{"report_id":"fff5ce95-7722-4876-9e3e-9c95f71a72f1","version":0,"status":"done","tags":[],"date":"2026-10-13T15:46:53Z","url":{"schema":"http","addr":"otbtaw.cn/","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.71","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"otbtaw.cn/#/index","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"title":"Mercado Libre","dom":{"size":66409,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42388)","md5":"b759aba29439da424f5d1d553184208c","sha1":"ede6c21787b0f8abfb6a3404595e91d84328f298","sha256":"a85795333dc86b882d087216e0c45466e40c6a6e5210fe2eda0686cf0e79a2b2","sha512":"507e519c80922082a024f80aa8be4dd1345652b700ad72389fbf26702c976782ceac5dc33b9c24258d3de16744903a72e0054674b40bfc8bd15380a15ff337c3","ssdeep":"768:nMf8gRLaQ7lKiX7+3/TgWK3fokK9GvFKSXu0z47dNXMNO06XSnOTYM/nXtfWsTzG:nOa2KYWpkK9yM/XtfWsFZDhxQGI3N","tlshash":"875385b2c566256f02278fc1b4716b5fb2d3831ede63890057fc87de9bdacd49a04886","dom_hash":"domhashb5fc7d0a1b441f0df7c896b5d6732488","first_seen":"2026-10-13T15:47:08.670217Z","last_seen":"2026-10-13T15:47:08.670217Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"otbtaw.cn/","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.71","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T15:46:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"imgtest1.s3.amazonaws.com","ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2019-08-25T08:51:32Z","last_seen":"2026-10-08T12:23:20.22382Z","alert_count":0,"request_count":22,"received_data":1497995,"sent_data":12328,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"zjtd.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.164","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-10-13T13:18:13.338208Z","last_seen":"2026-10-13T13:18:13.338208Z","alert_count":0,"request_count":6,"received_data":675319,"sent_data":3556,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"mall-test.s3.amazonaws.com","ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2024-08-11T22:28:16Z","last_seen":"2026-10-08T12:23:20.397047Z","alert_count":0,"request_count":15,"received_data":1530938,"sent_data":8423,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"otbtaw.cn","ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2026-04-12","domain_rank":0,"first_seen":"2026-10-13T13:18:13.335188Z","last_seen":"2026-10-13T13:18:13.335188Z","alert_count":315,"request_count":63,"received_data":5109164,"sent_data":30284,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"caishizai-tk-mall.s3.amazonaws.com","ip":{"addr":"3.5.149.161","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2026-06-22T22:15:54.268162Z","last_seen":"2026-10-13T13:18:14.080942Z","alert_count":0,"request_count":3,"received_data":3204480,"sent_data":1707,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"otbtaw.cn/js/vendors~app.28d1b24c.js","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e10f0598b24cf142472dea5603231351","sha1":"aa1bc8dec3a20360d732a872d46e259cd3bba2ce","sha256":"b784c606681d6325351556f5b6da43e05d70992fec41228663c9e63e0bc0c030","sha512":"23c0d52e2d55be84cf6e6538b2fe475bac09bbd39151e714d74371b3502cd2384038646ed1da12276ef708f656cdad283f50b85d41ce1b1169db8fb9912f3f72","ssdeep":"49152:DvPl2oryhyoTeQ4rWiU3dZ4FE/VuvhbzXVQ/QdX:FryhyZQ41U3mE/VuvhnFQ4dX","tlshash":"b7d5705c365bf340965ac0e7e43b3c45d2aee589a40b10d06f7187f31ab1706e7aee26","size":2773940,"data":"","first_seen":"2026-10-13T13:18:30.372583Z","last_seen":"2026-10-13T15:47:08.780118Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/js/app.ea6ce5bb.js","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c1b5997a6edcabf588468bbb984f849","sha1":"878b38318ef6326c4bf094861ccb03b320ef4754","sha256":"0a3e2935a907387211e246c45ed68869795322323ecbdbdf53c93d1cbb1af387","sha512":"9252bf98e4e7750fdc65a7eccb2318a380ce436317951671dd541eadcd94983a7c16550fca1b9f69dcce85f3f95fda83e1458457c210c859e3db9649e6d90876","ssdeep":"24576:KLYdgE5rAmBN7Nrz6VI3/kzoaYeRNnyye/5sYewGfkHmqusBbrI44Rl5IbA3LxS2:KLYdgE5rAmBN7NP6VI3/9aYABlebrG8I","tlshash":"93558ede67e673f808984653a04f397922dc1cb5fb96f4e008fdd61922e9d85c213b29","size":1283468,"data":"","first_seen":"2026-10-13T13:18:30.374307Z","last_seen":"2026-10-13T15:47:08.781827Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/js/chunk-0eea1634.5692eb4a.js","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8cfb88795ce79310770a080f1024aeb","sha1":"9a0ce16403dd3795459046f8d392ba5792c8f7f6","sha256":"eaf6944b64050554a62b91b1aeee79c8c06b9808be643959c211d3c48066473b","sha512":"dc1e3bc0ac39a3b4688b600f61c4e689363074bdcfbd14f6fb6556fd3622ac6cafbc8df36fdcc7b0e19445f3682bf31a77660fccc4ea2687a3b8d0a8ffe19495","ssdeep":"192:ThTEIRxPHVhVxhV7csELBtq+d8jejXp7As9alubm6/+yhjlyNbWDzxlvGIo4MOzU:XPW1fdXlAs9ae/Z5ly1EzxpGIoMmT","tlshash":"c152b8d6c2b1a4fd4469c2a26016d5a0fbb43a2ce001558ef76cf89a36dd474332e7bd","size":14509,"data":"","first_seen":"2026-10-13T13:18:30.320008Z","last_seen":"2026-10-13T15:47:08.732453Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/js/chunk-c180cb20.9424473c.js","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc1180f185d310c21066a2ec9f859848","sha1":"6709599b780587ef11f001ad1173a8f0b542c9fb","sha256":"9937e3928b3152ba6db89b92165ed0882489697af76d87999d5dbf4666d63bcf","sha512":"315f80858274b2c73ec4be438b6187e73c7b3302d3dd1e5b88467e13219eaae97b6a2004853f11a46675ebf766b3c4d1a0b455fb7981715bd915fc0525004593","ssdeep":"384:PkqsXsgHCXkowLGMnhuhJElATqyB2V5LN/kTylpY8mHq8uMI7:VRXQGMhuhXP2V5LN/3AHq8uMI7","tlshash":"a4a2c84ba493a87c5967b1c634172259b0363f81e401c8e6b57cdce5d2e5968332fb6c","size":22422,"data":"","first_seen":"2026-10-13T13:18:30.321525Z","last_seen":"2026-10-13T15:47:08.75761Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"ES_LANGUAGE_MAP -\u003emap[actor:server1.conn0.watcher17.process7//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:21 preview:map[kind:Object ownProperties:map[af:map[configurable:true enumerable:true value:af writable:true] de:map[configurable:true enumerable:true value:de writable:true] el:map[configurable:true enumerable:true value:el writable:true] en:map[configurable:true enumerable:true value:en writable:true] ja:map[configurable:true enumerable:true value:ja writable:true] ms:map[configurable:true enumerable:true value:ms writable:true] pt:map[configurable:true enumerable:true value:pt writable:true] th:map[configurable:true enumerable:true value:th writable:true] zhCN:map[configurable:true enumerable:true value:zh-CN writable:true] zhTW:map[configurable:true enumerable:true value:zh-TW writable:true]] ownPropertiesLength:21] sealed:false type:object]","filename":"https://otbtaw.cn/js/app.ea6ce5bb.js","line_number":1,"column_number":900934},{"level":"log","text":"currentRouter -\u003emap[actor:server1.conn0.watcher17.process7//obj22 class:Object extensible:false frozen:true isError:false ownPropertyLength:8 preview:map[kind:Object ownProperties:map[fullPath:map[configurable:false enumerable:true value:/ writable:false] hash:map[configurable:false enumerable:true value: writable:false] matched:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj26 class:Array extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:ArrayLike length:0] sealed:false type:object] writable:false] meta:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj23 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:false] name:map[configurable:false enumerable:true value:map[type:null] writable:false] params:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:false] path:map[configurable:false enumerable:true value:/ writable:false] query:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj24 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:false]] ownPropertiesLength:8] sealed:true type:object]","filename":"https://otbtaw.cn/js/app.ea6ce5bb.js","line_number":1,"column_number":598475},{"level":"log","text":"this.historyData -\u003emap[actor:server1.conn0.watcher17.process7//obj31 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[items:[] kind:ArrayLike length:0] sealed:false type:object]","filename":"https://otbtaw.cn/js/app.ea6ce5bb.js","line_number":1,"column_number":613820}]},"http":[{"url":{"schema":"https","addr":"otbtaw.cn/img/th.64409d02.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.404Z","timestamp":1791906368404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/th.64409d02.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546659\r\ncontent-type: image/png\r\ncontent-length: 953\r\naccept-ranges: bytes\r\netag: W/\"953-1791058362220\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":953,"size_decoded":1187,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"64409d025268e2322a3363736b2a08d0","sha1":"02c9f3e91a54336000ddbdbacf508594ed8e9e22","sha256":"e692416629e8f393040fae5a031503070796dcd4ac4c505864b72cb9a5ecc958","sha512":"9c47a7525b590e8d1fab1e60137909e21c0a0812c292b70faf919e6dbbbed633d40c0a4ea83b0c2d09cf5f898fd9fe2d4f4b91808b572409db36fd482e88ac65","ssdeep":"","tlshash":"e211c8c62bae01bacf7680fd7297b535c42a049b75d20144a422d92ad020caa0339fcb","first_seen":"2025-03-07T17:58:59.797458Z","last_seen":"2026-10-13T15:47:08.674011Z","times_seen":51,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/1.73c6108e.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.429Z","timestamp":1791906368429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/1.73c6108e.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546661\r\ncontent-type: image/png\r\ncontent-length: 1156\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1128-1791058362227\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1128,"size_decoded":1439,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"73c6108e513b22313790ae20e4420b32","sha1":"9afd1493772cf936d9ef0df066ce8c8e00c0e640","sha256":"d690ac12339b75eba6e5c92d94027d90d7bc4eb7b0383989804710277bd0a1f2","sha512":"40fd994fc068d40f224b3783ae37140f79e9d50baf4629cda3ec9c8739e587ffedfb610c90a0bcf1ea9f0a83f73058ac3c444e45cc2a840577eac6953ea19f71","ssdeep":"","tlshash":"bd21f96b36a1e51edc98480d1b3141addf11c0b3699e51fdcb6a6326d39b48c54cc4ea","first_seen":"2025-03-28T23:30:12.881028Z","last_seen":"2026-10-13T15:47:08.675869Z","times_seen":13,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caishizai-tk-mall.s3.amazonaws.com/type/2026-06-02/50c22d97-9b12-4c5a-ad1b-af2d0890a1ce.png","fqdn":"caishizai-tk-mall.s3.amazonaws.com","domain":"caishizai-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.161","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.021Z","timestamp":1791906369021,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /type/2026-06-02/50c22d97-9b12-4c5a-ad1b-af2d0890a1ce.png HTTP/1.1\r\nHost: caishizai-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: QCST9VYSVKVTTKR8\r\nx-amz-id-2: UHtnZM3KD4JGFFbNRMeHgqx7v1blWSRU0gqSdEEmb77YOEy86wlnulaOuT/gono3D0eZ5m+RZBSBK0GNOJzxmKCcQQ5fk8IW\r\nContent-Length: 616244\r\nAccept-Ranges: bytes\r\nDate: Tue, 13 Oct 2026 15:46:09 GMT\r\nServer: AmazonS3\r\nLast-Modified: Mon, 01 Jun 2026 17:04:07 GMT\r\nETag: \"d3691afa5322874c67e3acd9d86f82ce\"\r\nx-amz-meta-myval: test\r\nContent-Type: application/octet-stream\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":616244,"size_decoded":616700,"mime_type":"image/png","magic":"PNG image data, 1192 x 671, 8-bit/color RGB, non-interlaced","md5":"d3691afa5322874c67e3acd9d86f82ce","sha1":"1e509d90332a9534dcb2814ff102898b23a05c36","sha256":"24ea509d73cc4fd3641b213dd5d4c7c4d1dc6c4f673fad579755644d1a9b690f","sha512":"9e7aacab1a8a2b8bf75b2cb8b00718d5b7ce8c8677c66a5e1c9c257c5024b8a6f01d0d53746b9f2d6c8c7da6ecb29d0f7d2f36a0a31d08a2f7e69d7664292605","ssdeep":"12288:i/OLOeGL6mrGwl1c2wgQaf1J62VSzQDhMsT59L8XJ+Z1vn06RG:rOgnoLwgQatJ6waq/L6+Z1vn06RG","tlshash":"45d423fdcf4973b5695b9acdc1b6e000ba365964fb70d7a50e8242710b2e169acc0f4b","first_seen":"2026-06-29T00:53:10.668508Z","last_seen":"2026-10-13T15:47:08.676971Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1665,"timings":{"blocked":-1,"dns":7,"connect":182,"send":0,"wait":203,"receive":907,"ssl":366},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.040Z","timestamp":1791906369040,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5v71EcopXqmdS6brxR6n2xuGbijT3DbwEetWXwRH+Ok9CNKg3sIYahOpIt517lBnA+gZrS8Zx8I=\r\nx-amz-request-id: EEKCJ7G906B2CBFX\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:15 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"e1d0a17b2eb5865bccc7dff6330f6562\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 147078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":147078,"size_decoded":147475,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"e1d0a17b2eb5865bccc7dff6330f6562","sha1":"c956ae8ac7dc2720241d709e92d963ce814550bb","sha256":"9d0495f4e08deab21e64eb8cbe00de00a937aba37d3ff7a3714f30e551f978e0","sha512":"a6c80898e0109f3b6887861ca36e8bcbad9e7091a24eb9d49e55051ebeacbff242ecf0b192cf45d318948b90d660b97dc520cf870d5d651af386a4cec7553456","ssdeep":"3072:0bomG8J7r42I27eo7oPi6T3gKWN4+ogF1Ejq76Cui8MuXK/vDJMKC:0brr425eo6WUgRuC98M7DJMKC","tlshash":"f4e322ddc9c8a380c8003df5fd1699599a347ea34db476461f637adc7b19648ae1bc0c","first_seen":"2024-02-11T04:26:45Z","last_seen":"2026-10-13T15:47:08.677967Z","times_seen":9454,"resource_available":false,"data":null}},"time_used":6305,"timings":{"blocked":-1,"dns":2,"connect":92,"send":0,"wait":120,"receive":1098,"ssl":4991},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/right8.52dfdd77.jpeg","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.280Z","timestamp":1791906369280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/right8.52dfdd77.jpeg HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546991\r\ncontent-type: image/jpeg\r\ncontent-length: 5275\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"5437-1791058362225\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5437,"size_decoded":5559,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"52dfdd77a3e609a3dfcdc62551f63915","sha1":"76f99920e705e7f2ea7aa14eda783b3b0be7a2d0","sha256":"2694904c51b4dfa120b1c8cbfca437ba901b107a6b901fc34799fc9d9da1a947","sha512":"0893ae02f3cd92485b211852ccee98714ddd9202a2d0c7fe556ccba6e598729161ccea477c324156b336a996a81a6312a42b7f26ae77b1962b763af0cf5cc28f","ssdeep":"96:WwDk9e67O7qkhkxrzmq3VT4E3sHsov69WGPqLQ62sqdqub5mm2fB/+DY:Vk917CGXov4JqLx2sqAOifB/UY","tlshash":"bdb17d287fce870cfdd28a71862ff379a1825e43260d278b50f5282cb5891dd8d154e1","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-10-13T15:47:08.679191Z","times_seen":1968,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zjtd.oss-accelerate.aliyuncs.com/upload/merchant-upload/selle/2026-08-19/32efbf46-c955-4842-882a-dbf30d9a0de5.jpg","fqdn":"zjtd.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.164","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.662Z","timestamp":1791906370662,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 20 Sep 2026 05:42:02 GMT","end":"Wed, 07 Apr 2027 02:26:24 GMT"},"fingerprint":{"sha1":"FA:C5:36:F3:4D:B8:AD:0F:8A:B1:F7:7D:B6:5B:A3:F5:2C:B2:96:1E","sha256":"8C:A5:7E:E0:95:9C:A8:DA:01:66:7F:8A:C2:FA:78:26:4D:D9:C3:43:F1:B3:3E:D0:1F:FD:24:00:10:92:3E:F1"}}},"request":{"raw":"GET /upload/merchant-upload/selle/2026-08-19/32efbf46-c955-4842-882a-dbf30d9a0de5.jpg HTTP/1.1\r\nHost: zjtd.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 51063\r\nConnection: keep-alive\r\nx-oss-request-id: 6ACE52438331852FA11895F4\r\nAccept-Ranges: bytes\r\nETag: \"B448D9185DFF50812B6505C5FF4244EC\"\r\nLast-Modified: Wed, 19 Aug 2026 09:27:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2036897715998024927\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000111\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: tEjZGF3/UIErZQXF/0JE7A==\r\nx-oss-server-time: 3\r\nServer: AliyunOSS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":51063,"size_decoded":51613,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 760x760, components 3","md5":"b448d9185dff50812b6505c5ff4244ec","sha1":"c156a98c0b6c0b165b25f85b3bed031f76fca590","sha256":"b4092703b6a0eb8db21e15f1b21f7047f4487d42bbe8b6c1c86c096d3bfc1566","sha512":"60150b60104c8dfcb867db168aa594c70301146fd4cd1918155792da426fe23f0773020489995232e4a0dfd10fc061007ac1991739a20fbdd0447cf9454bd3ee","ssdeep":"1536:tSNWtW68JylnIOCrW9F0bSEW+ZtrAAwTKVHkd:wN2W680BCHb7W+ZmTKde","tlshash":"1e3302c3a26ed9ebd5ce07b643151cac8f2578781dc8b72d8892c1d4703b2e55bac94e","first_seen":"2026-10-13T13:18:30.315688Z","last_seen":"2026-10-13T15:47:08.680285Z","times_seen":3,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":129,"connect":21,"send":0,"wait":181,"receive":150,"ssl":313},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/445c45cc-a9b2-4753-8903-eb823436e494.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:11.220Z","timestamp":1791906371220,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/445c45cc-a9b2-4753-8903-eb823436e494.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Z1j+n+TdM9d0WZk7/ZiUfhhnABFG9ygjF1+Ps5ki72ciVDpBhafGuoh64z2BXYQ3O3p14GRi6H0rBh8chz6/ZOuP5SCUyheg\r\nx-amz-request-id: NVKRQ1N270VPQ5BW\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:12 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:54 GMT\r\nETag: \"07f95e174804bff3d97c5b13f915cf7d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 157447\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":157447,"size_decoded":157865,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1261x1459, components 3","md5":"07f95e174804bff3d97c5b13f915cf7d","sha1":"fd90a34dd34b37bf7d1c3f62c563c35d2ac8b82a","sha256":"872dcd22912f0f77f949b0642a505d3955f616d070da19c652f4312243eee5c4","sha512":"33010f75dbb816564d931260fb29a588407a9367f82140ccc3bfc33472a049cc8015a5a955832192affe139118dae18a3d5d2a4395227feb2cb0223b7dbc705d","ssdeep":"3072:UUwHcs93dkA8nkSsanKc4hUm1wyHhJ0qmz2WBJBrDymn8hKB1HoT:hs9tkXbsanKJOqCq85D58MB1IT","tlshash":"a0f312537850ac65dd7a4332a3266918bcc0e364dcbdc988417b9d4b87a811b6dbfbcc","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-10-13T15:47:08.681286Z","times_seen":2494,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/20a7dcb0-4ecb-43d4-bfe4-e7b16a8d6d70.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:11.226Z","timestamp":1791906371226,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/20a7dcb0-4ecb-43d4-bfe4-e7b16a8d6d70.