e381f6555915620d52ac850989ebbfce61e42e6c2d24e0","sha512":"a3e8692e5af366f44b09cc0d5f35e4c6cef5fce62b9f16046815488e553050f72494e1872926d062d63cf93df96b12a34f7780bd9bd602176338231606115b58","ssdeep":"","tlshash":"9a519681b1f1a47256b006e090681e16f1bc4c77312fc1d6f12f1ca91d2f447b9bae2d","first_seen":"2026-10-11T12:19:01.168093Z","last_seen":"2026-10-11T12:24:54.356735Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/Payment-Byuip_EU.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:15.521Z","timestamp":1791721455521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/Payment-Byuip_EU.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 602c8d53-a56d-480e-aa79-74cc91b62395\r\ncontent-length: 23982\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23982,"size_decoded":24820,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (23946)","md5":"f2a9ea142798dc891dd70231c838de58","sha1":"b8b06847a2b07398cdc4585f644ae7d025383c31","sha256":"52fea92b245399c2cd00df3e1ad2dbd18986bbe87684dfc83a9882163c5d4c04","sha512":"f83094f7edde2d42060121e75a6cd5faefa8688d90bb3ea7628a655d2b5fb188e411e2c7144eebf150638085c5bb4c9ed1f2eb8f7782d879f48baab0c07046ab","ssdeep":"192:iBJdChOIX/35KxoQirDLvuDnVsWWN+fgTXApG3WfDbCQQ/EZ2gicltHa51gffypl:iBJKO4IxS/zuDnV5SR2fSjE/H4s9jOT","tlshash":"29b2519474018ebdf06b5538b55c7a597208bffac102c21bf3ed8e291382c725e9eb65","first_seen":"2026-10-11T12:19:01.214938Z","last_seen":"2026-10-11T12:24:54.357562Z","times_seen":2,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/ProductQuickBuy-hKjc-9IX.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.893Z","timestamp":1791721450893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/ProductQuickBuy-hKjc-9IX.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 79586ac7-733c-4264-9563-dce50a625806\r\ncontent-length: 24542\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24542,"size_decoded":25380,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (24541)","md5":"e4b2ba08beb9e3a3d21df3abf188e271","sha1":"44ac9923b1a43b4e33dcbf5a794f99c4766d2e1c","sha256":"50d1f787a188ab54863605417d21e32d7a1bb5d05459542584a26070f5ef8573","sha512":"8974c28bbd81f8242dafbb0bf2c80460120eb3b3ad94d71f774bec1bbd7effa9ff64bc1607d85805ebf9fae09ddce1f44d682e9276f550ecc7e0c00d12d072c7","ssdeep":"384:wmGBCXCNXPJGCfrxFChY9d///9GP0NBIhKUw0NwugLWmx23KWluyAhqUdcM55jAI:wxBCXCNXPJGCfrehs380yQUw0NwZWmxD","tlshash":"87b21984f072157b93b345b4601088d2b99e0ffdd0ea84d7e1bf6951329bc025bbab6d","first_seen":"2026-10-11T12:19:01.021819Z","last_seen":"2026-10-11T12:24:54.358433Z","times_seen":2,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/ProductSupportLink.vue_vue_type_script_setup_true_lang-BJpn_EZ5.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.896Z","timestamp":1791721450896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/ProductSupportLink.vue_vue_type_script_setup_true_lang-BJpn_EZ5.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 03f6aaa3-8fa8-4e34-b57d-fd2a469e3fa5\r\ncontent-length: 1020\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1020,"size_decoded":1857,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1019)","md5":"c4c2b6fc95fd12b02706cc54766db0ea","sha1":"49465e2d0a25230a83d61388fe51dd121d307b2f","sha256":"41509fcf6141a8b7a7de993dfea1b67b59963822df3711d1f8bdb1ddc8cc86cf","sha512":"9eb94001701ef4716a82b04b0496129cdf1652a37030185f76817ef20e746c8cb69fbcc49df7c271978553f16ac2562e1fdb99bef4465d6c6bce2ce04a715733","ssdeep":"","tlshash":"b51168cff4327a7a0163046071142462ff2d5268b5e5c5d1a0bf174932610d5df2f419","first_seen":"2026-10-11T12:19:01.138021Z","last_seen":"2026-10-11T12:24:54.359465Z","times_seen":2,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/image-DIyfNFiU.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.912Z","timestamp":1791721450912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/image-DIyfNFiU.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 8dff720a-652c-4822-a16c-41f66567d113\r\ncontent-length: 266\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266,"size_decoded":1102,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"6ec355f1ebaf05afae1e0fadc99e0428","sha1":"290fc4b89e2a441479fd45b1e98382845be43a0c","sha256":"cf23629848448eb7acb7e371a72f1207c0489507981c62f5b8b947bf1879592d","sha512":"f4eaebfff00f34025578ab2767ae44d44f8c51089590f50136b6b42bc38bf9f22da00ad685fe551d785029388fcbe35f22630105eeabe8707729ad89b61df468","ssdeep":"","tlshash":"e8d02e0a8a0b1ea6008140c82a9788432bac0bb83381c001d10be63a63408e36a2aa23","first_seen":"2026-10-11T12:19:00.983393Z","last_seen":"2026-10-11T12:24:54.360282Z","times_seen":2,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/user-plus-ChvxEA71.