{"report_id":"118b8ded-1000-4c0c-88b5-1b76e14bf022","version":6,"status":"done","tags":[],"date":"2025-10-14T19:28:20Z","url":{"schema":"http","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"104.21.94.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"title":"适用于 Windows 的 VPN – ZoogVPN"},"submit":{"url":{"schema":"http","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"104.21.94.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-18T19:28:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"track.zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"track.zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"helpcrunch.com","ip":{"addr":"172.67.72.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-08-14","domain_rank":29258,"first_seen":"2015-05-29T20:05:50Z","last_seen":"2025-10-13T19:09:33.269117Z","alert_count":0,"request_count":4,"received_data":291982,"sent_data":1949,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"track.zooog.info","ip":{"addr":"13.33.235.39","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-01-02","domain_rank":0,"first_seen":"2024-01-08T13:28:59Z","last_seen":"2025-10-13T19:31:04.405094Z","alert_count":2,"request_count":1,"received_data":493,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"app.rybbit.io","ip":{"addr":"142.132.226.253","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-04-17","domain_rank":2983399,"first_seen":"2025-05-18T03:39:57.749686Z","last_seen":"2025-10-14T19:28:14.478895Z","alert_count":0,"request_count":4,"received_data":18966,"sent_data":1861,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":2,"received_data":36956,"sent_data":999,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zoogvpn.postaffiliatepro.com","ip":{"addr":"172.105.76.105","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"domain_registered":"2004-05-20","domain_rank":0,"first_seen":"2023-08-06T07:31:44Z","last_seen":"2025-10-13T19:31:04.155192Z","alert_count":0,"request_count":2,"received_data":21543,"sent_data":1129,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"c.bing.com","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1996-01-29","domain_rank":836,"first_seen":"2012-05-22T10:26:32Z","last_seen":"2025-10-13T17:20:50.770511Z","alert_count":0,"request_count":1,"received_data":1115,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"zoogvpn.helpcrunch.com","ip":{"addr":"172.67.72.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-08-14","domain_rank":0,"first_seen":"2022-10-27T11:41:45Z","last_seen":"2025-10-13T19:31:04.23426Z","alert_count":0,"request_count":2,"received_data":251824,"sent_data":1244,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"connect.facebook.net","ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2004-04-01","domain_rank":1088,"first_seen":"2012-05-22T02:51:28Z","last_seen":"2025-10-14T14:11:24.258691Z","alert_count":0,"request_count":2,"received_data":465247,"sent_data":1821,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":2,"received_data":68010,"sent_data":1131,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ws.helpcrunch.com","ip":{"addr":"65.21.140.182","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2014-08-14","domain_rank":453576,"first_seen":"2024-01-24T02:54:52Z","last_seen":"2025-10-08T04:27:40.883974Z","alert_count":0,"request_count":1,"received_data":278,"sent_data":595,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.clarity.ms","ip":{"addr":"20.250.198.32","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Switzerland","country_code":"CH"},"domain_registered":"2017-04-03","domain_rank":4064,"first_seen":"2018-08-22T07:41:57Z","last_seen":"2025-10-07T21:00:51.458769Z","alert_count":0,"request_count":1,"received_data":1120,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"signals.aimtell.com","ip":{"addr":"104.18.5.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-02-23","domain_rank":156180,"first_seen":"2021-09-03T17:36:18Z","last_seen":"2025-10-08T22:36:38.493197Z","alert_count":0,"request_count":1,"received_data":599,"sent_data":755,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"embed.helpcrunch.com","ip":{"addr":"104.26.1.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-08-14","domain_rank":669901,"first_seen":"2023-12-12T09:59:15Z","last_seen":"2025-10-08T04:27:41.114599Z","alert_count":0,"request_count":3,"received_data":1596667,"sent_data":1176,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"scripts.clarity.ms","ip":{"addr":"13.107.213.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2017-04-03","domain_rank":87727,"first_seen":"2025-08-03T18:42:23.027161Z","last_seen":"2025-10-07T19:51:49.198123Z","alert_count":0,"request_count":1,"received_data":78992,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}]},{"fqdn":"www.facebook.com","ip":{"addr":"31.13.72.36","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"1997-03-29","domain_rank":357,"first_seen":"2012-05-21T02:23:41Z","last_seen":"2025-10-13T00:20:04.324442Z","alert_count":0,"request_count":1,"received_data":467,"sent_data":1003,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"b.clarity.ms","ip":{"addr":"4.153.129.168","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2017-04-03","domain_rank":29240,"first_seen":"2021-07-27T12:49:08Z","last_seen":"2025-10-14T06:36:21.78906Z","alert_count":0,"request_count":3,"received_data":822,"sent_data":1567,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zoogvpn.widget.helpcrunch.com","ip":{"addr":"172.67.72.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-08-14","domain_rank":0,"first_seen":"2024-05-22T09:58:16Z","last_seen":"2025-10-13T19:31:04.813459Z","alert_count":0,"request_count":1,"received_data":8764,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s3.amazonaws.com","ip":{"addr":"52.217.114.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":1245,"first_seen":"2020-05-13T22:53:44Z","last_seen":"2025-10-13T00:14:11.723251Z","alert_count":0,"request_count":1,"received_data":50600,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"zooog.info","ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-02","domain_rank":3941021,"first_seen":"2024-01-02T10:04:48Z","last_seen":"2025-10-13T19:31:04.238813Z","alert_count":234,"request_count":117,"received_data":4313179,"sent_data":81929,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Elementor:3.32.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"c.clarity.ms","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2017-04-03","domain_rank":6634,"first_seen":"2021-02-03T23:22:47Z","last_seen":"2025-10-13T17:20:51.610864Z","alert_count":0,"request_count":2,"received_data":1692,"sent_data":986,"comment":"","tags":null,"fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96ebadfa615b9a97534f77f2445e65a5","sha1":"c2dab855b970d6c27200c8500823b32c89af955e","sha256":"c41a9ee3758420f6c25cc26b030a36ac1acdcf0b536c63071be4b015fe4e82e5","sha512":"0904c3b47990279b166f38083b2fcb4b0e6068b5191e14e00ac33acbf0349942da7a2ad5dbdbd14bb40496b8008492e8a107564f642c5912f7e7061bb6ed9ac6","ssdeep":"","tlshash":"7201506ce4ef311413a3254c3b278b167a56b20ba50fda097f5c07c41f9285584d7f8c","size":730,"data":"","first_seen":"2025-10-13T19:31:15.515359Z","last_seen":"2026-05-28T03:55:05.224145Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/dvpn-core/assets/js/builder.js?ver=1.