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ODtPzdUJFTXAAq3nKdlkG09lIzQeKXM6Y49c+TztCaLYSk1OwS9IUCb2NJC6Mkb5swpBSTPMEgBzJjq3OgOWawBRiu5h1UfP\r\nx-amz-request-id: NVKTQQEZNW069EKB\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:12 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:36 GMT\r\nETag: \"0cb226a4c24b62a8027c524333a66d1a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 9972\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9972,"size_decoded":10388,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x1500, components 3","md5":"0cb226a4c24b62a8027c524333a66d1a","sha1":"bcd930afabd37e41dbff70ff18d3164036810ea3","sha256":"cae70bc988ba3c3472e4161ca54422d0e54923f5b26ee7e7e34716c90c97c2aa","sha512":"0182b799ed0ad9230c5713f54e77dec912e6873d55c491d41e30db98575b93ece455e58effcf4b52a2f1e5ec5638fa27ac16d8319119f1aa3ff0f1fce499789f","ssdeep":"192:1I49RvIJWdElnZFHjjtCcYjtGDCRxXEZJHMcf:1IKRvAZFDj0cOt4CR9EZJf","tlshash":"3f221ae391d3585f9838efdb9b5886e7d82ac355df6a3102204b030677e9f50ce3945a","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-10-13T15:47:08.683149Z","times_seen":2548,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":102,"send":0,"wait":128,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T15:46:04.233Z","timestamp":1791906364233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:05 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"5472-1791058362241\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=604800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5472,"size_decoded":1623,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5472), with no line terminators","md5":"be6c6d9fa97da2d57a4c192b57bbcd07","sha1":"347b8b1912e1eda2f0a84deb4180e4e1f5e3933e","sha256":"23950d56639ee078e3bf0fa35f7a3e5f790363268200427e7739e86e78c5b41a","sha512":"1048faa53c47b1fc341374801e8265834af074961378a471cf4d176ba5f7c9a036c4488eb88b3662e2aa8890082d246b419edeadabdc7d245a91443817c6637b","ssdeep":"48:/rkLPGrVrvMSCgpEGyc+dy90Ra2RwG+nW05a6rjoD72kxrneyHU67G1A8Ho:/I0VrvMSCgebT+nP5aooX2k557UI","tlshash":"00b154b9da10608fa9f0ce879e28f76be9cb8d7b1430e440d154c84fd868fc4166b893","first_seen":"2026-10-13T13:18:30.195633Z","last_seen":"2026-10-13T15:47:08.683836Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1208,"timings":{"blocked":-1,"dns":295,"connect":224,"send":0,"wait":230,"receive":0,"ssl":458},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/css/chunk-c180cb20.f040119e.css","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:07.940Z","timestamp":1791906367940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /css/chunk-c180cb20.f040119e.css HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546654\r\ncontent-type: text/css\r\ncontent-length: 2512\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"11397-1791058362241\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11397,"size_decoded":2795,"mime_type":"text/css","magic":"ASCII text, with very long lines (11397), with no line terminators","md5":"199542140f4e4cdbd425acca887f6737","sha1":"173c3b64d68e451e6f49fb8d3f0c5dfe497e6d94","sha256":"18a0d0cfa0f5f43094f271eb76672c352a323d19914f0334eacdc61be41869de","sha512":"f8120da1746bbf2df8f6c5c0d6d670053ea8afc63b8abe682e12a3aed59164a0213d76f0bbcc48c9e1ccdd44d4ef7000299521f4cb88d1a0abd66b683b657cab","ssdeep":"192:I/fIX1gkV0vzX5rw/C0SNXZ5WSWXWOWPjd7+ZGzunJzCI:841gkV0vD5rw/CVFZ5WSWXWOWPj3I","tlshash":"a33231f271646239b6f7966a3590d4ce7082e623c55346bdb99eb61ccccb2e3227134c","first_seen":"2026-10-13T13:18:30.365094Z","last_seen":"2026-10-13T15:47:08.685105Z","times_seen":3,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/en.c94e629b.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.379Z","timestamp":1791906368379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/en.c94e629b.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546656\r\ncontent-type: image/png\r\ncontent-length: 2947\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"2919-1791058362227\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2919,"size_decoded":3230,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"c94e629b5776f77a380525a3b421f7e0","sha1":"1c741075dc99946128b193d3d3648ee03c9da309","sha256":"0294dbd7710b997e47063482a14160bd3d869cc7ae4dbe27fff68efb1a464db9","sha512":"96f10751337adf0dc3075e09bac116726664932b86c8252fd265a356840dd3c7f0b2fa9ad2eaec584ea85d5fb895bf06f7d2f30a71bb5f925941f7ce44f4e05f","ssdeep":"","tlshash":"50511c4eca48d0bdd5cd988caca5e0305b7f96a95214fcaacd2144f3de4414d315479f","first_seen":"2024-10-06T09:49:17.013891Z","last_seen":"2026-10-13T15:47:08.685708Z","times_seen":30,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/wap/api/banner!bannerList.action","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.425Z","timestamp":1791906368425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 46\r\nOrigin: https://otbtaw.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":46,"data":"pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=cn"}},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:08 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: no-store, private\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":946,"size_decoded":689,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f856cd9ba10bc234b569e3e84197cde8","sha1":"11d56d4bb96476bef2961dfcffc81d5bc533ba57","sha256":"2ba302473d4ddd762a3686f9a5fd2815b91403ac97f2388536087ab5e7a6ed19","sha512":"07c1a2c35eb9bd4012a5a447cd82c89eb1b4fb23a17b76624f3735dfd00b5c423ea25f0815453b6b5ac3539cb2377e56d1c69f103b21c7683390170505296735","ssdeep":"","tlshash":"0d11e10a1b88d0a81d44bb80d8ddfc88d0ac370bacb58a42e98bdd480a15f34243e352","first_seen":"2026-06-29T00:53:10.741261Z","last_seen":"2026-10-13T15:47:08.687178Z","times_seen":7,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/wap/api/category!recommend.action","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.435Z","timestamp":1791906368435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"POST /wap/api/category!recommend.action HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 29\r\nOrigin: https://otbtaw.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":29,"data":"pageSize=50\u0026pageNum=1\u0026lang=cn"}},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:08 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store, private\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5999,"size_decoded":2880,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"34e46d3a794b6975af4a1b755ddb6056","sha1":"61ac16f7b77e12c092cf986588b2b76000092911","sha256":"1d4b71db04de05814d2df5d31750e06e82b99327bc637d6d52e2b3bfc003f492","sha512":"b338cd303e7ab3f38c35100e1a523cf27beb7109a09b357372e3d39cf992dbccf368eb02018930ffdbc61a1347cf21a0cc137b88dd002c4db857f828c98feed3","ssdeep":"96:5VUkxWIx8ZsvJpkXNT0WRwlhVTa845gm6htm/9hbRt7ywrBG6L8XH8cbhRBem2Bw:5VUizx8ZsvJpkXJ0WRwzVTf6gNh4/rze","tlshash":"59c176ee6ff47dad07589af2008a368f90a4f13f5fe30dc528eccd5448e8ba21965150","first_seen":"2026-10-13T13:18:30.301524Z","last_seen":"2026-10-13T15:47:08.689372Z","times_seen":3,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/wap/api/sellerGoods!recommend_new.action","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.437Z","timestamp":1791906368437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 36\r\nOrigin: https://otbtaw.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":36,"data":"type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=cn"}},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:08 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: no-store, private\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60,"size_decoded":405,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3b77b14f776f26c59c0e314f27b4fb64","sha1":"81490ee275f4ab3a82908e70e4a960dc0872b520","sha256":"008c33157609ef2b16deff42ce81138f35d036d0b52c1790637006f5a6b8df22","sha512":"1b998a823881085a498fd37c50a6c50bd4389df1e845410d8d01d3dc1c4f191938e6d9c75c5be98c0db7d2c81aac4fc2ebad73cb76649b6a003bc9290367e0e7","ssdeep":"","tlshash":"b9a002843c192c4a140ba645b54c374145ac21672699d7345d5c563c919f16a3905960","first_seen":"2026-10-13T13:18:30.212212Z","last_seen":"2026-10-13T15:47:08.690896Z","times_seen":3,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.052Z","timestamp":1791906369052,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: v7H/kKeviKmMsx9dM/JEOJyfuc/4QW1f9RHfpIpr9eAPufcoYhMb9U0qmXWI5jSfPj4JJEiBuXs=\r\nx-amz-request-id: EZZK3RWJYKFX0BZ2\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:16 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"a7d470fbe103fb9a6784c6e3bd450ccc\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":96012,"size_decoded":96409,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 500x500, components 3","md5":"a7d470fbe103fb9a6784c6e3bd450ccc","sha1":"cef53fa7fec6b069bc298b96adc02886d48a2bd6","sha256":"4529834992120ae959682d5dfc40e76a46db199fdbe4b20fd77e5d1ce92accd0","sha512":"e429d8efffecef5f79cbdab092f84a5054126fb33ee4b22d8e50861cba8d10edc49b41b5d0b8d02d997428b0f661816cca586b58f15d10cab9629375de8ff737","ssdeep":"1536:Kvlkpltm3DoZ3IUr1vvliVOHylrocmmIqeWJ6BHlCJsSEBT+qScNiHoDqlSBvP:Kvl2tm3DotIUrxtiVaylroc0dPHQJlsZ","tlshash":"1f93f19fdd0acc318b46e0ea7a85c1a364b9c25354d0f97f5739d8b6c09c7b99802cc9","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-10-13T15:47:08.691782Z","times_seen":9692,"resource_available":false,"data":null}},"time_used":7289,"timings":{"blocked":6656,"dns":0,"connect":0,"send":0,"wait":116,"receive":517,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.053Z","timestamp":1791906369053,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dO+UMc30V7pA9ZNQmf5l9eOmLSQxvQ8fmODH/u77XLiqugNFEYNSv51lrjaougRhAtcq87eOxMM=\r\nx-amz-request-id: EZZZC3PFBDCXJCQQ\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:16 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"8d6323e7fdd7e06d404af122b2c85f3f\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 22652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":22652,"size_decoded":23049,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"8d6323e7fdd7e06d404af122b2c85f3f","sha1":"a5d01f7b4ad71db23c48fa3f117f7cfcc444e189","sha256":"8e2b0eddf8d540aaa3b2076eefe4ba494c7acabed1f15431bafffe5bd3513f72","sha512":"6fc93fb49c82210ca205c6d6dd0831f9016eb24e3a5fbd5072106d5f2b44adb98d39c7df922da930f53d2cbfc28176810e7f2692011d556155f4785c8b314c19","ssdeep":"384:g1oAebo8+5LM5Y3W9rtPwKbJO5Uq6/ECRgQPifCiN:g1o39+dMmKrtPwUqSyQPmCq","tlshash":"eea2be61f8803733c585636c4cbea112585584f288f9e8aba674cee9f2d4c879c49ce6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-10-13T15:47:08.693112Z","times_seen":9911,"resource_available":false,"data":null}},"time_used":7046,"timings":{"blocked":6829,"dns":0,"connect":0,"send":0,"wait":118,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/tw.4fc7cf76.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.397Z","timestamp":1791906368397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/tw.4fc7cf76.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546658\r\ncontent-type: image/png\r\ncontent-length: 1291\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1263-1791058362225\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1263,"size_decoded":1574,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"4fc7cf76c9162262aac32a44cd184626","sha1":"19c3eabca2236ee194dff02d1cd61979ea937923","sha256":"ba8f3fffceafdfceb95433505b6fa3a27d8fa333c86444e2cfdc0be75a6c12d3","sha512":"4ab4e15151b87b980897133f5f2a2957ae7020fafe88a227a853e0b122d560eab88e45230207f7f5895dda0d3294aa438be80e4379006494f5323f0872fe6aba","ssdeep":"","tlshash":"ce21ea4de11e2719189746f981fd034197055d2fe53a89610501152a0113b9b31deb6f","first_seen":"2025-05-28T12:12:11.643952Z","last_seen":"2026-10-13T15:47:08.693829Z","times_seen":10,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/wap/api/sellerGoods!recommend_new.action","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.442Z","timestamp":1791906368442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 36\r\nOrigin: https://otbtaw.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":36,"data":"type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=cn"}},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:08 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store, private\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14642,"size_decoded":5983,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bddd38cc3ef5760016150c047fd13917","sha1":"d292be9f58f93976237d1faef28c976e299dd715","sha256":"b476e79345bb8df2905a5b0f170a54509c089dafa0409a14c6183c6ed03f006d","sha512":"78aa462b861cc7bd491bc79e70f01e78a87d2f267f6adcec18e9cb4ad410a7b4d6023b2070287072eb9c0a440f504a6192893fc4a359841f747fae65e63bfa07","ssdeep":"192:fnqITSPT9Q95WK1QKBTMCwfgbmTiqmHfyr4g/ETdDRRTx1aG:fnqdPT9QWsBwwqmH6/8d1b","tlshash":"f562e8e6cafa09690f4c02b25857365ea0bec25f5db34f668a7cdf1449bc8793740819","first_seen":"2026-10-13T15:46:25.098927Z","last_seen":"2026-10-13T15:47:08.694609Z","times_seen":2,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/wap/api/seller!list.action","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.444Z","timestamp":1791906368444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"POST /wap/api/seller!list.action HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 37\r\nOrigin: https://otbtaw.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"pageNum=1\u0026pageSize=12\u0026isRec=1\u0026lang=cn"}},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:10 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store, private\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20750,"size_decoded":5095,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (19384), with no line terminators","md5":"871fb5681062b20557893c9b9fc27806","sha1":"111c69af05e6a4d57c4566dab669e8fb72b59a98","sha256":"e4bea6222590f4c706124105a7e8c7107e699e3a1e0e769bc858a880334eb7f0","sha512":"895f0a990d3f4d18dcb2828f013f33a41b7a0330c0e202c237100e0af59545316cb0ed0a653d311b37e8ef1c6d3754a8b74fcfdac80e2390eb603a694587af76","ssdeep":"192:5jiG38UsmAhfIHA0StDy3Qmr+cU9xaopUPvEDPhO4BhsIrmKtCxSTIxhtQuN5i7h:5jAUFZanmraxIt4BbBtahh5czN","tlshash":"6692845056a87e725ba90f826d437f46c6ae208f9c06ce74d6cccf180afc6b9571f960","first_seen":"2026-10-13T13:18:30.27311Z","last_seen":"2026-10-13T15:47:08.697292Z","times_seen":3,"resource_available":true,"data":null}},"time_used":2167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.036Z","timestamp":1791906369036,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: yLOIlp74KgHos82HhQUKmOGRGHIS3Z/XIoffqLwsZq7mMDfFdT2Im/MBjew4/4IQp45d7ko1gOE=\r\nx-amz-request-id: EEKEVTAV8FBPJE87\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:15 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"ad3bb72e6cf979df37c56cc70e70710c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 46207\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":46207,"size_decoded":46604,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"ad3bb72e6cf979df37c56cc70e70710c","sha1":"f0bff01c9d923ad55250ef7de41afae41cbe3f90","sha256":"50294b071e29cc9e8afdac176dd2fbc62f4c36265d5f494d96a7ab2908c1a643","sha512":"1fc3e1b07a86c34fb8c9720f8ff8c2a584cfb6dfe7b4e34d53f2f0555e558fe95f5a62bad4a6874a64e081cddae0defe530870d76dcf1551ca45ee570b582ce8","ssdeep":"768:GOSu2YQp+gujkfsasYaYtu/tgiE/c1tcDkV2FynHs5d4RX3S6cqUrolLoDzT6S51:GOt2YQVujkfTJaYg/wU1SYSJ4JcrsLo/","tlshash":"4f23e09b86804fdbf03acbc53f272d985b41fa0944d0b4fbd1e986af1f65622285c48c","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-10-13T15:47:08.698051Z","times_seen":9958,"resource_available":false,"data":null}},"time_used":6173,"timings":{"blocked":-1,"dns":6,"connect":91,"send":0,"wait":119,"receive":457,"ssl":5498},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.050Z","timestamp":1791906369050,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: pQVr2el2x8pM6LUt0sknX+F9gMbOvykANDHCQ2lOizpvv//A4d3o2VLbZKB7Vkb+P4gEV1lvViY=\r\nx-amz-request-id: EZZK7GEP8Q38SVED\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:16 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"dbb5460537325e381060d6a696bdabba\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 66319\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":66319,"size_decoded":66716,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"dbb5460537325e381060d6a696bdabba","sha1":"852c6ea174a0fcdd7e7351b5bc5c1ddc309d87a1","sha256":"3ff029feb7f2d1b0a7bffa8d5060030474f569524abd014585f373a17fc09695","sha512":"404f949ebbad69f94ae8b173c2c1d8807599df69c51675e3b0e06bc0953f94f95a51914abd77bf684dc3c5ff42249defe6152bf148f4aa8c1515fb8d29879374","ssdeep":"1536:Gi+tPxNX6ucnz4Zw7vPYpNuirA5gmQGo1CISuKbKNiI:F+tHKucnz4Zw7vPYxUpPHIS7KNh","tlshash":"cc53d0a31a450fd35629e3e67f0799284fc65b8d94e039ee11d358e37ba13b3680e11e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-10-13T15:47:08.698753Z","times_seen":9979,"resource_available":false,"data":null}},"time_used":6931,"timings":{"blocked":6590,"dns":0,"connect":0,"send":0,"wait":117,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/banner_01.ad0364fc.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.070Z","timestamp":1791906369070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/banner_01.ad0364fc.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2547000\r\ncontent-type: image/png\r\ncontent-length: 84798\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"84769-1791058362226\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84769,"size_decoded":85083,"mime_type":"image/png","magic":"PNG image data, 1200 x 352, 8-bit colormap, non-interlaced","md5":"ad0364fcce3be4744a03491594618893","sha1":"53af5fc779bad27dded7bd0fdbcf8e1311bedfa6","sha256":"c7e3261548b2edb52aa4a2cc4b54ac23070a13206152e57572bd5b93cacc1c1a","sha512":"cd1e76b3ce0829237d212891650caf80f20b24330e5ba58674b0550eec6ad42f42eac9e328c453c007aaa9deb6209949ca5f5c2d45960c1965545b3eaf415867","ssdeep":"1536:bHkJp0iR8hwwi8qjG6dwlX9oJF58qAkGTD8MrjDbdUtzRzwtPtkzz0w0W8stcM/l:DkJuO3npjXWNoJFuqPGvNXizo2bYEQQt","tlshash":"748302a0bb4cf54aa07a1053722c69160e5b01febcfbed7c06152af55ce7eb369c1609","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-10-13T15:47:08.699646Z","times_seen":2085,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-22/0fee4b69-98bf-4dd0-b2e9-a3eef7d8c9e2.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.684Z","timestamp":1791906370684,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-03-22/0fee4b69-98bf-4dd0-b2e9-a3eef7d8c9e2.