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.930Z","timestamp":1791721450930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/user-plus-ChvxEA71.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: d2879b91-27f4-46bd-a3fe-d3a803223901\r\ncontent-length: 307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307,"size_decoded":1143,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (306)","md5":"2eebb66103d85b47e98d13b202bbb156","sha1":"24a4f93cb9845c8fb8cb611f8a42ceb5f578b6d9","sha256":"be20a55ebd4493c1641898405a732402526d4404e20004abd43843ee01e77421","sha512":"fe2ad8e605d274a12231edabb933cc943d1221954d9f514be1d83a4ec745d1e5da30f566ee5467edc9ed9ff1ee27bcc6cc83bf6af1e9e0be23b5fae323f357c1","ssdeep":"","tlshash":"c9e0c22f898b02ba0128d2cc2f8354440abe07ba73864093f487daa577610638a2df63","first_seen":"2026-10-11T12:19:01.096816Z","last_seen":"2026-10-11T12:24:54.361004Z","times_seen":2,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/EmptyState.vue_vue_type_script_setup_true_lang-CBQioOV9.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.947Z","timestamp":1791721450947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/EmptyState.vue_vue_type_script_setup_true_lang-CBQioOV9.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 72befc26-8b2c-4f2c-b0d2-6e4976c86b74\r\ncontent-length: 2219\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2219,"size_decoded":3056,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2218)","md5":"87bc15fb09efe25172da586faee8df56","sha1":"aa2b43c5846e3d1bed32e888d5886cb003ea863d","sha256":"a1f581f0320f53d18ea96328c4d5c4ac46168c48700548948b398e4641318799","sha512":"3ac491e70d6b417cdcacef4be824322f95f714b542f8228500447754c48381f3f9828425cf32f90bb101093436704f55dd01114112add04ec1544bfaef9d34d4","ssdeep":"","tlshash":"6641974ab842f67cf18b0014d485584212384f6cf67566dde0ea0ba81b735f28a5f756","first_seen":"2026-10-11T12:19:01.241719Z","last_seen":"2026-10-11T12:24:54.361929Z","times_seen":2,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/api/v1/analytics/events","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:13.569Z","timestamp":1791721453569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"POST /api/v1/analytics/events HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://spark-one.top/\r\nContent-Length: 1123\r\nOrigin: https://spark-one.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"POST","post_data":{"size":1123,"data":"{\"version\":1,\"source\":{\"source\":\"direct\",\"medium\":\"\",\"campaign\":\"\",\"content\":\"\"},\"events\":[{\"id\":\"4ac266ff-c154-4903-94a7-5d2084e50b2d\",\"name\":\"product_impression\",\"page\":\"shop\",\"at\":1791721453063,\"view\":\"41f35cab-6ad2-4cb1-a05a-ff77ef1ef8b1\",\"entry\":\"product\",\"product_id\":1,\"stock\":\"available\"},{\"id\":\"694186eb-12bb-4b05-a43a-2d0326c8aa8e\",\"name\":\"product_impression\",\"page\":\"shop\",\"at\":1791721453063,\"view\":\"41f35cab-6ad2-4cb1-a05a-ff77ef1ef8b1\",\"entry\":\"product\",\"product_id\":4,\"stock\":\"available\"},{\"id\":\"d44e4e3f-29f6-402a-a9fa-a0f5881e1fd7\",\"name\":\"product_impression\",\"page\":\"shop\",\"at\":1791721453063,\"view\":\"41f35cab-6ad2-4cb1-a05a-ff77ef1ef8b1\",\"entry\":\"product\",\"product_id\":2,\"stock\":\"sold_out\"},{\"id\":\"64222c8a-21da-4899-9a83-9a6d071fe767\",\"name\":\"product_impression\",\"page\":\"shop\",\"at\":1791721453063,\"view\":\"41f35cab-6ad2-4cb1-a05a-ff77ef1ef8b1\",\"entry\":\"product\",\"product_id\":12,\"stock\":\"available\"},{\"id\":\"13788264-671d-4cdd-8313-c98bbde91176\",\"name\":\"product_impression\",\"page\":\"shop\",\"at\":1791721453063,\"view\":\"41f35cab-6ad2-4cb1-a05a-ff77ef1ef8b1\",\"entry\":\"product\",\"product_id\":13,\"stock\":\"available\"}]}"}},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ndate: Sun, 11 Oct 2026 12:24:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: bba37a7a-bae8-4ac5-b362-b8f8056f5ad5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":2466,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T15:43:35.306156Z","times_seen":19031085,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/fulfillment-Dejrlbu4.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:15.530Z","timestamp":1791721455530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/fulfillment-Dejrlbu4.