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a5344db7b9198928b0059e1e9fdc46f","sha1":"b73118ef451bdc834dca3dfd721b8b412a4dd4a7","sha256":"db657c2403df2e0307ac6c435bbfd81f5d206f0512a8f0f7a311116a1fdb0720","sha512":"0c8d30525665d07da140fdb12c37e46718d5bb9139ed9dc8ece41d47aa3d561fea544a7e313ec5ce665a9405dab72324cc878a9f02945dd5c3247639e6ca8f49","ssdeep":"","tlshash":"47515b1d301760f8407bfbbed62b4208e8b220ef60958b31be1e48050f718562ae7ecc","size":2638,"data":"","first_seen":"2023-06-18T19:53:19Z","last_seen":"2026-05-28T03:55:05.073535Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.rybbit.io/api/script.js","fqdn":"app.rybbit.io","domain":"rybbit.io","tld":"io"},"ip":{"addr":"142.132.226.253","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"85f0ea7c2a9313e38e3438a9ce4d74ff","sha1":"db2505dd1de1e617b9181a4bc3f151f96b1ef2ed","sha256":"45f6e7229f7e6a34f900b74b3a5f1a784d65c823f61760781ef1e320560145e1","sha512":"20a8fe4fc8bc81649962c820333d17dc9a8c44fe3745fa40a498fef26e7a63cfafbedc5809dea2840c91e4f97678ee8b5c4844b1cd71f5f04dfd3a113fe59df5","ssdeep":"384:NTxmhPcGJHZ8NP8olavRQ0AFIo+wWK3GwofwKwLyCM1D0QuByOGBhgS19QQ8yOMX:N4NcGJHZ8NPZavRQ0AFIo+wWK3Gwofwo","tlshash":"2d82197133d9a87703eec1a2b07462827b7e1b92581e405cf66d3ed31584c8275f6bb8","size":17586,"data":"","first_seen":"2025-09-24T07:40:06.765679Z","last_seen":"2026-03-25T03:26:28.24877Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/proelements-master/assets/js/webpack-pro.runtime.min.js?ver=3.31.2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"059374b2f781287ea57cffedc1a06abd","sha1":"a0ddee35284d6da6ed18baeebd1e8719843f15a8","sha256":"afa81f151dd346474bf8c02760caee53ce1c8a6ed000ead97c7d6bdd43446c42","sha512":"8c02e5bd7ebfd400f35b7d6d73c1b08b7f23f60051571189df4c4bbba2ff5e5ec664d9582bf77e1752f663f76ff24038c6053da3e254389c98c7726e8e8cf5cf","ssdeep":"96:C5dxwrudY4kjboFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:C5TXd4jboFemUN537MPa/pMdOQ8Mk2","tlshash":"43d1659805489d2b26e43ae8b15b6b741b3dc0323c5ada81e611eddc18fcfd183ea532","size":6247,"data":"","first_seen":"2025-09-04T01:10:20.626589Z","last_seen":"2026-06-02T18:16:56.03012Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ddd5ae799482af0dd896b2d461f222b9","sha1":"a3567fc369b58f92d1544ed6023812a8f7f32af7","sha256":"ed9a3ac9330ff2604c59d6c1594c3f104c3b5faf4b7b6c38a15c67fc849f4305","sha512":"b82dcb0f47335c28e1220196b3728f84986c18eb3ac5b70af17cf2ae9b4c232d55a2659d36e5264f4835905102647205351f7380aeaf69517b10d2e9622619dc","ssdeep":"","tlshash":"9621278f4af9443726a3b12e1e4f6310323b51830048ea107fad4f512fc1a6896f7bc8","size":1430,"data":"","first_seen":"2025-10-13T19:31:15.519767Z","last_seen":"2026-05-28T03:55:05.2878Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"07283d36603314130d47f34df1570d45","sha1":"402a6b72385644716badcfa2b06e6bef690fa7bf","sha256":"ffad511df833aa1d1a6dbfdad3a9e3a24bea942e01162146f872ec4f73cdda5f","sha512":"cc8e2e8c5f05f8ab0fd4c36f573797859382a6b0bd3feabb7a299a6f0d91f36b32fbef832aee8a6367f6aaf0934a36027f427614793bf7c028e3b95e52d02fbc","ssdeep":"","tlshash":"92c02b011d582e4301e057e42435b1b743f1324d1c388c2106cdd4c00f2550cccc721a","size":133,"data":"","first_seen":"2025-10-14T19:28:26.688042Z","last_seen":"2025-10-14T19:28:33.359187Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/plugins/isotope/isotope.pkgd.min.js?ver=3.0.6","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fb7c19c9c51cfb99f5ff942629f0f21","sha1":"14c7f59e73d2a99aa688c2443a9a9b24acbff43c","sha256":"a931e5af561b1f0efaf6cdb96aeac4c035c30756dd6edd1091da1a68747d35bc","sha512":"c634a129ea9a27dd22c8382b46a94f07465001f26a027707849d60b402f21470ee5f329d46902084f317705cda5873eeed22d0624ee21220e88f09d23f317039","ssdeep":"768:PAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz231Fxt:/xVKDSfJP4Nnmc6FuCshD6cD6xS9ODzE","tlshash":"faf2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35456,"data":"","first_seen":"2023-03-07T01:18:38Z","last_seen":"2026-06-03T16:58:50.46888Z","times_seen":6014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.7.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"596d6e5d8400fd1e913f9adc21071f93","sha1":"fee2d7a4ac08d5a522c2298a5ad3ed30ac9e62ec","sha256":"159faf7827be43b4c85a35fc941924a9de59a169d42d600b49161f60debf9dff","sha512":"35e59dd6eabef234b48e1cf0d2e7b7943e35f953f5d5c79df686d81746ece426d781d3e75645d92310dd2dc15be456ee354a638d4da5d2e090b25abba0bdef50","ssdeep":"384:sekk5QRKhEJhCoJpIuxOqCSE3RGOdFzDlMKuLSav4RdEtq:sekk5xhEJhCoJpIuaSEhGOdFzDlMKuuN","tlshash":"1892d968ba5070f556b7373bf13b3b197233383a948651206415d8783abed4f222af9d","size":20124,"data":"","first_seen":"2023-03-07T01:03:11Z","last_seen":"2026-06-03T16:48:05.926042Z","times_seen":36119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11b7c41f4b66211a75fbcb90f1653d72","sha1":"a84b1b29e7fce91619ae27bdbf98726118eb6de1","sha256":"d09a6a5f9de86211c5b9837c65bf1a2f8e8f2d785f2320b945b2427d1206ca17","sha512":"0a1506392f8babdc4c185c8f118058bdc31298d9ccdb3306375591c773d6f71661bed376d71c7dd6f8768325c998f8abbba125f693222e923e2d00ddb7b7bbe2","ssdeep":"768:9j1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:PcaRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"65e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","size":32362,"data":"","first_seen":"2025-09-29T14:16:27.310666Z","last_seen":"2026-06-03T10:23:25.954942Z","times_seen":4997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d99616d3f03050d7eaf36dc01025b611","sha1":"b17a22859fcde902d7234ac8d6305c904fa7f2a5","sha256":"3ee6935e081fad06605e210f960c47cc21b06de5afce1a470395f15b91b3aecf","sha512":"1f066611bab159ee761419c2c08636b40efe40723006af7bec66f378fa4bc3f69a8e2f7e31ec11093d1e44cb0b7f209e02485bb40c063900752efa6097b154a9","ssdeep":"","tlshash":"dd41a7a87831709895f2a026553f7303717a26619048c090c6b1dbd57cba7c2d3d7e0c","size":2175,"data":"","first_seen":"2023-11-08T10:55:29Z","last_seen":"2026-06-03T16:19:45.531757Z","times_seen":18000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoogvpn.postaffiliatepro.com/scripts/1rg5e25qux8?accountId=default1\u0026url=S_zooog.info%2Fzh-cn%2Fvpn-for-windows-in-china-registration%2F\u0026referrer=\u0026isInIframe=false\u0026getParams=%3Fvoluum_id%3Dwqbqfn8h30p0jbed3in57ubq%26utm_source%3Dadsterra%26utm_medium%3Dpopunder%26utm_campaign%3Dcn_windows_registration_zooog\u0026anchor=","fqdn":"zoogvpn.postaffiliatepro.com","domain":"postaffiliatepro.com","tld":"com"},"ip":{"addr":"172.