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0lUpjUklvaX3VlBTEG8LoAB0UO9wSXYZSF7nOQS+djwNAIFYI78FqFbo1wONo0rnfHoLQpky/t5FvlOZe3ZKw/GpiFL/dwiw\r\nx-amz-request-id: 3KFXPWK7039B81BS\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"2f880abf39197c23624ec02a97da066e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 6873\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6873,"size_decoded":7327,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 291x173, components 3","md5":"2f880abf39197c23624ec02a97da066e","sha1":"b25a02eeabb058144d354446b3d997210eb7ea14","sha256":"f937788f543bacca3b6d8e11e19123d8a727a46aa05b5bdcb0edd346d02ebc7b","sha512":"2f37634b59d4e1e2124b4c182b2bd349a72149ef956d584e7f6c8f23fd95481b02051f6ceaa8823e6db9641b55aa364eade03d1e14d0ebc259efd4b4600ed277","ssdeep":"192:bpSOyDwhDh0ht/pyBYnSu5HtAUGLW5pe9KIyoQk76AXRtL25V4:wFDwRAiOSMNP+WmIIfQ5C","tlshash":"36e19e13b51ba152ce247b78d7a362f213fcfa2b3d717621f9d06f5069f399aa911004","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-10-13T15:47:08.700455Z","times_seen":2030,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-15/e784c612-43a1-4248-92ca-68f8c7771479.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.705Z","timestamp":1791906370705,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-03-15/e784c612-43a1-4248-92ca-68f8c7771479.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: x8R6knUAg+pbH/yTvgxK1fRSYk/mkxX3CoHFbZRBI8hQt11StHxf5TFJ96l4PsWBcAijLaMg0uB3vQdQmno1udWf5TWOnWb7\r\nx-amz-request-id: 3KFMCP90T9JFNE27\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"4fefd642d0ba649e2638d79aba1f06a9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 125293\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":125293,"size_decoded":125749,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x1440, components 3","md5":"4fefd642d0ba649e2638d79aba1f06a9","sha1":"2804f3147c498add7926958e9fb5c6561df5c4af","sha256":"57f57a5716871604f452cfbbd9ccc5dddf928412ebd6c445cb85e3b79ff559e6","sha512":"2823160b04b81bfd3fd1c0984df0f804503ed8f26358a213b577013e17efaacdcd25079fb1671d37bfd55989e912ef69eb7b0268025cdf7be8cbaa2e9edd1aa3","ssdeep":"1536:Zle+qHAVjJGKWgL1u/BDsRc6EKkibdjbhL54OKzQSJaB7jvyvolZKAztq4CWw21u:ZBqgAyBuJwK6aqFwOEQScRqF01M1d1","tlshash":"5ac3120265245f0ee9afddb0b65f9be11ba6e8fc18f180937b39344441184da8f65db3","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-10-13T15:47:08.701197Z","times_seen":2522,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":92,"send":0,"wait":116,"receive":185,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/ru.1c9d6cf5.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.384Z","timestamp":1791906368384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/ru.1c9d6cf5.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546657\r\ncontent-type: image/png\r\ncontent-length: 201\r\naccept-ranges: bytes\r\netag: W/\"201-1791058362232\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":201,"size_decoded":435,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"1c9d6cf574a370dd845d50aaaefb75a4","sha1":"ca76c93aea411eeea73c094194b282b8562664ee","sha256":"7770ac5deab554bd216f82787f6f7ad78ff2fdf544a2551141ae2cb08c57a55e","sha512":"7845e4b8215ada7cbd501b00661088985f61a9d17371cb4b466514c537a87a57167b0ab92306f065135b8859e43d9b48c1a73d24c3ff92cab135d826db559432","ssdeep":"","tlshash":"0ad022d1cf01282ee10a057f0a1f11d0aa3e1c6aa207580ca9118a18561ad04b88fb8b","first_seen":"2025-05-28T12:12:11.663537Z","last_seen":"2026-10-13T15:47:08.701879Z","times_seen":13,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/favicon.0acd9d87.png?v=mercadolibre-favicon-20261004","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.184Z","timestamp":1791906368184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/favicon.0acd9d87.png?v=mercadolibre-favicon-20261004 HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2547029\r\ncontent-type: image/png\r\ncontent-length: 101643\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"103019-1791058362221\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103019,"size_decoded":101930,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"0acd9d87293ed7964d517da4019e8a93","sha1":"38944a038f76d60fcdc9f220027c37ebe0aa51ed","sha256":"89650bfb7e86ac688e28996f1065cf87660796cdff61ee9a4750fd8b7cfbe89b","sha512":"b9e92b66b89ec9494760c301a9027dea413f930a0a479a1dcba3a2c260e0e282d8dab84393562d26a25591440ba6602a7f631402960daba897f118d26fe650b3","ssdeep":"1536:PJLWuR/H/ps9ZfBexXb9BVUx0kqoRYJHEseyiAg4t2T09GuyQfS7kcIDnNPQhS8v:RJHSQBDgTqjHERydVyJQfS7kcqhk3","tlshash":"75a302a4ed0f29b2620f3fc1ad6c0c79987d43a6d87d925ada40d67d3985ed38c20f11","first_seen":"2026-06-29T00:39:55.464423Z","last_seen":"2026-10-13T15:47:08.702699Z","times_seen":6,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/css/vendors~app.77c1315e.css","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:05.670Z","timestamp":1791906365670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /css/vendors~app.77c1315e.css HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=2546654\r\ncontent-type: text/css\r\ncontent-length: 41344\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"249212-1791058362245\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\ndate: Tue, 13 Oct 2026 15:46:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249212,"size_decoded":41686,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"60245e14e041c13aceaee8b0f27fddf6","sha1":"38d5c163296443c8fc51a45ea237269c4fb6e40d","sha256":"c8f99f9dce1bfc6fa0854a30c504d9643fe9026416eb0805dc208ee01da3068c","sha512":"038dff08e50bbf4b6eecd1ddda8d72404a0d4c1cab11d935c2bfc9cc74379d6d2e4b559d2ff0ecd80e3b7dda96dcf5231ae2f215c520364d4c159de4c59f5d50","ssdeep":"1536:nM28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/e8:VtKw/27eDLL6oRy","tlshash":"ae34b5109b17203bb22bda6d74c0ba896f29c313d8334b7afd95790cc6d64991263e5f","first_seen":"2026-10-13T13:18:30.289876Z","last_seen":"2026-10-13T15:47:08.703473Z","times_seen":3,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":445,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.043Z","timestamp":1791906369043,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: EZZN8K3VJHPG3NPD\r\nx-amz-id-2: xWNn+8ll+OmGCWXRrIdWA++lAWypleYnzwF28hYPonGG7l5+2cjh7pno/b8rrOG7TTk6E2SJjys=\r\nContent-Length: 40407\r\nAccept-Ranges: bytes\r\nDate: Tue, 13 Oct 2026 15:46:15 GMT\r\nServer: AmazonS3\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"74ce2539c3d1d018eb92f94dd3b9bd23\"\r\nContent-Type: image/jpeg\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":40407,"size_decoded":40804,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"74ce2539c3d1d018eb92f94dd3b9bd23","sha1":"1ed07808d60d8ff4965899591136f4f1ccc880e3","sha256":"5a3f2be7dd8069790a3bb5098aa704996a51c1c689459abf286b29a0a99a3d26","sha512":"2b962643ae9c9c3aec2caae066500f422473d23eab84cd3dbf14dab1b1bcd25fa0cbf8914f6a540b724b78fef89f4c952873cc2de3e733886f9fe03a57aa3fec","ssdeep":"768:G26vbkDR8P2NFi0uyoJ6TlcoZVJixSS/+Q1irAGMk8P2x9rzcXyz:G2kQM8Fi1yZTlZVMxSmwXM5gcCz","tlshash":"a203e027dd508ec7b10dd3fc7faa7db8839d5a01a58473de20f51c96332584a4e6b458","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-10-13T15:47:08.704199Z","times_seen":9959,"resource_available":false,"data":null}},"time_used":6388,"timings":{"blocked":5967,"dns":0,"connect":0,"send":0,"wait":125,"receive":296,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.047Z","timestamp":1791906369047,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: daYUBf+kXqyXLlAJTcxHbj6lUT12S0F9e345C4B0qa436ucI/O+2AH39J9yRshFtf78xY1NK2zA=\r\nx-amz-request-id: EZZHQ7VDDPXHH27P\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:16 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"3cadf1789eb8f8d80a12e5ad0e19ea67\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 26582\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26582,"size_decoded":26979,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3cadf1789eb8f8d80a12e5ad0e19ea67","sha1":"90a7bb2b2bf9588a95f5895d19564e8e0d7a1b01","sha256":"4a1e05ded030983d325fa2a293dffeb39ce70d4948634927f6752dfc6d2f1dbe","sha512":"9236112d6c6dad19ae6b463f258f73caf2470a6f375251a68b7a2f36df53573861a75fe032c86ce6494978e164f514ffcc85e2b20fd04896b014b9a038397a06","ssdeep":"384:G0IuovjpguMrZYtx3ebUIAN+sXub/t4fgq0i9Iun1k2ij4i71P68:G5uoLubd4Ub0AM24ecIGBiHc8","tlshash":"cfc2bf834a448f837859d3ab7f631c408fce49ad85d5b8df11e74243bba673a008e96d","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-10-13T15:47:08.704982Z","times_seen":9964,"resource_available":false,"data":null}},"time_used":6657,"timings":{"blocked":6355,"dns":0,"connect":0,"send":0,"wait":118,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-11-01/b1365176-2126-4b52-893a-d823ba7fa752.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.055Z","timestamp":1791906369055,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-11-01/b1365176-2126-4b52-893a-d823ba7fa752.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qvCtU8pYm1pVMmWPOGSfdQ9zCoH1i2JX57okZFyswqiAmHSFQs/tCzgMaFLW3smGpyaIKA2/BOs=\r\nx-amz-request-id: 9GM3HG0HGNQ7W41R\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:17 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:36 GMT\r\nETag: \"57fc8f526d4275ea03d2bdbdc5576892\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 170933\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":170933,"size_decoded":171330,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"57fc8f526d4275ea03d2bdbdc5576892","sha1":"648d7e45b5f40cefb1d18bb9c726fa2194627313","sha256":"5b08dd67e7ff0eb29804f686a825a0607fcfad5e509780a30adfea265bc26d6d","sha512":"046bbf2c489dd817458bb078c2a21eee87949f983e0924087800414acb782c41e1e777873e9bf43ad90c456a764044b9a142646b88ca61a2589c90e0a31b860b","ssdeep":"3072:uZZZCa4TScGLIk8FhGOovWdjezklGcjjltrXy2zm423z7LOOCAr:u3knH9GOusjezklGGltri2zm3fLNr","tlshash":"a1f31238ed7ef755a4fad15f910cada0a0f877204832a5813e37d7d437c98a192eb249","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-10-13T15:47:08.705657Z","times_seen":2537,"resource_available":false,"data":null}},"time_used":7628,"timings":{"blocked":6930,"dns":0,"connect":0,"send":0,"wait":123,"receive":575,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zjtd.oss-accelerate.aliyuncs.com/upload/merchant-upload/shopAvatar/2026-07-09/661b49b3-f223-4460-a362-eaa295675eb5.jpg","fqdn":"zjtd.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.164","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.709Z","timestamp":1791906370709,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 20 Sep 2026 05:42:02 GMT","end":"Wed, 07 Apr 2027 02:26:24 GMT"},"fingerprint":{"sha1":"FA:C5:36:F3:4D:B8:AD:0F:8A:B1:F7:7D:B6:5B:A3:F5:2C:B2:96:1E","sha256":"8C:A5:7E:E0:95:9C:A8:DA:01:66:7F:8A:C2:FA:78:26:4D:D9:C3:43:F1:B3:3E:D0:1F:FD:24:00:10:92:3E:F1"}}},"request":{"raw":"GET /upload/merchant-upload/shopAvatar/2026-07-09/661b49b3-f223-4460-a362-eaa295675eb5.jpg HTTP/1.1\r\nHost: zjtd.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9916\r\nConnection: keep-alive\r\nx-oss-request-id: 6ACE5243D31B12E25408E0DA\r\nAccept-Ranges: bytes\r\nETag: \"7B795722C39072845C69C6296291C168\"\r\nLast-Modified: Thu, 09 Jul 2026 11:06:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7426143048912920727\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000111\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: e3lXIsOQcoRcacYpYpHBaA==\r\nx-oss-server-time: 7\r\nServer: AliyunOSS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9916,"size_decoded":10465,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 176x176, components 3","md5":"7b795722c39072845c69c6296291c168","sha1":"17ef0c1fcf5794a1d87f0a085c0fadc13832f7f6","sha256":"f555c2466e7bff89193a4a2317c192b0dbd09a27cfc2a545ec1e53b868a5f7fe","sha512":"9ea547bebecbaf511e87440c28770743f70a820a714758851c20b2875fe62ffce60351a962da61d3e70a97438ff3fddd61603d31624a1738250ea16f07b432d2","ssdeep":"192:9wfyQ59ipYOttcSdOLHaMHId+Q+ZvsnjFmUP5rJdSK/8KNveh7YwiW:9wfyz+OrcSSGmZ0nAUP3dSK/bmYnW","tlshash":"d7129ed923ed2721c5d94b3948df173c238fe010d992f569a9c0f5e381dca461baeaa1","first_seen":"2026-10-13T13:18:30.358037Z","last_seen":"2026-10-13T15:47:08.706376Z","times_seen":3,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":82,"connect":22,"send":0,"wait":187,"receive":0,"ssl":312},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/4.53c52093.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.432Z","timestamp":1791906368432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/4.53c52093.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546999\r\ncontent-type: image/png\r\ncontent-length: 1843\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1820-1791058362225\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1820,"size_decoded":2126,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"53c52093ac861630a3245a3ab9e1692c","sha1":"88733be8e450a31ec40411be92fd47a82a8bf19b","sha256":"034651599b82366b05bd17a2c93d987af7a9fbb06420a67afbf3adeee20673d5","sha512":"38b716f709cea6af9ac1985ba8b0d5a8c77e977a89e543406055c55a8b4261a0e3c356d029ebb7531c8867d3a72aa19be589a360021b63256b76d3d5daed06bc","ssdeep":"","tlshash":"e931091a8b0f407e4203745fbd868ca2b82855ca140e856d659b0c7d79ce2240c37edb","first_seen":"2025-03-28T23:30:12.91293Z","last_seen":"2026-10-13T15:47:08.707058Z","times_seen":13,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/pt.b3e50454.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.387Z","timestamp":1791906368387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/pt.b3e50454.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546657\r\ncontent-type: image/png\r\ncontent-length: 2663\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"2635-1791058362224\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2635,"size_decoded":2946,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"b3e50454fc2431b8094e3c240a020c64","sha1":"0688ef9c26f932d4db620bdfc6c74304e1ff4639","sha256":"e32da02a27db650bd4cddec89019cc924f84f3b669c0d730942bc6228a9cfa9b","sha512":"6f70b8053b62f694282de55318095bb3c390c333ba1c8959791159a4dd62e2c14f12b1e277fa4424f2c3e3781bb03709eba0d1f5b0367884be4df690c891181b","ssdeep":"","tlshash":"60514cfe95077cdc48161313136a9d472502cdd793a7c359eb9c2cfe825794963892d1","first_seen":"2025-05-28T12:12:11.654755Z","last_seen":"2026-10-13T15:47:08.70771Z","times_seen":15,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/ms.3f84431e.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.391Z","timestamp":1791906368391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/ms.3f84431e.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546658\r\ncontent-type: image/png\r\ncontent-length: 2164\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"2136-1791058362222\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2136,"size_decoded":2447,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"3f84431e669cfacd413f254f352cef00","sha1":"ff3335ce41de3909e894cd4bd28af102258efe7d","sha256":"ee4a99c8a3e96eb25f2799e6a0a8a0ef5be58bc6df81ad09e597e53cb9dfbf3d","sha512":"ff82f53c87cfdecb71d1878b77bf2d99c05645bcdf199f8551524ae73adf381faa4e3b931c65e5c14a7c4fc99783335d1fcad34206d3fbc9b8ad368477e21048","ssdeep":"","tlshash":"e9410ad9ad839ecbda4f040b9a649e5936b34d8f26a9100e6d25f55b28319200853acb","first_seen":"2025-05-28T12:12:11.655582Z","last_seen":"2026-10-13T15:47:08.708387Z","times_seen":10,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/af.d608d4bc.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.394Z","timestamp":1791906368394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/af.d608d4bc.