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: qf_analytics=cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"qf_analytics","value":"cf1e8330-5e1a-43ea-add6-d6fb97ab5bff.1791721451.f7909346fa12a28ba6c697c4433ddac6e118072e7c773f5a01a98f3ace9ddd86"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: c3548062-c381-4063-9dd4-6586e0ba18a8\r\ncontent-length: 336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336,"size_decoded":1172,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (335)","md5":"7355f811e7051ba34ab50e58acaba526","sha1":"36683bed31241661eebb2b3fea588ff9ba41b152","sha256":"9152360f2b2058b26a3a1c2cd311899c4685bac090425a1fecf59418070a67cc","sha512":"f43d113c5ebb8209b66f0d3a389c892730dc1d125412e312f172985507151d22f32adfa739a85c39c82cbcdcd09c7a2aeb253cf89b91597d95c684d0e0b8ee43","ssdeep":"","tlshash":"4de026edf4c58162d948c0bad0ec8134182d1e1f302c08cae39ba8c29b2136eca21d2a","first_seen":"2026-07-01T21:01:43.664353Z","last_seen":"2026-10-11T12:24:54.363674Z","times_seen":8,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/index-D5iKIM_e.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:08.916Z","timestamp":1791721448916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/index-D5iKIM_e.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 4c6ffb6e-94e0-491f-80e5-33df69ae8063\r\ncontent-length: 334063\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":334063,"size_decoded":334902,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (56020)","md5":"408f7292af18a50553c008dd4859e75a","sha1":"1e8be41f04541aa2e2f130c4a2993428dee621f4","sha256":"8921a630d09015c31f26734db09f0095a247d4a2fc34aad6fda5650356d3a989","sha512":"3d6f0c7d97464e60e70bc905cf9b75ef9e99be8156ce2b23fe9282b554bee6a342fd8a86becda03d9029456b3ac7527cc0754fcea8d3d56edddd815f3329d305","ssdeep":"6144:UeZJavpaVY4az5uX63yV6ecsGcKJwGVxd1:ZZOaVY4atd3y0eNGcKJwGzf","tlshash":"6b64ea962e5d1d7802b647e59f7ed21260ac8560708fc3e0e37eca6537758247ee2b2c","first_seen":"2026-10-11T12:19:01.192561Z","last_seen":"2026-10-11T12:24:54.365922Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":1233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/debounce-CZGZjV6W.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.894Z","timestamp":1791721450894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/debounce-CZGZjV6W.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 681e973c-ebff-4144-abd8-68803d30eac2\r\ncontent-length: 432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432,"size_decoded":1268,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (431)","md5":"caa88c69fc6852cf5975d1a33e9ccea7","sha1":"610fd747bcd5df3f59bfe4db1f117218c2ee445c","sha256":"7c202af48d2a44545b71ae50a42de2eb08626e4a8e5e6ea75380802da20a6928","sha512":"5e7dec00d68840bb3265ef18d0cea2982a1b248799365535273d16914f1fb6908486a94e97d00311c1168351c163370795eb41e9e05f6f0f9b9653c9a008f6d1","ssdeep":"","tlshash":"f4e0ab42572cf07b03a05cae827e8327f512051b384ca6e83a36af5331077823dc0e68","first_seen":"2026-05-02T17:24:42.703111Z","last_seen":"2026-10-11T12:24:54.366946Z","times_seen":23,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spark-one.top/assets/order-CPPTkpY5.js","fqdn":"spark-one.top","domain":"spark-one.top","tld":"top"},"ip":{"addr":"43.160.218.4","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spark-one.top/","date":"2026-10-11T12:24:10.906Z","timestamp":1791721450906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spark-one.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:06:23 GMT","end":"Mon, 21 Dec 2026 11:06:22 GMT"},"fingerprint":{"sha1":"09:39:CE:47:04:96:3C:13:E6:89:2C:C2:05:EE:E8:8E:0D:C7:3E:BC","sha256":"7E:7F:59:0B:46:DA:FE:77:05:FD:6F:18:FB:6C:D6:60:E1:34:3D:6B:4D:9E:99:42:73:92:8D:E8:35:8F:3E:5F"}}},"request":{"raw":"GET /assets/order-CPPTkpY5.js HTTP/1.1\r\nHost: spark-one.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://spark-one.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, Authorization, Cache-Control, X-Requested-With, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy-report-only: default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 12:24:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-request-id: 173d3842-6102-4b6e-88b3-0631f1567a9b\r\ncontent-length: 2189\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2189,"size_decoded":3026,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2071)","md5":"63f79857d059c2304b7f4fcd816af1c7","sha1":"27c09a1e1b732c0f606118c593e8f1cddc04a4ea","sha256":"a33866be2df8e3929474ba8958fc870317e13bb3d8e222d9c44d11dff7d9354a","sha512":"28b94e88f890be3cfae90da50ccd0c427eda3769bbaed36dd76d084666cae1e1537729d1b0b84b1e53f1f67fe04241ff174a941421a916a3cdfb3ec9e36b8bcc","ssdeep":"","tlshash":"5d41ad5eb008f7140fd799e646bb581cc498d7827c9e4669df253388ea28d17e232f29","first_seen":"2026-10-11T12:19:01.194174Z","last_seen":"2026-10-11T12:24:54.367695Z","times_seen":2,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"spark-one.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}