105.76.105","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e43f36e65e3ed441ebcb0442346ebb75","sha1":"534002a66b600e5bded5305abe7760dc384d38c1","sha256":"f378885f4e9fcd5cc853c1afab86016ccfde24f958025192b0a7642526a8e597","sha512":"b3986aa633a574f3f187404d06a5e9a6229e4b4285676ceb2fb34bfb729041c10a0c7aecd304cf725dd0f080773a66be2deb34886c6aebbebd3219ccd263862d","ssdeep":"","tlshash":"7fa00277445d6758960405ec1077c49140a6a8b66494899256338b80b6a7950de533a5","size":66,"data":"","first_seen":"2025-10-14T19:28:32.749525Z","last_seen":"2025-10-14T19:28:32.749525Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1372952cc65577ace309d829cb56f97","sha1":"2d3b8f297f6fde0344f1856ba57638bf9a080f11","sha256":"c0360a116127833d7189704f41f90f40888bb0ab90e06bc8d6bb646abf91645e","sha512":"f087815853ccae9b01139497eace08bf09e5f0857c4cd66d2cd1d0f710e4c802dda75ea9bfeeee9c5e1693257ec9b292cb29f61c4812a7609d98cec458f3182b","ssdeep":"","tlshash":"7b0110d265800830802181f46f50bf36dfca6f0ae026c665e55ce0ddf909d94809f433","size":721,"data":"","first_seen":"2025-03-19T06:59:38.378978Z","last_seen":"2025-12-19T21:29:09.04127Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"614e80cfcb8958d8f3ab6beafbbb9e48","sha1":"5e406a7be52157a25b9b0a4c2cc645113591bcff","sha256":"181a79c0aee45e874e4ecce90405258b38358c6ac633069d0369fe8f0b2a8bf3","sha512":"4c2cd5ec16549e9ad2be2864165b246a915886285ded1e4d9c6e3a65638aaf28eb4faee70915f442ccd98e32f3404f9932beea5659ab881bde52d0c78a1fe2fc","ssdeep":"","tlshash":"60618875714e743b09638735512f720ba27b095864d9c0287436ece06f74f5c60dbe2e","size":3429,"data":"","first_seen":"2023-11-08T10:55:29Z","last_seen":"2026-06-03T16:19:45.53459Z","times_seen":17709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"791a84156a870f19ce2d542cc6c828a5","sha1":"1be538f5532743040932a4aef5cad5345fe49fa1","sha256":"e9c59dd8ee87b9c6c84978883fead62e7e31181d0f98c88b85886fdf66f8d426","sha512":"048861984a5722af7c03b2b3908d24e760693594e706c8ac2cedf408d8274cd6eda02d08e21010d8a892df0555b227afb9a2b6910a4e4774f2ec3a891b1edf68","ssdeep":"","tlshash":"2201bdefbb80818a259a91df920c246d98237a1744b08a9bce9cc8d4ad10db5d4d1aa7","size":795,"data":"","first_seen":"2025-10-13T19:31:15.545043Z","last_seen":"2025-12-19T05:41:03.634738Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-03T17:54:34.596599Z","times_seen":294462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5deadb2cef3e023e1f435c2f2f438478","sha1":"a62b401048b141cdd20ca4953e473c53620d9573","sha256":"a50cc72d763b70c2ba518f482f98b7a7bd81788cdb78d22ecac119227a9fcd21","sha512":"4a9ec0b2e6ce8428c6bf1b4f7257e571633fd5a0447087ea944dfb7cba27fa622aeabd31bc6d182bd21c29e519c988b3831734663df2bc1e4b2b04828ed9a739","ssdeep":"","tlshash":"6b5166a96749063643e3c751fd56bf2b19de0d211041aab2a4fc0ea82b72a6d6703e17","size":2972,"data":"","first_seen":"2025-10-14T19:28:26.938029Z","last_seen":"2025-10-14T19:28:33.42211Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56bd5c3018b31a6af414a01095d099c8","sha1":"944dfb965626ccf974dc791e6faaeb2cc8b2f09b","sha256":"24a85e325239df655f7854194a7a20ccefbbc47e6a47f1599b3499145e876c1f","sha512":"7deb269a4de279b349e24667e9f6d57091b076650dddbaa9b1412d5ea8d772c68a56544f40f4112abacc16b4e4f0c10e296c57b9fe8e6f3d6288bed5477c9f8c","ssdeep":"","tlshash":"812103f370a398ed48cf148a35622d16f1570d5ca885a01ef5aa08db3472e853362234","size":1392,"data":"","first_seen":"2025-09-29T14:16:27.410168Z","last_seen":"2026-06-03T10:23:26.002832Z","times_seen":4292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7c95a7a15037d6d426efc06ae6e0c81","sha1":"2ea08bc0eee97c4dd4d96fbcae022fd132ee3a11","sha256":"30770e96ca66d9f13e483db507cef243b0602cbd356bc98a0b5aebf89717bcd2","sha512":"50900d7d694920e757a4cd7ebbf0872bbc12c5dbf8ec68e43a9a6c9836fd2c4551f6975ce16ad301b05d4e1ab82c5632dacdce70973bec6fdb32408bf3cddb5c","ssdeep":"192:X4QA3vFKhXb66GBXiWV+tcqqLm1tlY2hI7a2pK1y6VTEZ+K0IGiwZ2uSneq1m+np:KE56BX9+tjqLm1tu2hlbJVT6bXk2u3qV","tlshash":"2b3295c5f185395647ff7034722f220a2337589ce4466d58bc29c4e169f8e8e12b6fba","size":11622,"data":"","first_seen":"2025-05-21T22:47:05.823896Z","last_seen":"2026-06-03T18:01:07.795523Z","times_seen":56585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.helpcrunch.com/9881.js","fqdn":"embed.helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"104.26.1.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48877c50864293bc2a847a2ffc0636a6","sha1":"6fb8ab223409c4088a5b8d86f8d0dd6ef0338dce","sha256":"d9e08fbae5c199f4e2769c146802c227b1f0de1b427a250e8801a3e9b4f927ec","sha512":"d44426b0c3a7061871db13526065368627caec024de43d781f5f433b82f30e0502aad2a4d26388881f9b9b445f4cede085c11f93397969215a07f862a3d650e8","ssdeep":"","tlshash":"3511218e554ab962ab32039a4c3f2f495c6cba79181da88967e06510763ac6c133577c","size":1003,"data":"","first_seen":"2024-10-04T11:01:22.364584Z","last_seen":"2026-06-03T09:01:42.325932Z","times_seen":291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/zoog-core/assets/js/core.js?ver=1.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a51829e7efc41b0d4ebf1e6381e2bf4","sha1":"3cdb3578a50f3e5072db1f413d836e4c94a6e2db","sha256":"5cba6f93a38078e88c7d2bd870cfafabaec9504c093351fd431155679cd52192","sha512":"b8a12b8cf6150f725014a223de96a016c7bb789d7d63614a8d3534e0a4fccd539ea638572e050b2a6404708389cb223065cc1abd40991faba7e1b638a3ed7294","ssdeep":"","tlshash":"a211ed056126809a4db223ffc99303bceb662173f4d9814939cc912c0f7157404eaefc","size":1101,"data":"","first_seen":"2023-06-18T19:53:19Z","last_seen":"2026-05-28T03:55:05.222351Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.3.2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99d1d9d8adfac1b92176aff67bc9a33c","sha1":"341f57bf344cd8ef1518881af2ded6c97427227d","sha256":"840f6feef0dc41ac3fcc4a3492963c661be1f57c6308890c77c5eda09e43edc1","sha512":"8ad65c8ea4eb6bd48f8cfa32465557097f68e59ffed38ff9786d77362b142d09dd1a9c7905d8c983a2a4190f5d3f98c53d3f32144f1b5ceff9616a892edf232b","ssdeep":"192:4v69bN3SLFNjilRm5ReHKj2H8gH+gwnmMQwco/0MbYrdpb9pPkx:4v69bNiVii2KnpcLpb9p8x","tlshash":"0c32e988378776f056b36025947f761ab136ab74741c8850a21ad8e06db9d8fe073f3e","size":11619,"data":"","first_seen":"2025-08-24T14:38:05.703596Z","last_seen":"2026-06-03T17:04:40.207079Z","times_seen":6156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/proelements-master/assets/js/frontend.min.js?ver=3.31.2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e7893c90df878c3494dcb3e158aa517","sha1":"ce8abc4af7d6ce69fad3f193ac37cd8097ba6b20","sha256":"a5de99761e07fe5c535922eec07192917c68cfb8b1d6fcecd48c4d90e14f8d55","sha512":"fda55c91456d7958da78d9d661b8f30bcf77aaef9295d76a01940004726aad1b8721a60ff52185d9690f19be5cda1017594d6370a9dbfed9a6cc2d7c22387203","ssdeep":"384:Cbxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7F:Cbxw+EVxFm6cKikdHd7taQtHuGJswg/i","tlshash":"2bb2d9053163ac7a50cf815be467420e77378894740570ed7abc6cdba5b8e9a33ea339","size":24209,"data":"","first_seen":"2025-09-04T01:10:20.608668Z","last_seen":"2026-06-02T18:16:56.08344Z","times_seen":358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/dvpn-core/assets/js/subscribe.js?ver=1.