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546658\r\ncontent-type: image/png\r\ncontent-length: 1462\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1434-1791058362223\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1434,"size_decoded":1745,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"d608d4bc12e0e0ff9d89eda99ca68306","sha1":"c672531b6ba0c7bf955360d38eb4cf62b80235a6","sha256":"dbd20a10e70821267c80ff544cc802ba77592ae6115afbae649c260be94a9175","sha512":"55411686bf77980c6a62d3a62ae64944339e9f3bb9e9c9ae7381d8cfd52c64680584d1fb1dfa774e5a79cde033911f9a65fd1ca809dbb03683aa9b9e8deda91f","ssdeep":"","tlshash":"5b210b5756a83d1de50762f30f0a5c62823d061d4cd264555f0ac16abc0f8ce0bca80e","first_seen":"2025-05-28T12:12:11.651585Z","last_seen":"2026-10-13T15:47:08.709059Z","times_seen":13,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caishizai-tk-mall.s3.amazonaws.com/type/2026-06-02/22592bd7-2f04-40c0-b420-112bb0a704f6.png","fqdn":"caishizai-tk-mall.s3.amazonaws.com","domain":"caishizai-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.161","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.032Z","timestamp":1791906369032,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /type/2026-06-02/22592bd7-2f04-40c0-b420-112bb0a704f6.png HTTP/1.1\r\nHost: caishizai-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: QCSSXRV8D5MQR1FP\r\nx-amz-id-2: ST2RMJyLGxmGOupIu8/B8OLtFogOSq6L8MVmog0BwHUfACpsn86pU6U6Idf8164S7IzO2Y/FpNA3T+Ot8bRzVxUbpzPxQvBe\r\nContent-Length: 1687519\r\nAccept-Ranges: bytes\r\nDate: Tue, 13 Oct 2026 15:46:09 GMT\r\nServer: AmazonS3\r\nLast-Modified: Mon, 01 Jun 2026 17:04:32 GMT\r\nETag: \"5f04f24bcfb30188f8542d346e4032ba\"\r\nx-amz-meta-myval: test\r\nContent-Type: application/octet-stream\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1687519,"size_decoded":1687976,"mime_type":"image/png","magic":"PNG image data, 1340 x 912, 8-bit/color RGB, non-interlaced","md5":"a16d64ddb5950963d04104cfb2980c94","sha1":"0eeaf0f7e04fc2b81ee7f7f8c8c2e40ff63602e1","sha256":"9111900835ded6f7a2074264b2e203e804b919932c71ede045e3056069c58b27","sha512":"1be144df544c17de13bf73e4e9980187e52199b33edcca95be50b9d956e60b8dc08bd71b7de4b4ba8eec2828ed399c8a042b5148f3ab277744a6f3e90f799441","ssdeep":"24576:QUfUq0ulo7AD8bxTHz2xne+MPkbvXU7BKIGRAnevpDLCl9z1:QGlW0DgxzWeZPUCKIGTDLCb5","tlshash":"d42523cae8c1f3f7c4278cfcef6c8fa96573380749b516904989a660ad792d5c92436c","first_seen":"2026-06-29T00:53:10.749009Z","last_seen":"2026-10-13T15:47:08.70976Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1848,"timings":{"blocked":-1,"dns":0,"connect":182,"send":0,"wait":206,"receive":1095,"ssl":365},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.039Z","timestamp":1791906369039,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7yhxR5R/ooYhZKr8G8ouZl7iyZ2CuoN3fn1iN0SlDfMso/Hdmq+QEqIgBQ1tpkYLiAkRlOxR8/w=\r\nx-amz-request-id: EEKAV6D8Y69KRVT3\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:15 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"60e10d77ebe5877fc1c9385748e2cf72\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 180465\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":180465,"size_decoded":180862,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"60e10d77ebe5877fc1c9385748e2cf72","sha1":"77082da3f7af090dbcf9ac692bf2ba4e0d699aec","sha256":"f1343ddaa389f3aca6568d15637793f510925e7f88d13a6ff93591a326a66c48","sha512":"1a4999d20713081b41425f1f82ed3e7b5003e8f7024b18986a6f1e759e0cc797f7a0003c2d0e208d14261df253681ebe2795836541ff4ebb82b8763fbe5ce182","ssdeep":"3072:TrvxlqyFWPMUAy9v42Jxd3BDRnD748ezoCrW4rlfBoKamBYuWhNJwhi1nkx:Tr5AxXZvDJH3bnn7etB5fxzYhJb1nu","tlshash":"ca041269530c763929af82bccfdac921eff0210d0a74d75911cbf8e90a7a0bb91f2515","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-10-13T15:47:08.710515Z","times_seen":9728,"resource_available":false,"data":null}},"time_used":6909,"timings":{"blocked":-1,"dns":3,"connect":93,"send":0,"wait":120,"receive":1290,"ssl":5400},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.051Z","timestamp":1791906369051,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: FJ3Qu3XtEjsPIAdC9AQz4ra8A4XM/QmK0ZnjkfDw2jH56kLXwEtfK0wyrqOFAVSBWuZJbDf9nX4=\r\nx-amz-request-id: EZZM8HNSRSKT46Q6\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:16 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"d88ae54a30fed8843621233e2c13698c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 20191\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":20191,"size_decoded":20588,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"d88ae54a30fed8843621233e2c13698c","sha1":"9fa542e8677ab97712a7fdc7e1250e36536ec3a5","sha256":"dbe475f26aed9df934e9dca6ef2115b5d0968f312174dfecb9da3ddd3c9640bf","sha512":"606629525b62e056825a3dfbd8ca45e0f84740cad1cfa79ee8dc3e7a34658e951b3aa72bc8bdf276c294912a38d839dd6c2f864791c9038dc395b7d12d08385f","ssdeep":"384:EUsqD+1BG8DGQZl9Y4PyXpFmx82oEu1W3454xOKeq0ooJRImy+90lh:5V2G8RZHP9oEt3454heq0dRI1flh","tlshash":"fa92d1e1ad0a233de68685f6b7f6e2b304f412919bd19d3b53730c858d88261de396c4","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-10-13T15:47:08.711189Z","times_seen":9923,"resource_available":false,"data":null}},"time_used":6829,"timings":{"blocked":6609,"dns":0,"connect":0,"send":0,"wait":121,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/css/app.3b1e4198.css","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:05.668Z","timestamp":1791906365668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /css/app.3b1e4198.css HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=2546654\r\ncontent-type: text/css\r\ncontent-length: 40405\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"236844-1791058362232\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\ndate: Tue, 13 Oct 2026 15:46:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":236844,"size_decoded":40747,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"34024c4b0af600c7c5040298c0c6fdcd","sha1":"2c01aba9a66890907c9c0365f6a2553d4829a6fb","sha256":"d2278a73061e2290c02705ab86e7d26c3823a6c5d24f30d18c609215da6f4d6a","sha512":"54b6dea2e3f49f0e90d381bd6c49a131b0328e2b30ceea2d3f79ec1f6db31b0a4aca79ffc1e89022817487a2e80cc1d5e5b9ce6e5bc52aff29fc08ac98665f8d","ssdeep":"1536:eSyjk6l3X28Y7SrWfYeWXA1u9w4HCeKl4RdgW9cMEcWAp7KO6iZkJgYu8e0r8kv/:c8SJWTPL4Q+05q2ae","tlshash":"7e34b610db17217b222be66d75c0ba886f28c323d9725b7bfd95741ccae64891163e0f","first_seen":"2026-10-13T13:18:30.369237Z","last_seen":"2026-10-13T15:47:08.712012Z","times_seen":3,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":434,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/de.29c3bdc7.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.381Z","timestamp":1791906368381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/de.29c3bdc7.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546657\r\ncontent-type: image/png\r\ncontent-length: 563\r\naccept-ranges: bytes\r\netag: W/\"563-1791058362227\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":563,"size_decoded":797,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"29c3bdc7206ca4085bc4cc5e0482f06b","sha1":"9e787c4551f787eaff99dde6dc6dbc85c61e50a9","sha256":"bba2800ced451fb771a915a3d05bcd8c73ffee56a97f58ae3af7f667576b121e","sha512":"c0cdd5b0ae7eaaa7b9b68e0f816c05dbfc10052df9dfbddef993469b8c11d75f64f64ebf44703392cecaa2866174079f99fa4cad6229f0535f572bf088f26f8b","ssdeep":"","tlshash":"5af096d19791fc3cca1343edee0bb08533190c8f20952f286d7a0d7e1e048e014c020b","first_seen":"2024-10-06T15:48:22Z","last_seen":"2026-10-13T15:47:08.716855Z","times_seen":16,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/ph.a536d5b2.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.406Z","timestamp":1791906368406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/ph.a536d5b2.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546659\r\ncontent-type: image/png\r\ncontent-length: 1931\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1908-1791058362227\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1908,"size_decoded":2214,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"a536d5b2a3a09dff0854f5e0b05f3b3d","sha1":"6df6ba9cf27cb6c285123976594bd3df9220a523","sha256":"0747b48dccea8953cb1ae26b1af85e952f95c4aa52bdfb8937021729a4683959","sha512":"6a6874711664f47efc0771c8696753e30610d5cbeffff7c44057819f39b672945e11006990ace57de77887ebcf4e17803cb6f412f02f6a31701a224248baeffc","ssdeep":"","tlshash":"6f412c92e86c2336be6f43410fb61443b87d7157dc437c843a045b08d809444b6eb251","first_seen":"2025-06-02T11:17:40.573382Z","last_seen":"2026-10-13T15:47:08.718006Z","times_seen":9,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/vi.cc731fcb.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.410Z","timestamp":1791906368410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/vi.cc731fcb.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546659\r\ncontent-type: image/png\r\ncontent-length: 1164\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1136-1791058362221\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1136,"size_decoded":1447,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"cc731fcb3120e6d17c40d54013716da3","sha1":"768180629bc97da39aa09f0de1c70a9a593e626e","sha256":"46b31807f7ffac6744c17689518da11f9604d8c2c7e547c01686f9e1c4838bd8","sha512":"5bf91ad7d1942ed0519045786b858da8be5282dad8fedb0dbfd7bc84ef22d0c856ebfe6f66fedc0d5097b15631a34720c73c60b37ebb12eaf69c267678a83707","ssdeep":"","tlshash":"7421a3c9472d983d863e999b3a518a24863aa8db096a8994cb003879c49698f2814f83","first_seen":"2025-05-28T12:12:11.645981Z","last_seen":"2026-10-13T15:47:08.719217Z","times_seen":13,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/hi.f566d575.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.412Z","timestamp":1791906368412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/hi.f566d575.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546660\r\ncontent-type: image/png\r\ncontent-length: 1112\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1086-1791058362222\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1086,"size_decoded":1395,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"f566d575810503f11a2ae4220730c430","sha1":"58796a811c6df83b338c5e2491bb6e0fd2de672e","sha256":"93d12334bdeb12fb0bd77caf90805419d444e3366ee1488432ef41b821e54e06","sha512":"6c0f485a026db16b26c4fd2dec752801410fbd76a82109e38c75c170ca528f9e5d0f190877476c5a6e16fec816813a43ebb6a8c9da605cd2cd2fd6d4fef327a0","ssdeep":"","tlshash":"0d11e94ae348d52ec0ac30bd5e066a7edeacf52f03d2306520bdc65385b32496347212","first_seen":"2025-05-28T12:12:11.658117Z","last_seen":"2026-10-13T15:47:08.720487Z","times_seen":13,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.041Z","timestamp":1791906369041,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: N0bPXntxA8rQJ0AUrVaDSLGyM3pRobixccu22kpLBptIK7klMwIJ5nmgfLS1DO/DklZmJv1MqCw=\r\nx-amz-request-id: EEK0ED640JTE5ZCW\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:15 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"46155632d481869cb9c3e853c7832bea\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 39527\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39527,"size_decoded":39924,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"46155632d481869cb9c3e853c7832bea","sha1":"988a2fdc538ca57eadd8730f028800f736e1ee86","sha256":"1e4dba5d9d5fae2a3aafe91ae59ff2f9f938229ee17b6af825d3d7ae78a93913","sha512":"6a93dfe70a2ee1089d7a1137043494795f98bab7533792b6e736c25439b4c871437a83103e1f02c58b32e7af94aa20e67db51929d945869cff4485b6840c2255","ssdeep":"768:G2faHY+HPhvSyz/eZculI+Pl9UTnIbrimLDGEFK6hbrysiU1JL4:GogPUGkymLDGExSsiE4","tlshash":"af03d0472804ef4b762ce2727e9b1f681f819b4ca8c672cc4a530dafaf657b9491c41c","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-10-13T15:47:08.721582Z","times_seen":10024,"resource_available":false,"data":null}},"time_used":5662,"timings":{"blocked":-1,"dns":2,"connect":100,"send":0,"wait":140,"receive":396,"ssl":5024},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.042Z","timestamp":1791906369042,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: en10VsibluJkg6llFVg2aoLVnSnJuBh1GWYIXDKBcqqoNEHjvo6nXUHAcUm+tsx8KmWzQa172PA=\r\nx-amz-request-id: EEK2CQEBQNKJ2P07\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:15 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"882acb8a590986400f716b14ce87dbd7\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 27557\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27557,"size_decoded":27954,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"882acb8a590986400f716b14ce87dbd7","sha1":"69d9585cebff24ca05746278353d9723ac581960","sha256":"1c488a620a2342179fea9b5325ea4b5e0e450de64f3bc3383c67e3040242d1e0","sha512":"21cc314fbc6d011adc782475102dcc061e67ed01e1162a9046700b1375b1841701831af77286cc0fead58c997eeba79f5e1d141cdb124ed7881fbe71315c65a6","ssdeep":"768:GG5AJy9ToRwVbgiqHgdBAe9u4p58OsHIE7W6lWG:GGis9sRwVbgiBdieWHTlWG","tlshash":"40c27c039c854ad3b575c391ff468f6d3b8aaf08fc5672e710e11eda37a01424c9da6a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-10-13T15:47:08.722464Z","times_seen":10119,"resource_available":false,"data":null}},"time_used":5967,"timings":{"blocked":5646,"dns":0,"connect":0,"send":0,"wait":123,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.045Z","timestamp":1791906369045,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: mImRrP6m9vL4tOsM3B2+Ry1tNX8dZo0DRm3Wnr76j3iuBPzqOisjAtBJoOclp3TCmJla4jAnfTw=\r\nx-amz-request-id: EZZW28J3EKY5YYJS\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:16 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:17 GMT\r\nETag: \"0527d1653d7ad2d9fce0c6e3e6ff3f8d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 17300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":17300,"size_decoded":17697,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"0527d1653d7ad2d9fce0c6e3e6ff3f8d","sha1":"96f83c2be0860f8d33bda1e5955d2f69e1947cce","sha256":"91d6492646ed09c0cd914e6d6b5756d5e5ce01c44334b1e4fe035ead232a3f00","sha512":"a52945f8f23f05aedb2288cf6da590d9cacdeb9c07cda2e165f751c8f5eab3a752061e605e778f3c374481c4b1661d99be9d5fd8962d30e5cc3e4f5f007f2a61","ssdeep":"192:Gdel8vIA3KMvActt7vDzEu/L38lmmDOTORDpUcQws5kXMwAjdMubITDpgO67jTf:GdSnq/tt7vTLAnyO5skTAjGJTt67","tlshash":"ce7216179d089dd3616cc3e5bf060eec7f9a5758e8063def90a10fd93b206878d8946a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-10-13T15:47:08.723405Z","times_seen":9993,"resource_available":false,"data":null}},"time_used":6356,"timings":{"blocked":6153,"dns":0,"connect":0,"send":0,"wait":111,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/wap/api/syspara!getSyspara.action","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:07.946Z","timestamp":1791906367946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 23\r\nOrigin: https://otbtaw.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":23,"data":"code=show_video\u0026lang=cn"}},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:08 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: no-store, private\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52,"size_decoded":397,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"33878fb83944a3d98e0ae8fbb3688401","sha1":"95cddb60c569b28c039a3982e1a593a9c9b75411","sha256":"05ed22d88cd80fb42cb476b3e2826110e2d9c377c9104929b9b5ee381971db57","sha512":"91c65dedfad117e4715750c3696fe2a76e51de20406b1314da92f025f323586806c7467c01ff03e092e4cf9bba824e57487f9cc9608feb66018c29f5aea10dcc","ssdeep":"","tlshash":"2790220000080832000380283c0c3200808c0003008083088c080a2000ec0a00220028","first_seen":"2025-07-21T20:07:50.133523Z","last_seen":"2026-10-13T15:47:08.724297Z","times_seen":71,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/home-icon3.7259828f.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.417Z","timestamp":1791906368417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/home-icon3.7259828f.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546660\r\ncontent-type: image/png\r\ncontent-length: 796\r\naccept-ranges: bytes\r\netag: W/\"796-1791058362228\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":796,"size_decoded":1030,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"7259828ff42fbda2bdb21a5f114f7ce2","sha1":"3ecbc74c7940ab77e744dd04d279101f633ac249","sha256":"55392b5a9b815f6369f5d4d64f50f65c10d3bba0c4befc024c92b8707af40905","sha512":"1919977bd80fde5dac8eb955a0e969d0d96d5740fffd0b1adde40d622db22b7654c2dfa9afc9b1ac016474337e10c12829e5259126f5aa5b2a18d9886a9ae61e","ssdeep":"","tlshash":"0c018698b140d994c89b983da2c0e438f52a4045b012efc99b4c26327c8541ca113708","first_seen":"2026-03-30T12:42:28.764941Z","last_seen":"2026-10-13T15:47:08.72509Z","times_seen":23,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/wap/api/newOnlinechat!unread.action?lang=cn","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.448Z","timestamp":1791906368448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /wap/api/newOnlinechat!unread.action?lang=cn HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:08 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: no-store, private\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":341,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"472e9a7530675f76d965067fcba6278d","sha1":"e1fdae764ba06c37792e7b2a2549c88cf3350b09","sha256":"26de7e215697f7b90d77581633fd7fe0b379ba230d1a9c1a0b502ed862b3f5bd","sha512":"7f765b18a1b6f5818daf3905ed24ae9f4283248ac7a41bfcca65dd1be696c9a741d510629b6134940784b3cb832fe3be7fa76881cb2d01f226e1246a70039e7a","ssdeep":"","tlshash":"47800000280e2c0b08032088a88c3a0080ae22a308c0cb308e8cab3080ae2b22000830","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-10-13T15:47:08.725776Z","times_seen":8826,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.049Z","timestamp":1791906369049,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: M7EoD/bVN+bYULBKWaX+uwi2pqBc2SGeHPTUbS0exQBOCYhPt0EfZJzr9L9mmBPjeOEZ11ovKM4=\r\nx-amz-request-id: EZZTZRS8G67MA956\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:16 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:17 GMT\r\nETag: \"1b8714109ac1c300a6848b18f4b10531\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 27057\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":27057,"size_decoded":27454,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"1b8714109ac1c300a6848b18f4b10531","sha1":"1c40a9917624327dcad395e8d0a9a204e24d73d0","sha256":"952d26075b0ffa3fd64c6add8791e566a5d7010f52382b468a3f1672c5496320","sha512":"4a5388c14a734141ce576fb7e988c90418774f74d2641dfda2714951ce30264714baaa6338374f69d053de8e232efa6e658ff156ac04412adcfa3d6c41a3b94c","ssdeep":"768:G7DH6SIfn5ChIqflgQY2z+CR8hUywK3cD:GRIRCm3QY2z+nCywKE","tlshash":"2ac29d5348089fc7b13ac361bf031e6daf96bf09d495beeb10920ac7bb34655ac4d128","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-10-13T15:47:08.726467Z","times_seen":9781,"resource_available":false,"data":null}},"time_used":6608,"timings":{"blocked":6387,"dns":0,"connect":0,"send":0,"wait":122,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.054Z","timestamp":1791906369054,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kEK6g/RrEPxaeKUjVpcTTqjSJxl31Do+fq+x+IWd6+y2OgP6cF1aJJpkOwKcicn0tp6tVyEoTa4=\r\nx-amz-request-id: EZZPVTH2467SQ1EK\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:16 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"1e463b0bfc58cbe93de38ad62f2ac7ee\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 21173\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21173,"size_decoded":21570,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"1e463b0bfc58cbe93de38ad62f2ac7ee","sha1":"ae83334518cc12da8587ae98f78a5dd7de9b7a98","sha256":"de1fc345b3fe2ed5fbac321243e8814cd39a37a5554fa0d6b665284da90a6e28","sha512":"e29d51e79e7609dd12e1477a117b2af83259505557ba520681172019687275acc73b92129559a74a03b0f5fdd649c169f5301acbab3c599515ff1a89c1cc4afc","ssdeep":"384:ADUu/oKRfXu/25fNvZ4ZpZKbPzjApEZWZ7CJTa/kKfwu:96b9fNvZDfAEWjvou","tlshash":"0d92d01ded906352d745e472b7e7daae1d0c09d8a31c98286af1cc0b98363193f774c6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-10-13T15:47:08.727125Z","times_seen":9537,"resource_available":false,"data":null}},"time_used":7097,"timings":{"blocked":6890,"dns":0,"connect":0,"send":0,"wait":115,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/right2.cc786c17.jpeg","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.275Z","timestamp":1791906369275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/right2.cc786c17.jpeg HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546991\r\ncontent-type: image/jpeg\r\ncontent-length: 7644\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"7713-1791058362222\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7713,"size_decoded":7928,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"cc786c170d1d6149749d10d1c582b823","sha1":"e457775e891371693e2917995d61c0aebc469232","sha256":"2542eea6cbcb84492d4c00cf3b1d9d8519352b424f0cdff53503e25b61b48a06","sha512":"bcca4adabfe737eb7354aba0b5808df7e2be3d7fc3073e436abfc45953d8e17515677a9ce14d9b7a2745c680048e862375274c79f8e85f1ef53fe21df09f070a","ssdeep":"192:VVN0t1U7czDKKmtGPnBAZkdlpo3XUa97UggVBPGBbA:Vu1IcqtGPnBmkjp4XzwzBPGG","tlshash":"71f1afba358c2f53fad13db4ac9c72a27b242e3b5941c35f80f56f6470be084106a61e","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-10-13T15:47:08.727742Z","times_seen":1993,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/908e2a95-723f-40aa-ac29-581a9ee153f5.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:11.224Z","timestamp":1791906371224,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/908e2a95-723f-40aa-ac29-581a9ee153f5.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2ukjQ6wGwYhYT/kImBwhfJGGiqD+hKUx/TvqWP6wLldEXt88wNB9vi5u8RxaFumZvmmU/BSQvQSCWgxICxAP6P7SlHux4ujh\r\nx-amz-request-id: NVKPMVJ417ZZWB6W\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:12 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:40 GMT\r\nETag: \"c5a47705795cdbc1e8729597ae3590c0\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 116736\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":116736,"size_decoded":117154,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x890, components 3","md5":"c5a47705795cdbc1e8729597ae3590c0","sha1":"dc331981dd3aeb0e2ef49a5339b9de6fc874a6b1","sha256":"2c4fb62978884f281072fa2aac50acd32f422cd139a6e8c703c644263f3cfefe","sha512":"64b217eb462365a15e408992e9f6cafc4da3aeff8be47a4a0d9cf1eec22ae84b8c49db9e0bde58eeb4c3218d3503147fa72fb222e07dd10f09e08108934f491c","ssdeep":"3072:5e2yg9EXZZEXO06Ae3UYn/HFkdOQRC+p/o:ZyeEXmO06AuUYnNkkQRC+p/o","tlshash":"82b313ed627148c6e96c04b5587ec05c8a31138bb6d8af6f30fe1d221bcda512edf549","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-10-13T15:47:08.728378Z","times_seen":2449,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/home-icon4.bc3ae018.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.419Z","timestamp":1791906368419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/home-icon4.bc3ae018.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546660\r\ncontent-type: image/png\r\ncontent-length: 773\r\naccept-ranges: bytes\r\netag: W/\"773-1791058362232\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":773,"size_decoded":1007,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"bc3ae018ba5fdf36bcb715e2ec4d0a0d","sha1":"d5171438114a11c20e515eca79f14dc5d9f0310b","sha256":"8321a895654a817ce96b912b06fee93ac1db903a3a6b54006f3f029c3342af57","sha512":"139bdc08c056dd21e2a67122283a66f7bf3d0a0d410186fcbe0fe0d3fadf9895b5ca270d4150c54bda57923e1f9d59d705eb76777c96ea1f3a8d525467d071c5","ssdeep":"","tlshash":"9401758abbcd3f2ec2db7cdc754c0270362b0ac20d619e488581808c4117b5b4c59316","first_seen":"2026-03-30T12:42:28.749571Z","last_seen":"2026-10-13T15:47:08.729032Z","times_seen":23,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/wap/api/syspara!getSyspara.action","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.455Z","timestamp":1791906368455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 43\r\nOrigin: https://otbtaw.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"code=mall_max_goods_number_in_order\u0026lang=cn"}},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:08 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: no-store, private\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71,"size_decoded":408,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c4654fa4ff81d11b3c8d322ec628880","sha1":"080c15bfaa6d03e4ccdd092630344aaf1f003c47","sha256":"1f9573c145cceac2e7ec7273293953edd53fd282aca6e50acd9334f59f34a5fa","sha512":"61d2d5a60435f554ef05dcb0e1b1c47875ac6610289e4d3ea66013244a25a7b1b720d3927649ce420575cc00929d9350f519524350066508593ad659aacb79ed","ssdeep":"","tlshash":"b9a012009c155c150c03c244a84d260641c8210246404e180d041928017d43c21000b0","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-10-13T15:47:08.729652Z","times_seen":5791,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/cn.0daa576f.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.377Z","timestamp":1791906368377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/cn.0daa576f.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546656\r\ncontent-type: image/png\r\ncontent-length: 1439\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1411-1791058362222\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1411,"size_decoded":1722,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"0daa576fa789e7cb3fc08f8c7dbd653b","sha1":"3f7c0d034abcceb72575954775cc2f44a6e31308","sha256":"7e23ef4256992ac7c1e4b78e5df7a625221d80037ccb25ac4ca84f70da0f9a81","sha512":"850605c1d0ec4cc4845025bdbac6ff66e84c8b81c2a105dd7544176eafb5797e58bf8b0a60a69fe0a3ba7d3f35d5da3d3340437183333a5caf25d92cac7f3c2b","ssdeep":"","tlshash":"a72108e1ac08448a8eaa059b94b1041dde80c57f23caed0b5c1d0b28b46cf06b6df326","first_seen":"2025-01-02T05:36:21.544277Z","last_seen":"2026-10-13T15:47:08.730265Z","times_seen":24,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/el.37362663.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.395Z","timestamp":1791906368395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/el.37362663.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546658\r\ncontent-type: image/png\r\ncontent-length: 1280\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1252-1791058362223\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1252,"size_decoded":1563,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"37362663dc9d21f8e76da5aad6959244","sha1":"c278e630ff067789749625d4b425f8019e31b67b","sha256":"a8b8d3cd0b74d823c44a0996b21c197b2613b81031ae2286d6f5b99402fb6db9","sha512":"20c824af67b4e7696fe8117a06c8e07c4cccbcb81945e15f6fc2bfb02307527ba30ee452f201f863488575c90c5273e6ea81f1ae453e147639097b88e6ac8ce2","ssdeep":"","tlshash":"4421e7ed6928026bd91f008ee12d1212a6751c31a8396f5ff40af860276209463b0983","first_seen":"2025-05-28T12:12:11.668658Z","last_seen":"2026-10-13T15:47:08.730963Z","times_seen":13,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/css/chunk-0eea1634.b91566ea.css","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:07.934Z","timestamp":1791906367934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /css/chunk-0eea1634.b91566ea.css HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546653\r\ncontent-type: text/css\r\ncontent-length: 1736\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"6834-1791058362233\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6834,"size_decoded":2018,"mime_type":"text/css","magic":"ASCII text, with very long lines (6834), with no line terminators","md5":"f7b1de25905c81c373dba149d03c31f9","sha1":"862e37406535632dfb53a15f6a89c16efb3c94df","sha256":"e75dbd8d3fa49fec96c2b893018aed78a616974cb812b015636553d832881751","sha512":"5a2f0034e39196a38ce44b9d9cc46301069bf252b4f092c46db65bcd45a55ed05a6b53bc8241f14a5f5390b530394bcfb0ffea60b21c9262d0b669e07fd1707d","ssdeep":"96:Zsivfdy8lOFD1vq80WV/LPxDmvo6SOwUu50NJj9MC2:Zz33lSD1v30I/LPxDWrhxuuz+","tlshash":"56e10ff2f231112f7426953be18389e8bc86b10dd3ffc656ff84b514daa9182063518e","first_seen":"2024-03-24T18:07:06Z","last_seen":"2026-10-13T15:47:08.731665Z","times_seen":2054,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/js/chunk-0eea1634.5692eb4a.js","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:07.938Z","timestamp":1791906367938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /js/chunk-0eea1634.5692eb4a.js HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546654\r\ncontent-type: text/javascript\r\ncontent-length: 4305\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"14509-1791058362236\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14509,"size_decoded":4595,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14509), with no line terminators","md5":"e8cfb88795ce79310770a080f1024aeb","sha1":"9a0ce16403dd3795459046f8d392ba5792c8f7f6","sha256":"eaf6944b64050554a62b91b1aeee79c8c06b9808be643959c211d3c48066473b","sha512":"dc1e3bc0ac39a3b4688b600f61c4e689363074bdcfbd14f6fb6556fd3622ac6cafbc8df36fdcc7b0e19445f3682bf31a77660fccc4ea2687a3b8d0a8ffe19495","ssdeep":"192:ThTEIRxPHVhVxhV7csELBtq+d8jejXp7As9alubm6/+yhjlyNbWDzxlvGIo4MOzU:XPW1fdXlAs9ae/Z5ly1EzxpGIoMmT","tlshash":"c152b8d6c2b1a4fd4469c2a26016d5a0fbb43a2ce001558ef76cf89a36dd474332e7bd","first_seen":"2026-10-13T13:18:30.320008Z","last_seen":"2026-10-13T15:47:08.732453Z","times_seen":3,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/47934c11-34a0-4990-9c8e-834a82f5b701.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:11.228Z","timestamp":1791906371228,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/47934c11-34a0-4990-9c8e-834a82f5b701.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: IwKzI6KHxTnml8tCsY8jVirg5tVjMPx0ca+alSU5LGauNhaX5Z3hfGTw60/2sQY4rNfV+IxO85B3QfLSQ2vpu2PdEKbZaPtM\r\nx-amz-request-id: NVKTVZAKRP7XTWCN\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:12 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:02 GMT\r\nETag: \"8c00ff5e70d17f3ad0a9b1b85f0ca0d1\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 41631\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":41631,"size_decoded":42048,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 647x1500, components 3","md5":"8c00ff5e70d17f3ad0a9b1b85f0ca0d1","sha1":"821b82e6b725f4a90aa36d51efc1a362e33b53cf","sha256":"41d72946e6b8fde800f2bb6b1ce9f6be2b286f437f1abdd23595a144bd5d1427","sha512":"7bbf0279cc137f96fd2c7a6976af80334de90ceda385bdd26da2215dc52f96f5fee9a68428c5883c7a2bf21755b6c01597c8aa9e40e971de13d550c31027793e","ssdeep":"768:1qE70EERqK41pSmdbAENaZKhNwJ/qdLbSY11ip73BTkEyF06n:770FNGQcbrMZGgCdVip73wB","tlshash":"f813f11b3b62a61ed1dbad36d45b72018ce0fb1b33c1848f6e62346135c6fd40b97695","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-10-13T15:47:08.733347Z","times_seen":2382,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/tr.ceb68bb2.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.398Z","timestamp":1791906368398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/tr.ceb68bb2.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546658\r\ncontent-type: image/png\r\ncontent-length: 1329\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1301-1791058362232\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1301,"size_decoded":1612,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"ceb68bb2962a896784039507594e475a","sha1":"f5e49b6eb78bf39073daa0271d21d1e285370528","sha256":"fb70828909d07f9c229dacb21b23578c886ba8e4a92ad09169f2dc11498fe7e0","sha512":"cc792cea30472ae9f6e23fbe063677d89649369288ad12d13e52d09afd972b5f515129b8058ae6ea42bf77187d11572ef5fff90d1bc44a5bf9839e26e37ebe24","ssdeep":"","tlshash":"3021f852ec7fcba5c9fb82285d928458e7ad704c282c116aadc0206a3611472dcdc7da","first_seen":"2025-05-28T12:12:11.639613Z","last_seen":"2026-10-13T15:47:08.734331Z","times_seen":12,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/wap/api/banner!bannerList.action","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.023Z","timestamp":1791906369023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 46\r\nOrigin: https://otbtaw.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":46,"data":"pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=cn"}},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:09 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: no-store, private\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44,"size_decoded":389,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2982955040e03da061e625bb0bf375c","sha1":"20181528c67d8f347372b93f90d96e7d6c3cfd0b","sha256":"aa16d955b045de5c2728a37653d3f51d5f24f6e43879c0214e7b015079356608","sha512":"503575abcbe6db127825c8225d96bc0142d885aa83f74e8b5558ede44b0668ea953ffe7d3087c4d55b98b8550f776ebce4c989e93d571590ed8aa03789e88bb0","ssdeep":"","tlshash":"b49004403c0d1c17040fd545f44c3540455c315307d4c7300d4c5730415f1753d04570","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-10-13T15:47:08.735135Z","times_seen":7430,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/right4.d4ec046d.jpeg","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.277Z","timestamp":1791906369277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/right4.d4ec046d.jpeg HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546991\r\ncontent-type: image/jpeg\r\ncontent-length: 5017\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"5221-1791058362225\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5221,"size_decoded":5301,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"d4ec046d8c25c5dee52c5af662080f75","sha1":"896fdf6b222c106b1d020d0acf31ee9c26c88684","sha256":"99f6a1f7108f1abf56f20cfaa1a2186185f75dd1c2679ab934dfcc78a24d1a46","sha512":"8154278b83fc24b0fddd51d9b2cbd209229d8e7469f2f1871f76ab2194aea26e95e65f3d54273d72573ffa0a0f23ecbaa85b27582a48a345ba1889e96c125fb3","ssdeep":"96:WwDljepRFJvH6a0JgVZYW4OZRN/BF5Dl46b6OzaXg4s0uoTU61j5Y:Vljep7h/0GZf4OTN/LfHvzaXYRoTS","tlshash":"0ab14b325beff38de1f34634096db2056d5afe1392a15bd385d15ca060652afaea1180","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-10-13T15:47:08.735767Z","times_seen":1992,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zjtd.oss-accelerate.aliyuncs.com/upload/merchant-upload/selle/2026-07-10/cc01f5ba-eda7-47eb-897e-05a4d3d5d0de.jpg","fqdn":"zjtd.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.164","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.671Z","timestamp":1791906370671,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 20 Sep 2026 05:42:02 GMT","end":"Wed, 07 Apr 2027 02:26:24 GMT"},"fingerprint":{"sha1":"FA:C5:36:F3:4D:B8:AD:0F:8A:B1:F7:7D:B6:5B:A3:F5:2C:B2:96:1E","sha256":"8C:A5:7E:E0:95:9C:A8:DA:01:66:7F:8A:C2:FA:78:26:4D:D9:C3:43:F1:B3:3E:D0:1F:FD:24:00:10:92:3E:F1"}}},"request":{"raw":"GET /upload/merchant-upload/selle/2026-07-10/cc01f5ba-eda7-47eb-897e-05a4d3d5d0de.jpg HTTP/1.1\r\nHost: zjtd.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 22704\r\nConnection: keep-alive\r\nx-oss-request-id: 6ACE52432599E0C9CCEE0A61\r\nAccept-Ranges: bytes\r\nETag: \"1FEE5C5C8562009023CE6063233055C3\"\r\nLast-Modified: Fri, 10 Jul 2026 02:37:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5844328035547086805\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000111\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: H+5cXIViAJAjzmBjIzBVww==\r\nx-oss-server-time: 5\r\nServer: AliyunOSS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":22704,"size_decoded":23254,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 692x597, components 3","md5":"1fee5c5c8562009023ce6063233055c3","sha1":"97182dfa29c772190125025a7c881d4851c75ac5","sha256":"8624ca078c76553885703067a88e97e8d139fbbd55086ec567606bc114dbe632","sha512":"7f8f417ce0644448010967db10cd0782df6775c8f5e37e16b1f6dc42a676859238cfa93f1dc0b44c47771d47341aa2ef8dadebda66da5fb50b776f64e8c15655","ssdeep":"384:Nqhk3KrrmQzPOFABQ0tEh6Z4HC590EuNkXfPI:emKRPIAq0S6ZC+9XuaY","tlshash":"50a2af39add9a1eeec1e377b42a79921b7c60be4aff380547f8dac348e7114485014b6","first_seen":"2026-10-13T13:18:30.252192Z","last_seen":"2026-10-13T15:47:08.736418Z","times_seen":3,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":121,"connect":20,"send":0,"wait":183,"receive":2,"ssl":314},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-22/ee56ce9f-d4ca-4967-b1cb-16e49b0496ae.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.687Z","timestamp":1791906370687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-03-22/ee56ce9f-d4ca-4967-b1cb-16e49b0496ae.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 99nq9uvXDMVM3nlInlISgQw6dwHI9BVJERCALd+1uY7zZcfEtZvenXuGjpiMAEdcufu2LGr6ylLMPI7Yh8m28bjbEyYW6OA8\r\nx-amz-request-id: 3KFP1S1WWYFJSJT4\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:40 GMT\r\nETag: \"fe31795718d6b7c88834debbf8c3c5c1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 198020\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":198020,"size_decoded":198476,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"fe31795718d6b7c88834debbf8c3c5c1","sha1":"9f559719e377968dfc30f832bf5884883ff7195a","sha256":"3a727f4d97f6c35e698cb43abd9aa5c092afe6de25fe14aa0d994eca852c04aa","sha512":"8c12d17a6c42f9a54c38e06698347019fd081e503e0b6a2c7a817f9b64f3b6701338da9576a3423bee67a7cc5959f6851d2d82a496b3ed02e42edf9b21fef26e","ssdeep":"3072:T4GQMYbWlp6DoBFENsiN62DC7hcPr1eBUosqfnYt3uhdogcFdEa58ug/v8XvIQX7:T4GESl8UBFEPWKbDSugX8fZJv","tlshash":"ba14127fa9f4a190fb858eb7c7a33d400de0b85e5b10056776d65eb2c21c03546e46fa","first_seen":"2024-04-24T08:16:40Z","last_seen":"2026-10-13T15:47:08.737073Z","times_seen":1197,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/shopAvatar/2023-04-22/2028f2b2-b018-495e-a63a-fb052ccf0e7b.jpeg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.692Z","timestamp":1791906370692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /shopAvatar/2023-04-22/2028f2b2-b018-495e-a63a-fb052ccf0e7b.jpeg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: EZZW96DBVWGK2369\r\nx-amz-id-2: dyINmZh6f6/OFyGKH/Kl3uTb3yMADCbKYvQ1LcT5CHwOlqYjmpscT4PAA9Zlgu3wR1ARgrGI5jo=\r\nContent-Length: 76969\r\nAccept-Ranges: bytes\r\nDate: Tue, 13 Oct 2026 15:46:15 GMT\r\nServer: AmazonS3\r\nLast-Modified: Thu, 23 May 2024 01:45:32 GMT\r\nETag: \"09e5d7b6c70e313c560dd6ce28f66662\"\r\nContent-Type: image/jpeg\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":76969,"size_decoded":77366,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 579x579, components 3","md5":"09e5d7b6c70e313c560dd6ce28f66662","sha1":"b078ffd4bd52fec2cdcb7a451c8a97c8774ee105","sha256":"83ad20cbd23ec9cb6d19ce39476e6850ae8d3e23b07bcde9bdc5cf287c243463","sha512":"6b6c4a2fc9ec49d922c53d02952ca3dd5f441bcd699c75b2023af43b960d8651fe7bf6d643720675b875d427d9cc7ba9688b1ce0e9c3f6317560eb73b9ff1eeb","ssdeep":"1536:3sZvy+jlLpokYLurZICeLcPJaVw096CZvcIUQwnYb9:3ky/LKJY2JaVw0cC1clQ3b9","tlshash":"d27302afe6d00616cdc2acf71b5631e0af612c19865421196d4e96f0ff706fc8d0a2ea","first_seen":"2025-06-08T13:03:22.03185Z","last_seen":"2026-10-13T15:47:08.737688Z","times_seen":41,"resource_available":false,"data":null}},"time_used":5795,"timings":{"blocked":5108,"dns":0,"connect":0,"send":0,"wait":117,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/es.8f358b13.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.385Z","timestamp":1791906368385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/es.8f358b13.