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f9628208fffb7df9f60990a1b1bad90","sha1":"6b3cb808b563d28efa845ec7e6dd51f5dd2e2d90","sha256":"553243801f0d0699539ce0d9c08879691a3460694f93b4adde7a37918c901a43","sha512":"ea6f8c79b4f415723f7ee3dc8402250085fcb9331a3123d072ff8d82fc3dff33eba419dffe16ec4e6597c90f7f9d806a0dca13a037eaf4ccd01afbf852925d7b","ssdeep":"","tlshash":"9431e188ef7e29914671f03b2caf9ac7c16d192719004c6ebcdc48180fe5b6cac2f855","size":1691,"data":"","first_seen":"2023-06-18T19:53:19Z","last_seen":"2026-05-28T03:55:05.045254Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-06-03T17:54:22.406877Z","times_seen":224178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a42fb8cc4386399929ae178d433380b5","sha1":"c28c9bff1079819eed41c70f7339025f64683a1a","sha256":"493427c9e03647d97d1af4aeeb354427b41c1fe5c02fb35053d656881c88eba6","sha512":"7844c509d0a8a10736ba2c1a828bb048054f0006673ba33578a11c8cab11f1cc2b0b9eb8d2dbc8a4cfee8376513e098ec05b5118940fe13816d53a1b6c3c3a0e","ssdeep":"","tlshash":"2d5111345b1035a9c1e7e392909c7946cb7e9123a6446a3ccd4c4a2c07cb9ea216be4b","size":2951,"data":"","first_seen":"2025-10-13T19:31:15.555926Z","last_seen":"2025-11-03T07:12:59.812956Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19e75b5538491cf2b6af6701c37bb298","sha1":"8467f54e3d487b72250604abbcc4c71fc603786c","sha256":"472f86f36b79a1f9647af8f2f1d943bf94269b67fa749a6613b97b2e7f7e99e6","sha512":"cddb55bb9241ab56d320f94ce26bdeb27e1bd8d563d2abfb5a55e68de0996edadd1304629bf0aec4f0387eaabd6a1107a9395dd4133e86bbed3cc45f8914142e","ssdeep":"96:B8rAtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:jsNukQ6jq9OVM6MeHGlQTvog02","tlshash":"b5c153941a54fd2b22e134d8e41ba734662ec0333c1afdc1fa22dce955e8ed183aa531","size":5707,"data":"","first_seen":"2025-09-29T14:16:27.438426Z","last_seen":"2026-06-03T10:23:25.953564Z","times_seen":4972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/plugins/owl-carousel/owl.carousel.min.js?ver=2.3.4","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-06-03T17:51:37.828258Z","times_seen":58883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0bebc7782bc6b8eac68d51bbeaaab5e8","sha1":"d6e7b46f5fcc588c09678d21b425b3c14a0d3c0e","sha256":"10f0958fc23bd53907281a61dbf905cdb41685b85957bd1e435a6d9e5fbb17f8","sha512":"9f30c25e754cde04508bd8a599c7dd4bdfbd4a6addb40fd4873fb74cac35636ba70e28a12d920b5cb0b4685612ee25facf1c3607e439c250fe765b8eb366121d","ssdeep":"","tlshash":"79210221f1e596b344a7efc13a66b927b0ac04205044fff985b88ce43db3424590ac2b","size":1244,"data":"","first_seen":"2025-10-14T19:28:26.982389Z","last_seen":"2025-10-14T19:28:33.441625Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba814657bdef695283818df25801f4d1","sha1":"7bab765c254e787ce174c602fe3a56eb6af43530","sha256":"a59a853a38e6a43a229bd96a9fc3181626f7e0590edda9bc52beef2a8d09a422","sha512":"36378051d3e010a2843e82559e045eed139f3cabc62b460cd7cc20fa9ba4215f788649af0cf9e712bac7374ba51841d127bd717af751f5892ae413c19881b3fb","ssdeep":"192:7wfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:MHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"ea02310a74c1982db58b58ba3532432c66a8014de1018f6db1bf78fb85a6d82377b7f1","size":8525,"data":"","first_seen":"2025-09-29T14:16:27.398702Z","last_seen":"2026-06-03T10:23:25.949331Z","times_seen":5267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-03T17:54:34.592617Z","times_seen":883758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-06-03T17:54:22.492637Z","times_seen":253870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"69d1cf825e545d5c9699a4e471815222","sha1":"557dca255b81cc44d8f586721ba1e0c1b308e2ed","sha256":"b08572badd4cdaa7d3e767aa9602a1f8b723ccac0550d7c330a7b091f73bd9b3","sha512":"3c9af4223ee860b6606fa4b840ae866728aeea16a441ef272b94b9359af75b8bbc511563132e0a76258fe2016df5e9121dd86d508da219c2a7978620882e878f","ssdeep":"","tlshash":"fec01285308728418099d2609a62fc00495115cb074ec94429d49e64aea1480f48231f","size":161,"data":"","first_seen":"2023-11-13T11:30:09Z","last_seen":"2026-06-03T00:22:10.112668Z","times_seen":2094,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0326685dacf0ea8a6c9da871036e8047","sha1":"ed3fe0917e5db0e89c70788542fda12e30e45fe1","sha256":"cc2f7f8fdae516725a6f9da8d297c5b501032684bb433ad413564724c3408360","sha512":"6c9fc9ee2ba790c04255dbc309b36cf4fec156948a0d28a1e92588ab456ed6062450c4a032c82342b7ceff05379d65019dc497c73a982a4197f9e58339fca7e8","ssdeep":"","tlshash":"ff21ab561e320e2547eda7dc72c63a7f48d0033229e4b51d1699e46101e7dddf0872e7","size":1309,"data":"","first_seen":"2025-10-14T19:28:27.020606Z","last_seen":"2025-10-14T19:28:33.451976Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clarity.ms/tag/m5agyg39eq","fqdn":"www.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"20.250.198.32","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d23da032d1233f9afcdd43a2f6433a12","sha1":"347af9248bf93c6d9d7655c2544655252d102ed4","sha256":"1a9e7efcc6e3a6d47fa230af986f22f6fac0a756a2d4d6a9280dd51d81d7ae20","sha512":"75f446feef00e68b0e7248d0c7e2a4c2dbb646b0852749d863e3ebde121490fd6436972dcf52f716152dd11f800c09f7284c5d31f3f2e0fbeffa2b37e5ec329d","ssdeep":"","tlshash":"5701f436540ea07463b5755533fbea147577120e15181102d19f8a76b818fcb119359e","size":699,"data":"","first_seen":"2025-10-14T19:28:24.785911Z","last_seen":"2025-10-14T19:28:32.90912Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a83f95fa13ac962758711d55e11805d","sha1":"03cc605342a19617500ed55e351f1dd9e33a1660","sha256":"11c8cd727a0093d4f3593d14a8e11586f0bd8e2ce0394a2a26c23bfc0370eba7","sha512":"849f1c32624c3bd6c26f7f956d2f1429ba2fbc6cd3130c59e0b7bc0380554344aed98da87db766097f2f35027137de3b61b7941dd7129ad26de4045e9d3f3d61","ssdeep":"","tlshash":"7bd05e22a671c24203d1b6a6b91a306eea6a7c2a0d39c3a5c31cb85c0960d2d90e5a12","size":252,"data":"","first_seen":"2025-03-19T06:59:38.390906Z","last_seen":"2025-12-19T21:29:09.048152Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b71a11df9f5c5155e31bd1bab6b90e9","sha1":"ebdd33494c35a372a4deb56365a93b9c442cf42d","sha256":"0ac32e0cd0885e8d2bcad7cad36f561abd8c7bc4fac5c74cd6fe234b65784363","sha512":"a9bd5d42b07be3cee61bb1857618b1b5bf002091d9fdf7bd99eb53521e83ad44a01b2abee9d987ae3ad92062dcf6e23cf1eba9519ab3803ee1c1f2b6b5080014","ssdeep":"","tlshash":"daf09eb970d238ff140f44820a97102de5981cf5422560417ef944383a75ea4b23539e","size":489,"data":"","first_seen":"2025-09-29T16:52:39.689457Z","last_seen":"2026-06-03T10:23:25.994667Z","times_seen":3253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-06-03T17:49:49.693441Z","times_seen":162846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"113a623e92e6a57a6c9eb92ce205992f","sha1":"c151cd5066bb9132f5f81303ba6aae597f4ec087","sha256":"f276e7ce58536ea8a565f2332f88ad28286c268c0c732733c19b514377721ede","sha512":"86f54aaf8b09b45fae57c3fcbbb44e7535c00d7699085d88fbc8151b34d3d1356f02d20bb0975b2e66e7ff3088eeb92979046dc44d431759cf12b181c702026e","ssdeep":"","tlshash":"32d05e90a25c1d54e092223b7f3e06ca283c47f569929eacdc5fad903482c1043ef5e8","size":256,"data":"","first_seen":"2025-10-13T19:31:15.57343Z","last_seen":"2025-12-19T05:41:03.643008Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/plugins/isotope/imagesloaded.pkgd.min.js?ver=4.1.4","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81545aed80e2c8b710b729bea178621b","sha1":"049173b82e68c40492961bb95ddacefb44eab680","sha256":"5a65b0ca177f1c0433c0ead611692521c23e6668846a2861fedc09ae11416ffc","sha512":"627555d455405e30e77fd0e51bbd9ef070e7964d61ce37d61a5dad65d6bcca809956d18df46bb3e2d7c502d690ab17a2e7cc1caeb07a9a2c3a5519b925fbd971","ssdeep":"96:cww1xr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBVd:cwwfrycrr3rKvE9IjRxjGjgNhdTLo3rt","tlshash":"15c122cd77a275362296f0b3a21f020f7276406e6918815d7969ecf25cfcd092633bb0","size":5600,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-06-03T12:29:06.935385Z","times_seen":13373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf86d1055ea668fbbff06eb77f649a2b","sha1":"f570bc9603b9583338e1d16cae9e06dedfe44a8c","sha256":"afea5eb629a57d6744ebce091f499792edc564d6162ecfc6e3623e9fa4f44a1d","sha512":"90b2e135e0b93630507216a908c22f1b28bbf143ec7739b903f5eec8585a2514fac5bc89b058ac91e8a1773bbd90d8ea13ab25391c3825e36dc941f878bde14e","ssdeep":"","tlshash":"eaf0dd5974da112083f6211aa1bea748762a813debccc1c0db9ca42937b3cc794009f8","size":650,"data":"","first_seen":"2025-03-19T06:59:38.39261Z","last_seen":"2025-12-29T09:05:26.139655Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee389b83dc69586d8c1b34b5febd849e","sha1":"e7cadc82b80649d4d9feefa1b5fb77ec54a375ca","sha256":"4b4653af615e47da208a26d5661a583ab683ed2be1b7526e1b4db28099969360","sha512":"342c91aa417e69fb52499ca2dd0f2efe11f26af424814a35a64a67b7b4b3215d7c4cb69b151e607e385dd63d6d87e0ffdb9d2a44270128572773295c02659fdc","ssdeep":"","tlshash":"cb90021a1994543021671075461001832c502a549164220064151a5f0645c841879c1d","size":50,"data":"","first_seen":"2025-03-17T07:40:24.866495Z","last_seen":"2026-06-01T12:56:53.236419Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoogvpn.postaffiliatepro.com/scripts/1jg5e25qux8","fqdn":"zoogvpn.postaffiliatepro.com","domain":"postaffiliatepro.com","tld":"com"},"ip":{"addr":"172.105.76.105","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"52c8dbd6884a5772af76926e0789dab4","sha1":"72f7a5f6d1019b0303f7a1c3b38d4eef99482d85","sha256":"44179693c37b04b60ed1c2febdb821f42c9a01cdf38027ea221a4f50f36412b0","sha512":"7375f335e683767fcbb02b566054b58aa49d0f2156d0b0264df1153987ca16a68eba41c44975f7dc59ecaa36dee846f3334020c4c577a19e2e9b58481c2e0a5e","ssdeep":"384:vje5Jv29nzUjRhvEIKVihMd9i2NAnU69HfiY77LVQY4:vje5JvhDT0","tlshash":"72922e4ab5c5a668868360a1142f415a913f584f7491c1bcbcb3ece16c7fc8f8b1bb79","size":20477,"data":"","first_seen":"2025-07-19T08:54:31.790341Z","last_seen":"2026-05-17T09:22:58.149961Z","times_seen":550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/signals/config/2004248823089234?v=2.9.235\u0026r=stable\u0026domain=zooog.info\u0026hme=17acfb61045d3371dfae695fa3b5ad6946c5e7b0f340bb5dc12b59e9cfc87854\u0026ex_m=88%2C149%2C129%2C19%2C123%2C62%2C42%2C124%2C69%2C61%2C136%2C77%2C13%2C87%2C27%2C118%2C109%2C67%2C70%2C117%2C133%2C96%2C138%2C7%2C3%2C4%2C6%2C5%2C2%2C78%2C86%2C139%2C215%2C161%2C56%2C220%2C217%2C218%2C49%2C176%2C26%2C66%2C224%2C223%2C164%2C29%2C55%2C8%2C58%2C82%2C83%2C84%2C89%2C113%2C28%2C25%2C116%2C112%2C111%2C130%2C68%2C132%2C131%2C44%2C114%2C54%2C106%2C12%2C135%2C39%2C205%2C207%2C171%2C22%2C23%2C24%2C16%2C17%2C38%2C34%2C36%2C35%2C73%2C79%2C81%2C94%2C122%2C125%2C40%2C95%2C20%2C18%2C100%2C63%2C32%2C127%2C126%2C128%2C119%2C21%2C31%2C53%2C93%2C134%2C64%2C15%2C30%2C186%2C157%2C266%2C203%2C147%2C189%2C182%2C91%2C115%2C72%2C104%2C48%2C41%2C102%2C103%2C108%2C52%2C14%2C110%2C101%2C59%2C43%2C97%2C47%2C50%2C46%2C85%2C137%2C0%2C107%2C11%2C105%2C9%2C1%2C51%2C80%2C57%2C60%2C99%2C76%2C75%2C45%2C120%2C74%2C71%2C65%2C98%2C90%2C37%2C121%2C33%2C92%2C10%2C140","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"704d29738ec8fe748e40db51dc40904b","sha1":"b98380270f1065c637ffc851580a203a56475ead","sha256":"8549b89024a44f135b45dfb717dff37ce8862b426243f9ade4116d7e8750786d","sha512":"6bf03665c589778ce61d19a1211009f88dc6af1804acfaec90050ade2112728eafd59b5cc912e85bc19be0f45023746bfc6759b9ea0b861950a099c799b6e984","ssdeep":"3072:RT4h73Xb51u2K2hv5+JEclRZ9D7MtimuX:Rkh7nb51u2KUv5+JEclRZ9D7w3G","tlshash":"84c3b789b2d1b06382b6b96da67f410775b959a3b0c4c920d58cdcc43fa90f94173fab","size":126045,"data":"","first_seen":"2025-10-13T19:31:15.504658Z","last_seen":"2025-10-14T19:28:32.630354Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoogvpn.widget.helpcrunch.com/","fqdn":"zoogvpn.widget.helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"172.67.72.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"231c177c3527aa2432072e58aa2286d5","sha1":"0b83aad984a47e49592c98694533100d39597857","sha256":"971fe6e8a9a38522eb8819bba5e3dabe73ce602a7991448d8c301821c4ed6047","sha512":"8085b47d3bcbe0f99a558ea3f994e25bd5213f05c4c58342ce2f13a19faf09bf4c7988e5060a80cd5828e85b00d5bb6ac486461c0e3bf1c82e507b17a4b4634a","ssdeep":"192:2uY6HNQTT44fp4QcJPNXgoxc/wT+S+AxGjBBr:3Y6tQA4hMxFgpBAxGX","tlshash":"e8022b6db35114640a738fb407ff8388a5392434be3588d08e45c95b6aaae8e4377f7c","size":8206,"data":"","first_seen":"2025-07-16T20:38:33.156736Z","last_seen":"2026-04-28T20:09:52.998058Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-03T17:54:34.523408Z","times_seen":815093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66aaf8979cb3dd0e7e391e817d7d5b99","sha1":"dfa25d09e01c2c889677879a800e10168404a969","sha256":"de981638303d1d4956874249cb96e63064a46ad64847087bc84bfae7de85d9f1","sha512":"6d3926a0080706e7c8d4c2741063c1260e94b5104704dd427f43a20a0bc2dfaac079383b49edace1259e150e4687e9227af92bbbbf4f167660b5fffa2679345a","ssdeep":"","tlshash":"ecc012ff61bc64068b1320a4487f2568b10b3447f8404f54f92c0d990fa163810b2948","size":135,"data":"","first_seen":"2025-10-13T19:31:15.583957Z","last_seen":"2025-12-19T05:41:03.645061Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5cf9858f97c5fc5107ffe816e59312c3","sha1":"f9e9ac2e5729c1a6e27046db84ffff07639f4946","sha256":"090b897f83511b8d6efb8acdbc03531fb1cb1b9deb2395968edd4ddde41ae4f3","sha512":"b1744df025511e328c86e728f872fd923f90a424c1adaaab2743ede04515637372c1f7337a924cfd03b1587f80733d0f91195090ee3e75b0a8d28f41b01b9dcf","ssdeep":"","tlshash":"e9b0126714c406300670040e2132003c214f8c06c53434e00aa50d0b141d4934367231","size":90,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-06-03T17:15:12.911902Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-06-03T17:49:49.693441Z","times_seen":162846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/js/menu.min.js?ver=1.0.