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546657\r\ncontent-type: image/png\r\ncontent-length: 1633\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1605-1791058362220\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1605,"size_decoded":1916,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"8f358b138205eb551225d03415e4933f","sha1":"cdd3f7115b2976de46d30a9d9c45385e448638c2","sha256":"9ae76edc1963fc4d4990483d67d3ec3e854608c0c6a9762f9e8c4e426021d8e5","sha512":"bbe5620c2be71847e775df097a30b90948731fc186cf74ffcf4d24a2dda190fb8162d9f96822bdd7ae467c0460d140cecb915c46c9c52f101d25fa381d4b22e9","ssdeep":"","tlshash":"df310ab4d635d118cfa46ea6b1890924e61519c610936b6821d7e3eac6c4f1cc04fb2e","first_seen":"2025-01-02T05:36:21.576659Z","last_seen":"2026-10-13T15:47:08.738304Z","times_seen":13,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.048Z","timestamp":1791906369048,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: EZZSR4A03YZK1X05\r\nx-amz-id-2: hFsZVaL5lp7uStQUf4EDHq8CwtEiqddZlXIXSIjl2PhD/0vxcQNqkxioZVy8pyCipURlzpHZ1Tg=\r\nContent-Length: 28164\r\nAccept-Ranges: bytes\r\nDate: Tue, 13 Oct 2026 15:46:15 GMT\r\nServer: AmazonS3\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"3fb702f913ff64c272d67742c3fade6d\"\r\nContent-Type: image/jpeg\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":28164,"size_decoded":28561,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3fb702f913ff64c272d67742c3fade6d","sha1":"9d59af9b1418caaf57ed3f938074958affbdbf5c","sha256":"effe7b76be1c47da3ab9aaf81e6542743506dc40affd341687094417a4feea49","sha512":"1be15380d11c4c57f3ac922aa8d945afa256b4fda813b5254fe3ec2fd8b01fc242c8f9faf79a25245626438240e63d8c68bc1e3dc6c8ae1569b363e28f99c817","ssdeep":"768:GkLEEqGMducsX2FbPZlrPr0YFveH2fzquxgfI:GZXvducmObPZlrPoYkH27hl","tlshash":"3bc2278b59484ed3a46d93e5be970e9c6f453b4ce88229ff10924fd77f202664c4d02b","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-10-13T15:47:08.738966Z","times_seen":9972,"resource_available":false,"data":null}},"time_used":6770,"timings":{"blocked":6374,"dns":0,"connect":0,"send":0,"wait":119,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/093d9f58-2c6d-425a-b3c9-1898b0aca760.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.063Z","timestamp":1791906369063,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/093d9f58-2c6d-425a-b3c9-1898b0aca760.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: QCSRHR2PW5QES55D\r\nx-amz-id-2: 6wRL35t9GPl+b3zfFvnpd0+f3nWZGdj3c+r5Hz4ez7MaOJDOJ+zh8aHn3oZTA60MiXpiyXeM1rwu3VHAbTHXcwR1lycbPmJP\r\nContent-Length: 132447\r\nAccept-Ranges: bytes\r\nDate: Tue, 13 Oct 2026 15:46:09 GMT\r\nServer: AmazonS3\r\nLast-Modified: Wed, 22 May 2024 20:46:44 GMT\r\nETag: \"cfcc313a94dfb8530acb5ecfe5dc53af\"\r\nContent-Type: image/jpeg\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":132447,"size_decoded":132865,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"cfcc313a94dfb8530acb5ecfe5dc53af","sha1":"4ce68057416501691588568831526f3f621377e1","sha256":"616cefa8fa49014d34e31d96d913620bf5252ad75654db3924f71a05834202c6","sha512":"fc051b5d6e2a87267ee275655fb446499cd4f41eca27a43c7e3666fedcb37364e65086055b0668434a8e8f0c9ca176c4f9570de51dedeb85e37304804be91846","ssdeep":"3072:ErQx7WJnVeTJWMRXz15rKYLbYeZu4G+gqg44O0wZfeN7yC:KQOnVMgeyH+Q4WWfeN7F","tlshash":"28d312c06b111bcbe5c83fb5227a928237e772399493fd323981d26e59d1c78a237d42","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-10-13T15:47:08.739603Z","times_seen":2414,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":142,"dns":0,"connect":92,"send":0,"wait":118,"receive":278,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/right3.2623b6d3.jpeg","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.276Z","timestamp":1791906369276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/right3.2623b6d3.jpeg HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546991\r\ncontent-type: image/jpeg\r\ncontent-length: 6092\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"6227-1791058362220\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6227,"size_decoded":6376,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"2623b6d3fdcdc3cedd05dc18ae066b95","sha1":"87a496d16deb4dd95911f7a13d1a1aa1406ea0e7","sha256":"442cccd091f86ca0e04e6968e5b8d8a9da4d0cc44d5db7c13bcfc6e8dfe1c8e7","sha512":"875c70082bca2afd94f6aa97595c77812a9fd4d6619f09c71a7b18c35bee92b85ab668820f1d84638446c029996fe60b0d24211fe7a40e275338432e0ba78dc0","ssdeep":"96:WwDXOIcRS6h49YajeysjKSB6uBcHWSNihodeI2dqmbYjdAX1skAURqNmABBq189:Vlcb49e3j3L3tqde1Rsj+skAWaBQi9","tlshash":"6ed18e3127ff975ce0f635b7061d7a467751195ccaea70a1100c72993a78470a86d3ba","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-10-13T15:47:08.740196Z","times_seen":1993,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/right6.9e96e0a5.jpeg","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.279Z","timestamp":1791906369279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/right6.9e96e0a5.jpeg HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546999\r\ncontent-type: image/jpeg\r\ncontent-length: 5513\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"5679-1791058362221\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5679,"size_decoded":5797,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"9e96e0a5327460f149797cf3aed1d2b3","sha1":"5a4141fa427be4f0fbdfc63875b4d34dab06211d","sha256":"9c729f94f92f750b76eb654ac4520b79661570d4f00b3b1fdb9b2423bbb3675b","sha512":"d81b0fb19daefd4e8f9738c2a805f762dfecdeccb246fc4de1d462edee9599187ac994f551b6fe74447e3d8400d56ac6e5408fab4dfb1d068e47cacfb90592bd","ssdeep":"96:WwDuVj05SZpcE6bIIPMKmm8jSQ+im3sboRaYKoOqSos2NsSVJPRcL:VuVjtUEaPMKmmeA3sERzar2uSdeL","tlshash":"55c19e46d39fa328ecfa2a37511f351ab3661a0728eefdc219e21c58e65114023c9d7c","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-10-13T15:47:08.740785Z","times_seen":1969,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zjtd.oss-accelerate.aliyuncs.com/upload/merchant-upload/selle/2026-07-14/eeb1d5e0-1475-4e9a-a6e5-6d1dc0ae0e03.jpg","fqdn":"zjtd.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.164","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.680Z","timestamp":1791906370680,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 20 Sep 2026 05:42:02 GMT","end":"Wed, 07 Apr 2027 02:26:24 GMT"},"fingerprint":{"sha1":"FA:C5:36:F3:4D:B8:AD:0F:8A:B1:F7:7D:B6:5B:A3:F5:2C:B2:96:1E","sha256":"8C:A5:7E:E0:95:9C:A8:DA:01:66:7F:8A:C2:FA:78:26:4D:D9:C3:43:F1:B3:3E:D0:1F:FD:24:00:10:92:3E:F1"}}},"request":{"raw":"GET /upload/merchant-upload/selle/2026-07-14/eeb1d5e0-1475-4e9a-a6e5-6d1dc0ae0e03.jpg HTTP/1.1\r\nHost: zjtd.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 534382\r\nConnection: keep-alive\r\nx-oss-request-id: 6ACE5242E22784BDE8F88E60\r\nAccept-Ranges: bytes\r\nETag: \"98B8C1D5B872D2132CFE0C6E63CB64B1\"\r\nLast-Modified: Tue, 14 Jul 2026 05:12:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14800421863501288\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000111\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mLjB1bhy0hMs/gxuY8tksQ==\r\nx-oss-server-time: 2\r\nServer: AliyunOSS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":534382,"size_decoded":534931,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=986, software=Android PLT140_16.0.5.1000(CN01), orientation=[*0*], width=663], baseline, precision 8, 663x986, components 3","md5":"98b8c1d5b872d2132cfe0c6e63cb64b1","sha1":"60f0dfd3152bffd50012dbadd1b5471d64d617dc","sha256":"e81f553e6894e197310db7d1692a88bc4839d358ab6cfcc7e4443bafbdd7a136","sha512":"106e105c4c73c03c951f0c11a7e7ff2a2ef230a30cd2e4f1530e16d47ae95f9c539253a37e437845fe0298fc947ee273c8f8723983643b7ed0f82bd80408fdc4","ssdeep":"12288:y04EKWqSv1x6oHGRvTgeS4C6tdqdnnrK55OrYha5Xh3ZW:y0dJHGRvo4LtknnVrYhax3ZW","tlshash":"85b42361ae6358d8c8e5bf30474bf428ea3c780ab584246cf8716318d4a7b97ed864d7","first_seen":"2026-10-13T13:18:30.209454Z","last_seen":"2026-10-13T15:47:08.741424Z","times_seen":3,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":112,"connect":22,"send":0,"wait":184,"receive":336,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/wap/api/sellerGoods!recommend_new.action","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.731Z","timestamp":1791906370731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 26\r\nOrigin: https://otbtaw.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":26,"data":"type=2\u0026pageSize=24\u0026lang=cn"}},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:11 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store, private\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27719,"size_decoded":10090,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"555be59780a6ae8065b5186cb2178487","sha1":"29df9df0a594a9a08b366f3f3564724d75f73541","sha256":"f784ceecc776332a5453ededbfac6ccf67ac20562f192c46534fcf6cc1717dec","sha512":"d205f0b3f8425898d8810d3c31b1050671067ad9fee36eb0f4f21221c0ebd5f0fe7a7196a12558edf42074999f5df2395840c64d578d8f690277da40251b0af6","ssdeep":"384:jn0XMbgKB1vtu87g+SNMuG5wiKg5Sw+/oj1KXRTOfTo9gite:jn08bg4BJ7g7pG5wSH+/oBKBTOfk2n","tlshash":"f2c2d862cbfa49200f5c02e68547775ea0bec62b6e738f5695bcde345dbc43a358082d","first_seen":"2026-10-13T13:18:30.271127Z","last_seen":"2026-10-13T15:47:08.742032Z","times_seen":3,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/fonts/element-icons.535877f5.woff","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.559Z","timestamp":1791906368559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otbtaw.cn/css/vendors~app.77c1315e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:08 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\netag: W/\"28200-1791058362221\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28200,"size_decoded":28445,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-10-13T17:07:30.473084Z","times_seen":30468,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.044Z","timestamp":1791906369044,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: CGDkp9+tXq+bK4sd70Y6Z23tVcuC9RCcesK3Akd2FrEXmMmXeM6fQiBqoAtvjnr6kpLx0DjxftE=\r\nx-amz-request-id: EZZV5T38YG0M8JTQ\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:16 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"87706f749b341f09c0d4f313a08fc43e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 29992\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29992,"size_decoded":30389,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"87706f749b341f09c0d4f313a08fc43e","sha1":"1509845938ec37024267488237d11e718cde9f13","sha256":"b7fe2721d939005c3d167ba39f1512ee5ba880a08fe370ab93dab990ff0a914f","sha512":"862ad1c48221a29e8fbeeef1be46b06d77617afd44de9e63598e0f746aa0277ef3c79366454df627aa6c12f465440d729d9157ba768922c90a574439df2d195c","ssdeep":"768:Gv6RenUljXtCiU+uKMHNDBp56HJJg0+Fz7P:GVnUlJFiuJ6FfP","tlshash":"67d2ad27aa50afd7b448d7a2ff030d862fda522c41d439de81d76b436b18b77480d1ad","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-10-13T15:47:08.743284Z","times_seen":9993,"resource_available":false,"data":null}},"time_used":6375,"timings":{"blocked":6076,"dns":0,"connect":0,"send":0,"wait":115,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/74320950-831e-4dbb-887e-09fbc2c1b501.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:11.229Z","timestamp":1791906371229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/74320950-831e-4dbb-887e-09fbc2c1b501.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: NVKJ4W0M83E9J9RJ\r\nx-amz-id-2: Ptr+roF4BIsBxudqNDxcQL+L5W7l/P7c28DXA2pZNbOo8/KXQ0jVpNSNuH9MhROKSo7yDGp/0+ppAkdV34R51HgAUED71DN0\r\nContent-Length: 138697\r\nAccept-Ranges: bytes\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nServer: AmazonS3\r\nLast-Modified: Wed, 22 May 2024 20:50:38 GMT\r\nETag: \"755beb0acc47fd21e538c3b25359b060\"\r\nContent-Type: image/jpeg\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":138697,"size_decoded":139115,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"755beb0acc47fd21e538c3b25359b060","sha1":"3ea9d8c04dc9f72448f2b72802065cca80a98b53","sha256":"9636ca3c7079d5e57d692b66104fd9c53854c54b9c074dc79c974d52fab6fc82","sha512":"9239457347dd2cc3f21401f59280fa233cf0f74d4d47415112e3666210e07410fabee8fd06346880890d5a0fa1211e3d2754bf6c7b83e7fd23e83d8af70cf2d6","ssdeep":"3072:EYIZstVjQOeoAYzeufLqX99sd9JGjY96eDdlswyo102lnkS:ELuBkoAYaKqX99sd9JDQeDd+wPnB","tlshash":"4ad3120e32b8b5bdeded11f0b19970bbbef5e15a4a830e4e1e8b650a57358457c4320e","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-10-13T15:47:08.743943Z","times_seen":2363,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":117,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/fr.0b412b0a.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.382Z","timestamp":1791906368382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/fr.0b412b0a.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546657\r\ncontent-type: image/png\r\ncontent-length: 716\r\naccept-ranges: bytes\r\netag: W/\"716-1791058362221\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":716,"size_decoded":950,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"0b412b0a96ef729e24bbd60b0dd535ee","sha1":"a0f9a25eb3aa460652b0eceb956c6f14afbfebed","sha256":"17a391926237ffc6809709d4c615d696a652c53e9b3c9ab2541ae47fc7752e70","sha512":"5657196e452e881096f5e150ce522af8653919bf94c265c3f73e4cbc69db9dea5ebbb477b1812b625aeac67e5415c29b339a0ae5bce14fb66e8d70e27c6e868a","ssdeep":"","tlshash":"7b0160daeeb4727a338e4424329e50e4a6260e96a12ccc189818a0cc780f8b144d070b","first_seen":"2025-05-28T12:12:11.64875Z","last_seen":"2026-10-13T15:47:08.744614Z","times_seen":10,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/js/app.ea6ce5bb.js","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:05.675Z","timestamp":1791906365675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /js/app.ea6ce5bb.js HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546655\r\ncontent-type: text/javascript\r\ncontent-length: 338111\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1283468-1791058362233\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1283468,"size_decoded":338405,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61048), with no line terminators","md5":"6b76e79993afee0d1d9c87541eba4ff7","sha1":"fbbf45dc473684605b9ad5d956ac018af7019853","sha256":"3ea4d70a9430e790df61b14312d36ace6194e3de3f2f926135a7d0849528772c","sha512":"710490bea45810b1a15f8c9400f189c593334677f84bd41ab57065cd8337a511275a92bcb14d0f3aab5546703ad85c687eacec56bc2af8c71e38dcaedb5941ae","ssdeep":"24576:KLYdgE5rAmBN7Nrz6VI3/kzoaYeRNnyye/5sYewGfkHmqusBg:KLYdgE5rAmBN7NP6VI3/9aYABlebrG8Q","tlshash":"84258dde67e577f80c984252a44f397932dc1cb6fb56e4e008fdc61922e5d86c223b29","first_seen":"2026-10-13T15:47:08.745236Z","last_seen":"2026-10-13T15:47:08.745236Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/b8a68172-576a-4457-b9aa-10c98bb46782.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.062Z","timestamp":1791906369062,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/b8a68172-576a-4457-b9aa-10c98bb46782.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: EEKECYA11KYEG01D\r\nx-amz-id-2: 2NyWLkZ0bbpAc6s/4BdigQcLQndvDDj+/81Ye1LYdc36ydJ1Ry2FrTLC8DQEmPysLsl33BEVX9SZ+Ent1SLPE1qSb9msgVqn\r\nContent-Length: 234396\r\nAccept-Ranges: bytes\r\nDate: Tue, 13 Oct 2026 15:46:14 GMT\r\nServer: AmazonS3\r\nLast-Modified: Wed, 22 May 2024 20:53:09 GMT\r\nETag: \"963cb56e987f75139a4206e2853821e6\"\r\nContent-Type: image/jpeg\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":234396,"size_decoded":234814,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x1440, components 3","md5":"963cb56e987f75139a4206e2853821e6","sha1":"ce71e1769f7261cd7b9a24961ad20fb7a59020af","sha256":"ca1da66523d750de307c04335a1c1c6a4a5984b6e18740d6a9b5d05328a83eb3","sha512":"32b60068394c931060c1753e698783852cf5287a33a02520531964297d9f7c9b2a075a104400d58371a38b39e90f79349952df52f99ce456d4a43da248fba813","ssdeep":"6144:hEAd94lqhbTQUovlU065PNq7FHQpTmsx/:hpd94lEE/Nc5w7Fwt1","tlshash":"de3423f953a91d48d25c2b303153934d7ebd68f3ebe22b319440240b0efd590f55a5ba","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-10-13T15:47:08.74874Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":7335,"timings":{"blocked":130,"dns":0,"connect":99,"send":0,"wait":130,"receive":1712,"ssl":5263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zjtd.oss-accelerate.aliyuncs.com/upload/merchant-upload/shopAvatar/2026-09-04/216999cf-de5b-437f-a5fe-6c0295224de1.png","fqdn":"zjtd.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.164","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.695Z","timestamp":1791906370695,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 20 Sep 2026 05:42:02 GMT","end":"Wed, 07 Apr 2027 02:26:24 GMT"},"fingerprint":{"sha1":"FA:C5:36:F3:4D:B8:AD:0F:8A:B1:F7:7D:B6:5B:A3:F5:2C:B2:96:1E","sha256":"8C:A5:7E:E0:95:9C:A8:DA:01:66:7F:8A:C2:FA:78:26:4D:D9:C3:43:F1:B3:3E:D0:1F:FD:24:00:10:92:3E:F1"}}},"request":{"raw":"GET /upload/merchant-upload/shopAvatar/2026-09-04/216999cf-de5b-437f-a5fe-6c0295224de1.png HTTP/1.1\r\nHost: zjtd.