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11523555d48b38ac0c755b91472b6e54","sha1":"00e1c7432fe7e9c9a040752ea2240ad8f2dfddbb","sha256":"72d17bd9918958ea5db273de0af388d3a26f9696739d0c4d2c38462dac595589","sha512":"29d6aa714ef5150f269ab5d007ab7482898d85acd1d1b8410b0551671eaf998de77294087eed27020450fe36ac82835e65d775b5b2eefaa5f4fdf1ca585f3d1b","ssdeep":"","tlshash":"1321e15e792059ec45af736311b783d151720e1d81448101f37121f56efe2a27ae3f4a","size":1319,"data":"","first_seen":"2023-03-12T20:22:28Z","last_seen":"2026-06-03T08:30:51.85149Z","times_seen":365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/js/scripts.js?ver=1.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33d05ae25bfc3b7dfca0633cf3f987e0","sha1":"98ea63c6752f36239d07bfbe02fa3865c8f5bfc0","sha256":"e3623ed926856e43454b85ae9cda91a3cf7808fb5d606d9cb7e1dadc11bdc2fa","sha512":"bb0985c6355df99b5779454e20a904946ae8ddd89135465614ffb52a7912ea166b44db131507ba902172e675a53c765c9dc9d0450b0971a38d2702b3b3149b0a","ssdeep":"192:ZYxJ7JQJsldFmLhGumZXqabvceY+dlWwqlGnkryKEfN+7hC9D9DZzdAU+1oXNqlK:ZYxZbdY+fMKkrXeGhq9L07wycrM+9g4","tlshash":"85929618b6f300560037b0395befa254b67640174649ce08be5c4ba17f8973daeea7de","size":19912,"data":"","first_seen":"2025-10-13T19:31:14.987178Z","last_seen":"2025-11-06T19:58:37.925685Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/fbevents.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ac58ebfed5ec22986ad71ea6e0578f8","sha1":"59e782696ca21fc17822e5b8f924047936c98f27","sha256":"27da9cf46700841a6def729f7474a08b0bb40d58a4abd9f04a0b845fa38b11f7","sha512":"00263dc471be050ff2e01a5ce536de783a1d3f514ffe4611dd94e98b721132580a2bcfcdee2be2198473891a6adc234e47a669c90f6f4a7a71d3561d60cc344a","ssdeep":"6144:RZLeu8xwDkLBTrbEJixLNaZgVOvw6Kia3ZY/ncQfNvQ:NgLUVNvQ","tlshash":"0e64b98975d1b09247b678ac926f4007b1bb99e6b0c8c930d59dedc43e784ed5033faa","size":329460,"data":"","first_seen":"2025-10-10T22:03:20.956818Z","last_seen":"2026-04-20T09:02:43.946936Z","times_seen":2737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/accordion.28788e18d1d35c23f450.bundle.min.js","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3f9b634c6b97de5f69eefdeb626e581","sha1":"af714f5d0e04666e63b0fa12d06d45f049333de3","sha256":"a44fb76f2ec0992ddbd398854d0af9fdb21ef08097a03cbf235b59f1605aea04","sha512":"38ceedabbae1e016984fb5db05dc4eb20425c78e27f66001928f5585e97df0856cf08c8dbb8dcffffd57f17f18e8f7a3e324ddbab1cbc185ad1e1f9c465f43fe","ssdeep":"","tlshash":"6a71b5523285a93d0ccf61b6b10b562a97033ae9b411ae8c34584df37561fc4a77c37b","size":3791,"data":"","first_seen":"2025-09-29T20:53:25.75433Z","last_seen":"2026-05-15T06:52:29.479363Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scripts.clarity.ms/0.8.33/clarity.js","fqdn":"scripts.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"13.107.213.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b08b741220aee01d0d055fe7a6f5b93","sha1":"30389e7d60456ece1bee4ec945a128e827f2a6f3","sha256":"37b07a7c07134b5f2374fd0c6ee86853191a8236585be56c0895dab209ae32cc","sha512":"2636f45f6c28d25c3de172711496804679a3688c643a3b8b19fc73db5af62adb7ee6c1b052d0c1bc293f3d176a85d6dbcf5ec94b9e953f92411cf0eda27fe69d","ssdeep":"1536:GQPzHqofC4+Nvtl8HTHpn1z2sA0T+q+PGySF:PP7qofBSAXz2sA0Tr","tlshash":"8873e7dc7243707e42a760b5807f120bf23a6d4a780b5c50da66d6c43c78e9692bbf6d","size":78471,"data":"","first_seen":"2025-10-08T18:48:07.937536Z","last_seen":"2025-12-12T23:07:23.357321Z","times_seen":1567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/proelements-master/assets/js/elements-handlers.min.js?ver=3.31.2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5deafb6ffc21bc99329c9c9a2e9b42f7","sha1":"db955c43ee061dd9fdd1917945b683546edea603","sha256":"08236d1783812ec92b4233f8274ddf66150fd420eaca8bc618c26e0de4b4584e","sha512":"9dc18052d9e30f71e44942d8209ffcd4d98cfe57017520ea9cd259949eddadd091b82647fa45954331d39df3c3fb152340f02e5e335deffdd6692a9ce831a1d6","ssdeep":"768:CB/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFgm:C9t5D1+WE9A5yLcWJ9mBtIoERuWfRMBg","tlshash":"4c13a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","size":44669,"data":"","first_seen":"2025-09-04T01:10:20.629509Z","last_seen":"2026-06-02T18:16:55.992251Z","times_seen":358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/js/download.js?ver=1.0.5","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdacea33e74a5a215aa92f338dff2075","sha1":"10e05557a62c902289f08e394fc86180b538f7f1","sha256":"5ad18ae5fed2b073c9f0ab4f0471895b48eccb543351c9ce1eac8e0b3a912580","sha512":"36c972b857128b8a154740f4d87ae812e5909c33be4e855c58e898a9d180196c57915a63cc4e1f16426da9c5b399aaa89d15a49aef79f2a16004e07f923e9f7a","ssdeep":"192:7/q2uebvpTE84Kg/KbvpTE84Kc/3Uu14lb/pTEc45SJ2SRpTEc4qo/xzAj1lAJSp:Dq2QVIlgq","tlshash":"960234149ba2d44b5131233eaabb6609f77d00734441dd3eb8ec564b6f32921a690fdf","size":8232,"data":"","first_seen":"2025-03-19T06:59:38.396879Z","last_seen":"2026-05-28T03:55:05.030896Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/js/bootstrap.bundle.min.js?ver=4.3.1","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef58fee438cd2da2c3b33ff6f1cfeebf","sha1":"41a4836fc0253324e7e583905f47ba7194bac91d","sha256":"13f578716138aaf01e3b930e863b46b6a0f33e77513b52c193c949fcf47b080e","sha512":"53ce49ab8ecaba729e823bfa8153009d0c2d423a2f757cff0d03af428c6b0fa8f76867c30dba7900026e39d9d0c75b1e7ccf740fd28129242464647986b2dbb6","ssdeep":"1536:EwGC7pXnzlEHnMX6T50OpPX8EyPoWQ8Bbe:UezMMX69JPtyPoJ","tlshash":"c163c64a3250b4b202dfa177903f460bb737689da50a811cb95da8ed2d7cd993267f3c","size":70966,"data":"","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-06-02T23:44:22.695705Z","times_seen":2956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143709,"data":"","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-06-03T18:00:47.697519Z","times_seen":90397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.amazonaws.com/cdn.aimtell.com/trackpush/trackpush.min.js","fqdn":"s3.amazonaws.com","domain":"s3.amazonaws.com","tld":""},"ip":{"addr":"52.217.114.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6842d72a9e67a1ba77674dc5fcad8aa1","sha1":"3da16a890c492991d2947cd2286eba0405fd2c5c","sha256":"94cfcd90fe7f51681938fa0236a839607e88a50e83dc024ac2d9d2c44be3cb37","sha512":"d76b2ac92172f2fc5089d9605bdb95195ce434d0be7749833517492b02c4ce688c64e41d24c0f8c314f07bb30edd209ecc4cf5a291b133e798b10a5f3b0fddd0","ssdeep":"1536:nU9sUfFyCWoJxWngPXFxZLByTP2RAhjMCg5hP:ysUfA7oGgtAhMX9","tlshash":"2133d76a73442060c2ffc37fd4ef42c1243545497a4f84a8828dee90abe7e9ed167d99","size":50144,"data":"","first_seen":"2025-09-26T07:31:54.36845Z","last_seen":"2026-04-29T07:57:35.53798Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.helpcrunch.com/sdk-code.js","fqdn":"embed.helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"104.26.1.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b907e9700c685f44016607a44e48163","sha1":"e871d20ae0ce71ebb6af54b75c033baa8628fdcb","sha256":"ef94f45ed91932dea28e0b5b03d44bdb4663884f89bbb9fc7fbb37b7648eb80a","sha512":"0ef7484867d4f1e608325b3f608a4ac51c4fba95cc023734af12cd56a6f1742b81d73deedc94dace2856cb7969dff90203f31ae46e36677ce319392c6decc9dd","ssdeep":"24576:KGrG85eYY1BGAXmv7ItzSEpFaOtEigKyqKtOup:zrG85eYYP9zSEKPqKtOup","tlshash":"d4755c4e31016d3cd6da67a750679a8db3b4b023e1084e7c75f4c8d9cad8aad3213e79","size":1585000,"data":"","first_seen":"2025-09-26T05:50:36.642092Z","last_seen":"2025-10-21T08:39:55.121679Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-06-03T17:49:49.693441Z","times_seen":162846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/dataforseo-marketing/js/website-marketing.js?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d75b4163a6d8962a16642a7f36af2e1c","sha1":"8f72ba325b8cad9244b4d92b509b758a8eef6293","sha256":"3e59aa52dd2ccf17f6a0e0d32793482189f4d409cad05640bfd32499a84b0fdb","sha512":"9aca81c1ec954d88201e6d1e8a4d751f672dd7111d8797ba7476257adb16ed666311578f0efb3b3ee3a9f075b48d5ac856dadacf94433297a0209ad0c5633506","ssdeep":"96:ae4jcTe4j6GZxnOFlrGVxOfzKask7UDzIckkP1foO3Pb8hZaub:ae4jcTe4j6GyzSNzIckklnPc","tlshash":"f122bc66710a432813e12369b53b7646f32adef64840b15989e1b520d1aaf0fc3fddde","size":10123,"data":"","first_seen":"2025-10-13T19:31:14.860591Z","last_seen":"2026-05-28T03:55:05.177295Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4795cffbd1bc48ca0b3ab574d341793","sha1":"e414a0728114ddc381392329930e9cafae3a8795","sha256":"b899d383e6f2393c031827aea899094aad6f28d18c0d1d45563844f4bb72c844","sha512":"236f40aab3e3dafabdad6e5a91bb9d5f295d9933c7248ec55797b4002c024f5d6c55acf2d01c591e74462deed45c08a4efb3f9f482dfdd6487d46d6d2c315ba9","ssdeep":"1536:RGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:O6SOEAu","tlshash":"de43e9863652f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","size":59579,"data":"","first_seen":"2025-09-29T14:16:27.455974Z","last_seen":"2026-06-03T10:23:25.969565Z","times_seen":4969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/pum/pum-site-scripts.js?defer\u0026generated=1756761548\u0026ver=1.21.4","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92ed32dffae1b0b3312acd6ef8248cf3","sha1":"15adeb1a6208b2101ec103d7970a6c94aa517b6b","sha256":"20d9afcb576c50a636afb254abae04d0c3973aa87668824ad7f487ef0766372d","sha512":"639d6ab477f09f1edb7a0906f331f2df1af7202fc40425ff551c914f031e46ced557ec6fc5dbe5591a78f275d024cc4591c3b5c4f3c137c43f6767cf6879ad6f","ssdeep":"1536:LCGfzaI8uoB4ANgKf/c5/IOqIjPGVNfS1bt:TFWNz/c5/405","tlshash":"4b63f94d3990b69242ffb178512f160af333882a501a9890b668ccf57f7d98f9253f6d","size":70149,"data":"","first_seen":"2025-10-13T19:31:14.616641Z","last_seen":"2026-05-28T03:55:05.026829Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/dataforseo-marketing/js/js-cookie.min.js?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7781def0e9245115e07dbeaa6a19544f","sha1":"892e78730c50cdd1d3181cacdc28e44330c3b58d","sha256":"0b1aa0b9443038da4da13a9cf13dff08098a9c2f6c56d1016b7e23dfaf8707ae","sha512":"a8aa3aaabf4af8e97cd854cb12582a85372dfe655e96b3fb557f530e51039fc765853185f0fe24364874c537b35aab5924e6cddc1dc6575b936ee81f84a5a251","ssdeep":"","tlshash":"6231958930253c9d06ae1229776f27cfb1b84e095c8d698d5b1ca6f136326178057fe5","size":1603,"data":"","first_seen":"2025-07-03T16:57:10.780198Z","last_seen":"2026-05-28T03:55:05.123408Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/dvpn-core/assets/js/dvpn-frontend.js?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c16e779b6f1445da6c0e9750e5f3ecdf","sha1":"ee4c97f01b187a034b9883cb1fb7df2e0dc7eed9","sha256":"47c83b753185d7110748c5f127632f4f9342d2314f4ef9da8d6f4baacfe4cc4b","sha512":"00f0ea39303ccb0ddbe22b477b6f04e9eb1202e807d6e58a7ed3efb02294568893352a94eca1ffa133683a2a386e91bd336ac256343054aeee8aa339d909ecc3","ssdeep":"384:pJ2eV1J2URhIXfCxyQSBBOlCQSUSNIQEcHn:X2Ab2URhIvKpSBBOlCpUaIXWn","tlshash":"02c25169bb4b681d70b7b359453f8004ed3de82bd58056a479ee44193bf0b06b28eb9c","size":26409,"data":"","first_seen":"2023-06-18T19:53:19Z","last_seen":"2026-05-28T03:55:05.051713Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/css/custom-widget-accordion.min.css?ver=1760448894","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/custom-widget-accordion.min.css?ver=1760448894 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Oct 2025 13:34:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3z7R790%2F0519cX86gRlxa4Uey5Fj2YyLh6ZmGMVYoL8wHNu%2BsQ22fvJw5Uw6AOOylx78%2B1p4yAKk%2Bdo4s8HxjgSo84%2BwDGcvENk%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68ee517e-6d0\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a103852dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1744,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1744), with no line terminators","md5":"137dc24895fa5b438b9aa6e7f5ab7bc1","sha1":"6ad15c3d0512c4e20a84db64cb13c99652c9dcb6","sha256":"52a2bbb2d85e878d1062c65b13320cc2fa46e5fa2cb470fe9213dfdb06066eaa","sha512":"ef5f0bd2dab55a8c66316e1a7a4cd1c8e5c21a85462b406bffe299be8047ee6b93920552d54e26fb78c4c7358b571f8b9c3f7e510e9490440b6004f93072d0fa","ssdeep":"","tlshash":"d93134217c1b91061aafd9434b832b6d057062e8e8cd218ef903a813f7b9c5c7fe2127","first_seen":"2025-09-04T08:37:37.906112Z","last_seen":"2026-06-03T17:19:11.627955Z","times_seen":3370,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/zoog-core/assets/css/style.css?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/zoog-core/assets/css/style.css?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 02 Jun 2023 13:20:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=caxjk1xz5WgL7X3agG6XD7jGTld4SKwhTuDA7bloM%2FLz4oT%2Blem6SWMHH9bgJWsHQYWjX0YSCkf225uLWDqo7IlVVh0LfVSDlL4%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6479ec86-25e0\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fc839dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9696,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4494)","md5":"26f7214309e4db7280262f7d8f2477a0","sha1":"1278e41d6edc6ff4a7a3cb7f4a4b6c5b4fb6c7c2","sha256":"1a9073a164093b506f3b319196cdec44e9e55087bff8491677f624c4a3c17064","sha512":"4d8ccad69f1c176e13e652dff908e6347032fafe7bc910f685dddb69abaf5369a04cb25ed14d74aeabff379eb745a879b3d86b7a09890ccc8783fd90cf3ebd8c","ssdeep":"192:FdFHSOcRX5hx2mVLF5BWImgmUIs9RyXmqmwWW:DBtuPxZLFaciWW","tlshash":"2d1242369a200579f33ec0b9aac07a99a15d9012cb1a6eb758d8757dc6ce2ca04777cc","first_seen":"2023-06-18T19:53:20Z","last_seen":"2026-05-28T03:55:05.184484Z","times_seen":59,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.7.