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 31253\r\nConnection: keep-alive\r\nx-oss-request-id: 6ACE52424C216DE322F4EF5D\r\nAccept-Ranges: bytes\r\nETag: \"127446A05B559BDA32FF48188675A9C3\"\r\nLast-Modified: Fri, 04 Sep 2026 04:49:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7612165149374222954\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000111\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EnRGoFtVm9oy/0gYhnWpww==\r\nx-oss-server-time: 1\r\nServer: AliyunOSS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":31253,"size_decoded":31802,"mime_type":"image/png","magic":"PNG image data, 193 x 193, 8-bit/color RGBA, non-interlaced","md5":"127446a05b559bda32ff48188675a9c3","sha1":"2c523ee62116f301aed0b32a325a7efc64ccd4c4","sha256":"1cbd8437e4e7fe6a976a5f9d275b8ee6c8b4c0fe0cb5c9d05988043b82f0e051","sha512":"ccca186f3b2af24b823bd1c3dbc868db811c9b5ce966455b3312be991d3243b06af98cc5445f3ef8dbf5fe0a12a1523a680930b33dd800423622ebc052eb4b3c","ssdeep":"768:XHpEIy9bjD/UNeyQbAD3arUdUW3AvO3hw1znTfu7rHFI1a:ZEIy9fINjwAD3arUdUCuO3G1/GHaY","tlshash":"7ee2f15302c7a2529bdd3d8f5075bfd100c868caac387f1238f372817e66a54b60daa5","first_seen":"2026-10-13T13:18:30.254208Z","last_seen":"2026-10-13T15:47:08.749866Z","times_seen":3,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":97,"connect":22,"send":0,"wait":185,"receive":7,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/wap/api/newOnlinechat!unread.action?lang=cn","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:38.360Z","timestamp":1791906398360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /wap/api/newOnlinechat!unread.action?lang=cn HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:38 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: no-store, private\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":341,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"472e9a7530675f76d965067fcba6278d","sha1":"e1fdae764ba06c37792e7b2a2549c88cf3350b09","sha256":"26de7e215697f7b90d77581633fd7fe0b379ba230d1a9c1a0b502ed862b3f5bd","sha512":"7f765b18a1b6f5818daf3905ed24ae9f4283248ac7a41bfcca65dd1be696c9a741d510629b6134940784b3cb832fe3be7fa76881cb2d01f226e1246a70039e7a","ssdeep":"","tlshash":"47800000280e2c0b08032088a88c3a0080ae22a308c0cb308e8cab3080ae2b22000830","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-10-13T15:47:08.725776Z","times_seen":8826,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/fonts/iconfont.0080bb9b.woff2","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.297Z","timestamp":1791906368297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /fonts/iconfont.0080bb9b.woff2 HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otbtaw.cn/css/app.3b1e4198.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546655\r\ncontent-type: font/woff2\r\ncontent-length: 5212\r\naccept-ranges: bytes\r\netag: W/\"5212-1791058362227\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5212,"size_decoded":5449,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5212, version 1.0","md5":"0080bb9b021fc0823608910adc2e5fdb","sha1":"b03c86fc4fb5e0542122925d2eb2468cdc842dd3","sha256":"a72e9b48fd851011d2e52a77ae7f72b6de42e4647182c7bae3ca49edf3347af4","sha512":"aa68b80986d5ebce07a92a36839e2b7f4365932ac12c992864ebb4a4e49ab9964e39464d9da1b79a0f963947a669176c3f65b23ef4e4203e520a790bfe6b0756","ssdeep":"96:vSvxwJyBbfhD1WrBqAFtlzkqV4tQWGRGQX/rZHhxm9Sy4kUf6:vS5H1p4FtlwqV4tOGQXtBxm9SpkUi","tlshash":"94b18f888c661528cf387a353840367dc9a3130db636e49acae41f1b57ab78a0159761","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-10-13T15:47:08.751037Z","times_seen":8198,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/ja.ce3d78ad.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.399Z","timestamp":1791906368399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/ja.ce3d78ad.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546659\r\ncontent-type: image/png\r\ncontent-length: 856\r\naccept-ranges: bytes\r\netag: W/\"856-1791058362224\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856,"size_decoded":1090,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"ce3d78ad6e79b06257e55272fcf24928","sha1":"95f79793fc8a57b0b096661835773e9ce6592a0d","sha256":"53c45517a2fb43f1ea9478e3c2c7c232bad13772666f2954ed3d3a76516edf01","sha512":"66613b84156c073c8e949fa3d8778a3038370d3a202c0cb2af176aa9f7ee5cc914c84c8cfde4220b6c76317418211bc39d8c0ad5744acddb09c983552e133424","ssdeep":"","tlshash":"811186e4a30ff9b0e611c55f1b744819dc750db10a49ea9fca154830d4b4ed91c37b98","first_seen":"2025-05-28T12:12:11.667869Z","last_seen":"2026-10-13T15:47:08.752212Z","times_seen":10,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/ar.e6d61e04.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.408Z","timestamp":1791906368408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/ar.e6d61e04.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546659\r\ncontent-type: image/png\r\ncontent-length: 698\r\naccept-ranges: bytes\r\netag: W/\"698-1791058362228\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":698,"size_decoded":932,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"e6d61e04658754e729796b57ea23165f","sha1":"f1310764ffd6998a445e59e6d02379f16aaeff95","sha256":"3868ad8d57e582365cdaa307d3f2890006615cc4e06ef06153abd7426e625e10","sha512":"a517434101ef73217f947d900ebf9978fcde403fb100d33d686a7a0aac8b3caa28374dec6a927f5b2cff27f5eb46cc861e32ebed17a0199185b1f5f7737f00ef","ssdeep":"","tlshash":"900144d8f2e8d27485595c165918a03aa737649891bb743a5d44c20e5225e392944385","first_seen":"2025-05-28T12:12:11.65727Z","last_seen":"2026-10-13T15:47:08.753353Z","times_seen":13,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/home-icon5.a803320d.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.421Z","timestamp":1791906368421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/home-icon5.a803320d.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546660\r\ncontent-type: image/png\r\ncontent-length: 1094\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1068-1791058362223\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1068,"size_decoded":1377,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"a803320de09a8dcb14b518331b457f21","sha1":"06b2a9cafc2a077ce82c4a3a2ccc6ff29e29c175","sha256":"0e507cdcb59ba23063f62eac16b694c457170664c332f25bb6d2185e4ecfd7a4","sha512":"4c3ca7c6e1913d8cfa1791bf2931931eac3ed60da63bfd3aa17c1d3c03e789042f6841f673b955b3eadb53a3cf2520ed8985349026bd6606c7aa2500387c23cb","ssdeep":"","tlshash":"2811869de74e2a26d7427afda102e24159b32011082484798c9156d65c3855d79adb03","first_seen":"2026-03-30T12:42:28.690443Z","last_seen":"2026-10-13T15:47:08.754428Z","times_seen":23,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/home-icon6.d4a59bab.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.424Z","timestamp":1791906368424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/home-icon6.d4a59bab.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546661\r\ncontent-type: image/png\r\ncontent-length: 706\r\naccept-ranges: bytes\r\netag: W/\"706-1791058362232\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":706,"size_decoded":940,"mime_type":"image/png","magic":"PNG image data, 50 x 54, 8-bit/color RGBA, non-interlaced","md5":"d4a59bab8ea81ae5ec6960b734288677","sha1":"0de35cdbd2f16bcf153366a900723dc663718120","sha256":"1b01779d23030ed5d3eb4741fa5cb77aeef8bccbd5cbbc3a5715a66484adf34f","sha512":"66d5a69a5268ac0464c92bd833f3183c8b6f92fe4b19fb2f7e2898f0559f69923f81689bba985afffd83ae7d7955b5a5caf49384d1e27ef956d652000826b273","ssdeep":"","tlshash":"7a0110ceab68e02fb5830e7629af114c792a13d4627605167e1268aa1d43c8084a3b93","first_seen":"2026-03-30T12:42:28.763222Z","last_seen":"2026-10-13T15:47:08.755254Z","times_seen":23,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.038Z","timestamp":1791906369038,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: m1BiSONnc3kWUJyWCjk+G1B4KZ6Bz5XNhH54tDTMC5wVpRD/9Lo4aVoyg1uIUnWgi5C//PNXfcI=\r\nx-amz-request-id: EEK46GPA28M6QTRK\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:15 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"a5941f987a0fe015714bc8b8cde4baff\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 44216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44216,"size_decoded":44613,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"a5941f987a0fe015714bc8b8cde4baff","sha1":"88c88146f9813942943df5777e08d4486db3040a","sha256":"41da4ebe3b85b5ca006db2a633baa60593618feeb72f3db99e110d74e1cbd918","sha512":"937d3c4add07ef443e201c34e73eef5cf558a781c5112a81719a989e4ff4c2cc29f2bf35739cec929988409694a4518fe862820b2fb6c18d71b4195954700628","ssdeep":"768:GTRG9BPKCHP1oTrfNz7uVdkyQ5CmHjrYaBsDTtk9GbLf+H:GT8QgP1oTzB0dkyQ5Cm7Bs/u9+CH","tlshash":"52139d478e489f835014d3fd3e079e6d6b891b0c59893aef19b31eab3f216521c8e54e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-10-13T15:47:08.756079Z","times_seen":9979,"resource_available":false,"data":null}},"time_used":6095,"timings":{"blocked":-1,"dns":5,"connect":93,"send":0,"wait":119,"receive":551,"ssl":5324},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/right5.44b8369f.jpeg","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.278Z","timestamp":1791906369278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/right5.44b8369f.jpeg HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546991\r\ncontent-type: image/jpeg\r\ncontent-length: 5903\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"6060-1791058362222\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6060,"size_decoded":6187,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"44b8369f97d209638d14f43e1311cea6","sha1":"a0a4552bd9e8c5e76e852201f043e22523efd828","sha256":"95e5270a5cb760dc32383b20becb82c7e07cb66d89cadfaa134852841280ec37","sha512":"852d8c9352bad527aded0050836e7e81d8506f560bd0fa7d89d31a88e5852a07946de0ce42bc38e02df520592792160c26a3c2f2441bfc61a7a1f42728b870b4","ssdeep":"96:WwDgePNhAR+ZJwZ2L0NuE7wY9WblkOR3S74MH/dhNVYH4uQ998h6PQyOe:VDwROwZ2g0KwCWbxRCkMH/xVDj8hkQi","tlshash":"66c17d4104eff707f9e39139539cb33cd68b3c419909231b4e54b870a5db7915aad126","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-10-13T15:47:08.756837Z","times_seen":1992,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zjtd.oss-accelerate.aliyuncs.com/upload/merchant-upload/selle/2026-07-20/c823d7f0-d790-4a14-b5fd-b2287c270653.jpg","fqdn":"zjtd.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.164","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.667Z","timestamp":1791906370667,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 OV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 20 Sep 2026 05:42:02 GMT","end":"Wed, 07 Apr 2027 02:26:24 GMT"},"fingerprint":{"sha1":"FA:C5:36:F3:4D:B8:AD:0F:8A:B1:F7:7D:B6:5B:A3:F5:2C:B2:96:1E","sha256":"8C:A5:7E:E0:95:9C:A8:DA:01:66:7F:8A:C2:FA:78:26:4D:D9:C3:43:F1:B3:3E:D0:1F:FD:24:00:10:92:3E:F1"}}},"request":{"raw":"GET /upload/merchant-upload/selle/2026-07-20/c823d7f0-d790-4a14-b5fd-b2287c270653.jpg HTTP/1.1\r\nHost: zjtd.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 22704\r\nConnection: keep-alive\r\nx-oss-request-id: 6ACE52424E6A6AC0A1E17AB7\r\nAccept-Ranges: bytes\r\nETag: \"1FEE5C5C8562009023CE6063233055C3\"\r\nLast-Modified: Mon, 20 Jul 2026 05:13:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5844328035547086805\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000111\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: H+5cXIViAJAjzmBjIzBVww==\r\nx-oss-server-time: 5\r\nServer: AliyunOSS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":22704,"size_decoded":23254,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 692x597, components 3","md5":"1fee5c5c8562009023ce6063233055c3","sha1":"97182dfa29c772190125025a7c881d4851c75ac5","sha256":"8624ca078c76553885703067a88e97e8d139fbbd55086ec567606bc114dbe632","sha512":"7f8f417ce0644448010967db10cd0782df6775c8f5e37e16b1f6dc42a676859238cfa93f1dc0b44c47771d47341aa2ef8dadebda66da5fb50b776f64e8c15655","ssdeep":"384:Nqhk3KrrmQzPOFABQ0tEh6Z4HC590EuNkXfPI:emKRPIAq0S6ZC+9XuaY","tlshash":"50a2af39add9a1eeec1e377b42a79921b7c60be4aff380547f8dac348e7114485014b6","first_seen":"2026-10-13T13:18:30.252192Z","last_seen":"2026-10-13T15:47:08.736418Z","times_seen":3,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":124,"connect":20,"send":0,"wait":186,"receive":3,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/js/chunk-c180cb20.9424473c.js","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:07.942Z","timestamp":1791906367942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /js/chunk-c180cb20.9424473c.js HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546655\r\ncontent-type: text/javascript\r\ncontent-length: 5718\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"22422-1791058362240\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22422,"size_decoded":6008,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22398), with no line terminators","md5":"bc1180f185d310c21066a2ec9f859848","sha1":"6709599b780587ef11f001ad1173a8f0b542c9fb","sha256":"9937e3928b3152ba6db89b92165ed0882489697af76d87999d5dbf4666d63bcf","sha512":"315f80858274b2c73ec4be438b6187e73c7b3302d3dd1e5b88467e13219eaae97b6a2004853f11a46675ebf766b3c4d1a0b455fb7981715bd915fc0525004593","ssdeep":"384:PkqsXsgHCXkowLGMnhuhJElATqyB2V5LN/kTylpY8mHq8uMI7:VRXQGMhuhXP2V5LN/3AHq8uMI7","tlshash":"a4a2c84ba493a87c5967b1c634172259b0363f81e401c8e6b57cdce5d2e5968332fb6c","first_seen":"2026-10-13T13:18:30.321525Z","last_seen":"2026-10-13T15:47:08.75761Z","times_seen":3,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/shoplogo.8376552b.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.376Z","timestamp":1791906368376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/shoplogo.8376552b.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546655\r\ncontent-type: image/png\r\ncontent-length: 45009\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"45298-1791058362223\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45298,"size_decoded":45294,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8376552bda545ccce3092fc7b57457d7","sha1":"64ced2a6a7d4e64c429f4534c8a61bdb485c49bb","sha256":"a5fc14753d94bcb3897e373b675cf2e087670f99b9c4db4c42b14eb15f78b2ff","sha512":"48dcdb5b7b27525aca28330f1941551e9c34e3ef2b0575b614d926328f087f17fdf4eb799d4de66ebee3ab9e7dcd65e4fd0fafd12eaa6362dbfd2fd8933da029","ssdeep":"768:GGydTBhmTyeXH11+i+99H7Q29oPkaXgP+YO0que1wJLkcZg3AYfWKTxBBvt9Wino:3ydVQjXSz8km0+Mque1lT8KTRt9W0BZI","tlshash":"0a13f15c9c19bbe4787be58ab9cccf266ad37b4921300713aedeb570d7a62c14407942","first_seen":"2025-07-06T12:22:34.683537Z","last_seen":"2026-10-13T15:47:08.758412Z","times_seen":68,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/logo.8376552b.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.427Z","timestamp":1791906368427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/logo.8376552b.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546661\r\ncontent-type: image/png\r\ncontent-length: 45009\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"45298-1791058362229\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45298,"size_decoded":45294,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8376552bda545ccce3092fc7b57457d7","sha1":"64ced2a6a7d4e64c429f4534c8a61bdb485c49bb","sha256":"a5fc14753d94bcb3897e373b675cf2e087670f99b9c4db4c42b14eb15f78b2ff","sha512":"48dcdb5b7b27525aca28330f1941551e9c34e3ef2b0575b614d926328f087f17fdf4eb799d4de66ebee3ab9e7dcd65e4fd0fafd12eaa6362dbfd2fd8933da029","ssdeep":"768:GGydTBhmTyeXH11+i+99H7Q29oPkaXgP+YO0que1wJLkcZg3AYfWKTxBBvt9Wino:3ydVQjXSz8km0+Mque1lT8KTRt9W0BZI","tlshash":"0a13f15c9c19bbe4787be58ab9cccf266ad37b4921300713aedeb570d7a62c14407942","first_seen":"2025-07-06T12:22:34.683537Z","last_seen":"2026-10-13T15:47:08.758412Z","times_seen":68,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/2.051a3cfd.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.430Z","timestamp":1791906368430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/2.051a3cfd.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546999\r\ncontent-type: image/png\r\ncontent-length: 1131\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1110-1791058362228\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1110,"size_decoded":1414,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"051a3cfd941ac45c1d82b4ac0de24c93","sha1":"b209c60ca57392d554dc9e31e0b3fef2b9547873","sha256":"5d477b42ff592b43fc4e81be153524c633840c2ff45bd6971aafd977aeb19762","sha512":"25e0f69be80e72eb4485558fae4e0a0241c7d506138ea7f4cbabe7a289492b708535ac0b7bd3aeae371153bf952938766df1effc91cecf07d06a929c9555d214","ssdeep":"","tlshash":"5011b99a6fe27810c35e40eebdc4c06475db8ff83921351e1619bad61f7993de8480d0","first_seen":"2025-03-28T23:30:12.862236Z","last_seen":"2026-10-13T15:47:08.759744Z","times_seen":10,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/09f4347f-2277-4985-9f28-668a55470136.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.065Z","timestamp":1791906369065,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/09f4347f-2277-4985-9f28-668a55470136.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Q8FIKn1jTIUJBf1ig0rDrwulgsROkCOM7Onafnvpa2JRCPTPweFz8JQlkM74u5bTKrJRCh0D74SLdXbyV06QNFgYHRMMTRLp\r\nx-amz-request-id: QCSV7C20BTPW9516\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:10 GMT\r\nLast-Modified: Wed, 22 May 2024 20:46:46 GMT\r\nETag: \"6c0d8870785f0488d0b7142263a15170\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 117525\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":117525,"size_decoded":117943,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1417x1500, components 3","md5":"6c0d8870785f0488d0b7142263a15170","sha1":"aba57b51e93b5fd1a624f84850eadbaa1c110bad","sha256":"3a90f757acc9d4e5d3088beb21be69f9542bd7e056d6a936d4b920ed7286b665","sha512":"04e4da2f923f15b3c32d6329c9e2f1cbe4ce58f8f09fd03823529da74504d1fedf8317083b1ed370ae9917cb5fade27933d50d4506c1b1e22f373e6d421c7551","ssdeep":"3072:FpBFO7JLZw6p1LoD9WiupE9nfmQXdxt+jm9p033qF:FpBFO7brLoD9WiUEFmELtZp06","tlshash":"f0b312f876a8e373cb7a3e3801d9e95e9c62d16e653ed4524c79144d30100f6c9ce9ae","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-10-13T15:47:08.761308Z","times_seen":2476,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":168,"dns":0,"connect":91,"send":0,"wait":127,"receive":243,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/selle/2023-12-01/0b121c30-4d55-46df-92cd-e7e79fed7a83.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.678Z","timestamp":1791906370678,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /selle/2023-12-01/0b121c30-4d55-46df-92cd-e7e79fed7a83.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: EEK3Y4V1RWTQ7NAQ\r\nx-amz-id-2: hm1IzF6LpOfBqoTAJAfWpMzghvE364dPNFQ/Gl2rIOaKeOggX4mkX4DT05hB6e91xkUyMysG3GM=\r\nContent-Length: 268274\r\nAccept-Ranges: bytes\r\nDate: Tue, 13 Oct 2026 15:46:14 GMT\r\nServer: AmazonS3\r\nLast-Modified: Thu, 23 May 2024 01:44:49 GMT\r\nETag: \"097d83a8f1d7e6cddb5185b4a4ba2535\"\r\nContent-Type: image/jpeg\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":268274,"size_decoded":268672,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 960x1280, components 3","md5":"097d83a8f1d7e6cddb5185b4a4ba2535","sha1":"ab81671e01e6eba67a4a834fa72186151180e0c5","sha256":"0ebd81023c36c931438eae38509e5b57f99193ae7b3441fc53f4001596980a4a","sha512":"c42e6a86e572eda0c00d6aa31142246d151b0e43748c4854f1cee9b6b492a38d5a982b841afde99c97dd641846fdb8333c355929821e5cd41cb4d62829f5c854","ssdeep":"6144:0AX0jPj12+Y21EFnxnB/NZZ85wy7z2pTEabsv:0AX0jb8r2mnxBVZZawy7zoTEabsv","tlshash":"7f44235a4bc2f0a0ee7eb221cc58d94d32c7f8bca05e985917461c6cfac90dc5a5366b","first_seen":"2024-05-25T22:56:10Z","last_seen":"2026-10-13T15:47:08.762327Z","times_seen":974,"resource_available":false,"data":null}},"time_used":5899,"timings":{"blocked":3918,"dns":0,"connect":0,"send":0,"wait":116,"receive":1865,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-15/06a0b04e-09e1-41ac-a5cf-166c098d530a.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:10.689Z","timestamp":1791906370689,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-03-15/06a0b04e-09e1-41ac-a5cf-166c098d530a.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: S1glh5cQXqDT/6kTIPHEauBx4vcPNbt5zxleamqIy8QMW+GsNxgwLOodIX81E5OtLlU+rWWn7peHRLsuuESFnE9oa86SumGE\r\nx-amz-request-id: 3KFYFJY9AQ5K43P4\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:38 GMT\r\nETag: \"2496b5f58efde072ecd0bce81fc5fa81\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 7351\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7351,"size_decoded":7805,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 274x184, components 3","md5":"2496b5f58efde072ecd0bce81fc5fa81","sha1":"72b0ff43dab1e217b2908fadd5e39e2da7b28aac","sha256":"ead216638492bc0d63a4bb42e9b8578a8366d37badb836d2be2f65c1a7066449","sha512":"d6bb1eb21f108053f6902a0782c64e79ef9306f15c8bdc040cfb838080912b87c7bc33b2beaca84224b4d513d7cfc2b9aa504a01ebddfb95278e3454ce79f870","ssdeep":"192:vMPMEcgpqpBB5HJig5pfA2ZIeM1lDV4SAAwet:DP7Bri7apeTaTs","tlshash":"5be1af61c1396716c8d57ef7435e3a234f09e809231ca3b2d71a32ad8b0319caec3a25","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-10-13T15:47:08.763328Z","times_seen":1980,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/f6acb799-6e3d-40d7-9dea-f88b73ddc661.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:11.218Z","timestamp":1791906371218,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/f6acb799-6e3d-40d7-9dea-f88b73ddc661.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9B0JuprrJ2PCrRoesVOK7cVKUAQbxxEv/acKudWFCTvJTz8DxXFdRUikzRqZbLXw9ycKLMHgzpHXiqM7Df2m97WyZ5raXG0v\r\nx-amz-request-id: NVKPF8XK123WNCNE\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:12 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:24 GMT\r\nETag: \"188e058e6f7fbe9ad0a5f77351993576\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 58343\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":58343,"size_decoded":58760,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 887x658, components 3","md5":"188e058e6f7fbe9ad0a5f77351993576","sha1":"5aa78ff88b30cbd54edb475d4275fc0d4218497f","sha256":"0c05def09a06513f1f4642a32933517dae2a570113bee37d42eb032886be835d","sha512":"bdf8a4a595692fbe4e7852b784846f1a76a87e36bde4e0a4d20eb190020965784572ee99ea2df88e46b3f22048cc6b2a04fd179d1796a7ab3b4911a699a230a8","ssdeep":"768:1708n17R4+OZnvTjYIoH3etV6CFmPxPoLsRkmVNIHEGjLF8asgzZ0vc/aT39Carl:d07BTjYfXet3mZPoLgknF8BgkB5rDZ","tlshash":"3643f260337882f3f1bbb8386b8d3a1a5b55b4975382cdef11126db2ab07a51745438f","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-10-13T15:47:08.764168Z","times_seen":2497,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/ko.64708b1c.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.402Z","timestamp":1791906368402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/ko.64708b1c.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546659\r\ncontent-type: image/png\r\ncontent-length: 1664\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"1636-1791058362222\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1636,"size_decoded":1947,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"64708b1c72e0ece25e8724c2ae12934a","sha1":"fbfffd7c0ce837f59ccd7fd50510a8e2e4b1c70e","sha256":"4c250a545a374a2a400e9c07f1d0cb156b55d494c752dc79ef1f56cb8e25f04d","sha512":"b5c44061c0a4fbe9cdcf40d24506b315d7a8ecc0ca5dd38fc729820f1d0744dc18a7d39e2a461ec525deafc6fbd9c34c3ac02ba4cf177d0c9e62a2271c8c874a","ssdeep":"","tlshash":"5e310a1e9b17120da7974d72e446351622329a152db90150ea36cf2d8bd11205cc537e","first_seen":"2025-06-02T11:17:40.663781Z","last_seen":"2026-10-13T15:47:08.766086Z","times_seen":9,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/id.abbf5f2c.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.414Z","timestamp":1791906368414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/id.abbf5f2c.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546660\r\ncontent-type: image/png\r\ncontent-length: 466\r\naccept-ranges: bytes\r\netag: W/\"466-1791058362226\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":466,"size_decoded":700,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"abbf5f2c50ade511e4d182fa1caf6eb1","sha1":"5ba91907f5d8b287f65370633a08a94dc1316ab2","sha256":"53e445e3f32629f1c688f11260a248da2e304cdd66c98802ade4daf40c7454e4","sha512":"b05a6adf0a84cb32e1bebc1612744c25d456e0f27d3defebca0b6f6aed310deb7771e5e2d7840eba6aa0987e765bcf256668e379171297f264ce9f20e50f1eaa","ssdeep":"","tlshash":"b3f0d4c2fb15aca8c89e49bf1d3b5921ae7f9413d0a7a20d2414c15c0601dca440cb43","first_seen":"2024-10-06T15:48:22Z","last_seen":"2026-10-13T15:47:08.767024Z","times_seen":20,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/home-icon2.ea9908ed.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.416Z","timestamp":1791906368416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/home-icon2.ea9908ed.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546660\r\ncontent-type: image/png\r\ncontent-length: 924\r\naccept-ranges: bytes\r\netag: W/\"924-1791058362226\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":924,"size_decoded":1158,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ea9908ed605cb2713cdb29b001fb1117","sha1":"ee63eafd9fe4f2a0664c456678a0d6eab8a46f68","sha256":"80269b0a69ee976d1c0c655f7ec44bfd3904ac3448f6f6ffe1d5561f643518dd","sha512":"e9186ee27137fc4eb901544e4e08d907a3030b5632af03b1a50088085e66974517efd1ff41cc61a81a4a38a806afcd48aea34e21698042ed75a3f1ac87bd5539","ssdeep":"","tlshash":"1011b7eba103137d931ee05775129071707aa04e2f1bb5f07f8459bf05c08b2e685153","first_seen":"2026-03-30T12:42:28.744788Z","last_seen":"2026-10-13T15:47:08.767876Z","times_seen":23,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caishizai-tk-mall.s3.amazonaws.com/type/2026-06-02/94ed400d-a078-4580-9b61-1a61e8821f41.png","fqdn":"caishizai-tk-mall.s3.amazonaws.com","domain":"caishizai-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.161","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.019Z","timestamp":1791906369019,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /type/2026-06-02/94ed400d-a078-4580-9b61-1a61e8821f41.png HTTP/1.1\r\nHost: caishizai-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: QCSKJVRBNZPF1RRS\r\nx-amz-id-2: zOvldrvyeNHOg8lM86os4uvbJMsbowCw5akB/KUtfysmmGAhlhMxTPhhhVA5Xb9Gk8oPn2k/xG2KPtc2QgS/u8SRLZDHx0QK\r\nContent-Length: 899348\r\nAccept-Ranges: bytes\r\nDate: Tue, 13 Oct 2026 15:46:09 GMT\r\nServer: AmazonS3\r\nLast-Modified: Mon, 01 Jun 2026 17:03:39 GMT\r\nETag: \"088edf88f59990003d8f3ee8836fa6f9\"\r\nx-amz-meta-myval: test\r\nContent-Type: application/octet-stream\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":899348,"size_decoded":899804,"mime_type":"image/png","magic":"PNG image data, 1024 x 576, 8-bit/color RGB, non-interlaced","md5":"088edf88f59990003d8f3ee8836fa6f9","sha1":"f4c553abe70f0f0ebb077e5dc081abadf48ee38c","sha256":"e06b0f315d030a03393d96972fcce693b11e43c9c95b2a98b125b3b1d01d28fc","sha512":"54a330884fa342e4b62e7c2325e497bae71522490a9c9a24af22cccc517a5e4b93697459fe5dd6dcb68bdd5c9367e6d71310c8364dc685e2e6710aff1a66ace9","ssdeep":"24576:YP8vSk4GfwhTOC3vyM496ztYFYoEoxw0rdUEykPR9qk:YT+sTx3vyT9IpoE6w4CvUvD","tlshash":"e1153385624c5c36c907fc51e8513c22a6b93edd7a41a2ed2cf4e4892573fa37173aac","first_seen":"2026-06-29T00:53:10.755126Z","last_seen":"2026-10-13T15:47:08.768723Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1689,"timings":{"blocked":-1,"dns":9,"connect":184,"send":0,"wait":209,"receive":918,"ssl":368},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.046Z","timestamp":1791906369046,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: z3jqc2ryWXiK1gca5J30GM42sBkTEaCpGLFfhGkFw22xjPkeojYAh1aKl/5upxNUReEX7nbTLAA=\r\nx-amz-request-id: EZZHHNRHQRYV62YE\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:16 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"6a85f34af56b3c034d5137d4ec807895\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 49034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":49034,"size_decoded":49431,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"6a85f34af56b3c034d5137d4ec807895","sha1":"75fd4cec7f44e8b8f20655dfdb165720d7223bd6","sha256":"67488643bc9d3ae11bd5cababff694c1f7a131c289d81eb79e25576f78dd4fa8","sha512":"d827fa0cf605ede5b060c72333d4552c1a930b0d8eec8052ba78949ea5e54a58bf0addbef05e024159a196589abbadef866f8c4d5f3c34722ebe1d9757563f9c","ssdeep":"768:G6O88eZQudaEcS6tJCXfvmmxmxwc3ndr/8wP/x49gE3bjt1Txv7ZJ:G6OYAESJCnm2IF3t/8wB49giPdFJ","tlshash":"5523e18725805ee3352fe3f6ff065ae80f088f64d1263edb21e54f98b312a238595428","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-10-13T15:47:08.769571Z","times_seen":10109,"resource_available":false,"data":null}},"time_used":6591,"timings":{"blocked":6289,"dns":0,"connect":0,"send":0,"wait":119,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/d9a4f743-88c7-49d5-8f27-acd79169d134.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:11.223Z","timestamp":1791906371223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/d9a4f743-88c7-49d5-8f27-acd79169d134.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-request-id: NVKV8SEC7HDS2Q3N\r\nx-amz-id-2: CsrKGwOht388heJdUopMRTdu1u75oIhje7G3FMCo0OpxiFN9poN1Lx5EwXhxnfZYr4l0BuCHEGvcMkwdvsmhUqUE7ZG1pI9q\r\nContent-Length: 62006\r\nAccept-Ranges: bytes\r\nDate: Tue, 13 Oct 2026 15:46:11 GMT\r\nServer: AmazonS3\r\nLast-Modified: Wed, 22 May 2024 20:54:21 GMT\r\nETag: \"5eb7c18e0164431bc4ebd5432142d478\"\r\nContent-Type: image/jpeg\r\nx-amz-server-side-encryption: AES256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":62006,"size_decoded":62423,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 992x798, components 3","md5":"5eb7c18e0164431bc4ebd5432142d478","sha1":"0e7463b4754fba04259090a3e6c70865b6acde18","sha256":"c8e8e1655371e5817147fb849721d215226bb8f03e99bee89e9b3217f91187ba","sha512":"0dfacb79d468692bb1e777bfc2311eb6ae4f4de8d4f1d4f273a6e918a7538cc7f7450c577a7978b281b8c7c8a8f1cd224675df0ed5af052e11f82ec4acbc3af5","ssdeep":"1536:VBqvv4Wcx0q5rQdsUVr80gBJB0t+QZb2sG1/:wv4Ws0gUyUVrRgBJo+QRGR","tlshash":"0c53128569a9b165db633ab88e06708efc0f2ca6eef70074210dd3d93074af1bd4a45c","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-10-13T15:47:08.770403Z","times_seen":2492,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/it.ae85fd77.png","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.389Z","timestamp":1791906368389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/it.ae85fd77.png HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546658\r\ncontent-type: image/png\r\ncontent-length: 641\r\naccept-ranges: bytes\r\netag: W/\"641-1791058362227\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":641,"size_decoded":875,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"ae85fd7736693d17507495d0da938de0","sha1":"d15c138b4ee1a6ae8d72df9c1e1b0466be168b2f","sha256":"821abf6837b0dd9171052a3ef47027b0b7fcd054ba83ee5b3b400772714173c0","sha512":"d3ad6f695c8ca5cfbac351b6a1e82e3e71542cd3e9ca40142a0d6763418564f83e0157959afb1722873833955c048cb76a52b402b939657a519f038ae6552515","ssdeep":"","tlshash":"b4f068b15ff2b8ffda4d029560d534b5d53524139c1897ecf8001ca699128140015732","first_seen":"2025-05-28T12:12:11.650624Z","last_seen":"2026-10-13T15:47:08.771176Z","times_seen":13,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/fonts/element-icons.535877f5.woff","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:08.294Z","timestamp":1791906368294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otbtaw.cn/css/app.3b1e4198.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 13 Oct 2026 15:46:08 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\netag: W/\"28200-1791058362221\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28200,"size_decoded":28445,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-10-13T17:07:30.473084Z","times_seen":30468,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/js/vendors~app.28d1b24c.js","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:05.677Z","timestamp":1791906365677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /js/vendors~app.28d1b24c.js HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546655\r\ncontent-type: text/javascript\r\ncontent-length: 668431\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"2773940-1791058362245\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2773940,"size_decoded":668725,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60987)","md5":"e7a0194493e4cc57dd0c6fd7f8b61cc8","sha1":"d952baab3848810776c2429a4b8c1dd2e53130e0","sha256":"7777a4dc22c8b3dacd991e762fc82f9c0a8cbadae7cee4ae1555d7164d8bac3e","sha512":"7b09495088e3459be6e11bfd23cf17d529adfaf777b9382154d87bc316fce1c78a1d16e90685218817e58757a580566ceb40fe22dde9916fd309002645fef4c8","ssdeep":"12288:DvPagzN2ory6pkAFIgeAwayAGpTegZf4rpoDpSMCW1/aV:DvPl2oryhyG/TeQ4rWe","tlshash":"b42507cd72d6f06247a320b5406f140bf33a2a69680d8468f675e8da7c7990d927bf7c","first_seen":"2026-10-13T15:47:08.772012Z","last_seen":"2026-10-13T15:47:08.772012Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":1230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.135.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.034Z","timestamp":1791906369034,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2dV06/RzEug8pG5VpAqYGrUKWV6OivdTekuTja3N4T6fACiuAI6ZSVHbuSUzWpB8KtM9k0654Kc=\r\nx-amz-request-id: EEK94Y9XV1ZFER2T\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:15 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"b367a1a2939abed5721ba1cf5fd272ac\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 43151\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43151,"size_decoded":43548,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"b367a1a2939abed5721ba1cf5fd272ac","sha1":"14494a7fe1017a29f9fed7421f7d652257490203","sha256":"46d322495677c8a7c5394e265b4ff29491e138ca470aa1ca2d8abf364db9cd21","sha512":"2952940e26d548ef1b5caaff6ed0f6226a5fe3333be792544289621e428353943df8b2c80303329041e0b0308b6fd4961d0805110e5d74bf4bfd3808f3c71117","ssdeep":"768:GAnBvnXpOznCDoX5cNyXgGjFLhpx12yVa6+kZL/4FIpV8xoeKzHMkLFr3:GAnBvZOzCe5cNAgGjFNpb2R+4gixovLF","tlshash":"4b13bf87ad198f936454dbb87f530c396bcc1e1ce8463af910a52ed72f582094caf52a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-10-13T15:47:08.774769Z","times_seen":9613,"resource_available":false,"data":null}},"time_used":5578,"timings":{"blocked":-1,"dns":8,"connect":92,"send":0,"wait":119,"receive":374,"ssl":4986},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/c568cc14-8506-4b6e-85dd-bfd46f7a8607.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.215.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.064Z","timestamp":1791906369064,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/c568cc14-8506-4b6e-85dd-bfd46f7a8607.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: YGhmPDxXVzKBVspWj0nm/+pxqY2W6VduNubZ5/pYmVGBqR8e/I/xdjyMXZEoC0kaBbiELw5tLikReVFRa/PYAAwYwXvJ+SDR\r\nx-amz-request-id: QCSTNM28EJW2FV29\r\nServer: AmazonS3\r\nDate: Tue, 13 Oct 2026 15:46:10 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:37 GMT\r\nETag: \"69ea9ab0655294c4e81cb9123f9b84ed\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 117788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":117788,"size_decoded":118206,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"69ea9ab0655294c4e81cb9123f9b84ed","sha1":"249e0e3b9f9c8ebb9d3c2b0e8f96db0bbbb96233","sha256":"49bd15612e8028f820eea86b82dafa4d5e439225445e527cf5a3232ed060d942","sha512":"4e05f275f9d9ccecc1ff61aaf45278811f0062aced05aac2d3d4c7648c4be9e1130cda1ec819a3a4503006a7c49b87fe94e1bc71657c2ad2708080425857f71e","ssdeep":"1536:3edS0foEyCuEPL1TVLKPXCTmcgFbbLmWEDBygAcq5qtlDRVtU+e+aPZl6ejI9li5:zCAEP/ICIbCWEBHAcq5ylFVBIuNuV/lr","tlshash":"18b31204277e7cc1c2f9a176c8b1567a57b5c74ee2dd9714ab5a3401cfe3a202e10aab","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-10-13T15:47:08.776143Z","times_seen":2430,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":155,"dns":0,"connect":92,"send":0,"wait":123,"receive":277,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otbtaw.cn/img/right1.ea8f0c33.jpeg","fqdn":"otbtaw.cn","domain":"otbtaw.cn","tld":"cn"},"ip":{"addr":"177.201.232.129","port":443,"asn":8167,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otbtaw.cn/","date":"2026-10-13T15:46:09.272Z","timestamp":1791906369272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otbtaw.cn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 16:25:56 GMT","end":"Thu, 07 Jan 2027 16:25:55 GMT"},"fingerprint":{"sha1":"AB:E3:D7:12:57:AB:05:1B:EB:1F:09:03:93:0C:1B:A2:C8:B8:9F:0F","sha256":"4F:A9:7E:BC:45:E3:C7:E1:A5:BF:8F:6B:8A:CC:13:A4:82:2C:52:21:5A:29:F8:75:95:8D:93:1C:C2:A7:04:88"}}},"request":{"raw":"GET /img/right1.ea8f0c33.jpeg HTTP/1.1\r\nHost: otbtaw.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2546991\r\ncontent-type: image/jpeg\r\ncontent-length: 5275\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"5401-1791058362222\"\r\nlast-modified: Sat, 03 Oct 2026 20:12:42 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5401,"size_decoded":5559,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"ea8f0c33d3900db3be98c332c0c2062d","sha1":"74ba33afcb75c6a95340f43617a273b8068689b1","sha256":"a4b10be0e88ef341a10520d1489dc02f3898c5804bbe90be6a94bb872b7a8a76","sha512":"fda39ead697cf13e4b4f116a91437f276a61266920c6be868fd31fc50cbb1f0f50d64cf7c44851794ae7313aa8eea47a842d96101ef7868fa691d212ac34b006","ssdeep":"96:WwDlVF7N/K3pYckSGRTT+PS6rIqVUhfvvbzZr/wbSCvG+9Lh7nAb2:VlVFZ/KSckS2TT+PS6WpEm6Jt","tlshash":"9ab18ed2629df395ccea6bb19e8d7fb2660163cfbf210302a84102b654bcc8fd0514e8","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-10-13T15:47:08.777209Z","times_seen":1975,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"otbtaw.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-13","alert":"Phishing Block","trigger":"otbtaw.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}