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.7.0 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 08 Nov 2021 15:24:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyHp6eeO6XR8TBws4IY%2FVkz1ZlDkqf3IbWGOd4MmQWeY9x5oLZbTo1vsXJIA01M%2BUJBq4PHhD6O3VpSnYidbai0ggPPexEx0nA0%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"61894133-4e9c\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10d8bbdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20124,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19905)","md5":"596d6e5d8400fd1e913f9adc21071f93","sha1":"fee2d7a4ac08d5a522c2298a5ad3ed30ac9e62ec","sha256":"159faf7827be43b4c85a35fc941924a9de59a169d42d600b49161f60debf9dff","sha512":"35e59dd6eabef234b48e1cf0d2e7b7943e35f953f5d5c79df686d81746ece426d781d3e75645d92310dd2dc15be456ee354a638d4da5d2e090b25abba0bdef50","ssdeep":"384:sekk5QRKhEJhCoJpIuxOqCSE3RGOdFzDlMKuLSav4RdEtq:sekk5xhEJhCoJpIuaSEhGOdFzDlMKuuN","tlshash":"1892d968ba5070f556b7373bf13b3b197233383a948651206415d8783abed4f222af9d","first_seen":"2023-03-07T01:03:11Z","last_seen":"2026-06-03T16:48:05.926042Z","times_seen":36119,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/dvpn-core/assets/js/builder.js?ver=1.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/dvpn-core/assets/js/builder.js?ver=1.0 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Jul 2025 13:09:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jLiO0065eqmdh9ic96aJWJVuYFA9jA%2Bl4dWlIYBCGBXfyDsG2%2F7Htem4lyLfKkFsf0hUixL5%2BMsWFbHObwfeEaC9ET7gsyZc2w%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"686fbb7e-a4e\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10f8c7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2638,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6a5344db7b9198928b0059e1e9fdc46f","sha1":"b73118ef451bdc834dca3dfd721b8b412a4dd4a7","sha256":"db657c2403df2e0307ac6c435bbfd81f5d206f0512a8f0f7a311116a1fdb0720","sha512":"0c8d30525665d07da140fdb12c37e46718d5bb9139ed9dc8ece41d47aa3d561fea544a7e313ec5ce665a9405dab72324cc878a9f02945dd5c3247639e6ca8f49","ssdeep":"","tlshash":"47515b1d301760f8407bfbbed62b4208e8b220ef60958b31be1e48050f718562ae7ecc","first_seen":"2023-06-18T19:53:19Z","last_seen":"2026-05-28T03:55:05.073535Z","times_seen":81,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.rybbit.io/api/script.js","fqdn":"app.rybbit.io","domain":"rybbit.io","tld":"io"},"ip":{"addr":"142.132.226.253","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.rybbit.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 22:49:20 GMT","end":"Fri, 28 Nov 2025 22:49:19 GMT"},"fingerprint":{"sha1":"1E:B1:69:A2:53:55:C4:3A:A6:BB:35:2B:D3:B6:6A:75:BE:7E:E4:53","sha256":"1A:34:30:9E:F7:35:07:9D:01:B7:CD:50:84:6F:B2:47:EE:00:4A:FE:9F:5E:AC:55:DC:BC:14:12:B7:0C:C4:83"}}},"request":{"raw":"GET /api/script.js HTTP/1.1\r\nHost: app.rybbit.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\netag: W/\"44b2-199e048c802\"\r\nlast-modified: Tue, 14 Oct 2025 01:14:50 GMT\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17586,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17585)","md5":"85f0ea7c2a9313e38e3438a9ce4d74ff","sha1":"db2505dd1de1e617b9181a4bc3f151f96b1ef2ed","sha256":"45f6e7229f7e6a34f900b74b3a5f1a784d65c823f61760781ef1e320560145e1","sha512":"20a8fe4fc8bc81649962c820333d17dc9a8c44fe3745fa40a498fef26e7a63cfafbedc5809dea2840c91e4f97678ee8b5c4844b1cd71f5f04dfd3a113fe59df5","ssdeep":"384:NTxmhPcGJHZ8NP8olavRQ0AFIo+wWK3GwofwKwLyCM1D0QuByOGBhgS19QQ8yOMX:N4NcGJHZ8NPZavRQ0AFIo+wWK3Gwofwo","tlshash":"2d82197133d9a87703eec1a2b07462827b7e1b92581e405cf66d3ed31584c8275f6bb8","first_seen":"2025-09-24T07:40:06.765679Z","last_seen":"2026-03-25T03:26:28.24877Z","times_seen":29,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":3,"connect":27,"send":0,"wait":28,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/google-fonts/fonts/rubik-ijwkbxyifdniv7nbrxw.woff2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/rubik-ijwkbxyifdniv7nbrxw.woff2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/wp-content/uploads/elementor/google-fonts/css/rubik.css?ver=1755677027\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35348\r\nlast-modified: Wed, 20 Aug 2025 08:03:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5dtuMJk7xlk0HRTeTBexSfSBanq2fi%2BC%2BrgoxgNVZDu61b4B%2BxjxqR2EJRNZgv7ftgmdz%2FOXLBoau6rChqHgmWTmXeRZfH9il4%3D\"}]}\r\netag: \"68a58163-8a14\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a14f981dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35348,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"b65daadded7406d746e61b25ebbe0ca9","sha1":"ea3f56e306962481bcb38735c71ea5039b9ce2bd","sha256":"691cd1d9b4c0cdf31a1dcf04259c86f92c85e69f6622abab7964d81e36890691","sha512":"d9e53ee3bcdede0965db0fe62de1b5b78d59bad2bc2fbf1ae3ef9152e5883cffdb694a36fffd00ebcc71aaff2c4b58630c808781e966231ce4fc103b62df002a","ssdeep":"768:ob6sJaIWkw3gUba/bdQl/tVgm+l1OXO+FtG4Vqh6rUPA/X:E6sJ4kuo8tLq1OXXPVqh6rAAf","tlshash":"80f2f19ffa66b986b08385e35f265d537aa30c6a6281f521596f210f34dd34f0e71f04","first_seen":"2025-06-08T13:10:33.776668Z","last_seen":"2026-06-03T17:17:49.882091Z","times_seen":3271,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.rybbit.io/api/track","fqdn":"app.rybbit.io","domain":"rybbit.io","tld":"io"},"ip":{"addr":"142.132.226.253","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.rybbit.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 22:49:20 GMT","end":"Fri, 28 Nov 2025 22:49:19 GMT"},"fingerprint":{"sha1":"1E:B1:69:A2:53:55:C4:3A:A6:BB:35:2B:D3:B6:6A:75:BE:7E:E4:53","sha256":"1A:34:30:9E:F7:35:07:9D:01:B7:CD:50:84:6F:B2:47:EE:00:4A:FE:9F:5E:AC:55:DC:BC:14:12:B7:0C:C4:83"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: app.rybbit.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zooog.info/\r\nContent-Type: application/json\r\nContent-Length: 395\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nvia: 1.1 Caddy\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\nvary: Origin\r\naccess-control-allow-origin: https://zooog.info\r\naccess-control-allow-credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-03T17:45:26.107379Z","times_seen":151188,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.clarity.ms/c.gif?ctsa=mr\u0026CtsSyncId=FA27C61E32AC4DE9B1E5B84D896524ED\u0026MUID=1C156DD1AC3C6CF62E9E7B54AD726D97","fqdn":"c.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c.msn.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Sat, 11 Oct 2025 23:23:02 GMT","end":"Thu, 09 Apr 2026 23:23:02 GMT"},"fingerprint":{"sha1":"01:EE:1B:54:2A:08:98:01:F5:B8:9D:16:25:A1:8C:E6:3C:DE:46:E5","sha256":"FC:0B:9F:AE:E8:A1:E7:C2:A3:64:B0:2E:BF:41:1E:C8:F7:07:9E:F7:BA:40:1D:2B:72:68:E0:60:9B:40:EB:F0"}}},"request":{"raw":"GET /c.gif?ctsa=mr\u0026CtsSyncId=FA27C61E32AC4DE9B1E5B84D896524ED\u0026MUID=1C156DD1AC3C6CF62E9E7B54AD726D97 HTTP/1.1\r\nHost: c.clarity.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zooog.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SM=T; MUID=0BC64B7DD1416355084F5DF8D5416DC9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncache-control: private, no-cache, proxy-revalidate, no-store\r\npragma: no-cache\r\nlast-modified: Tue, 30 Sep 2025 20:54:44 GMT\r\netag: \"2ddc65734c32dc1:0\"\r\nx-powered-by: ASP.NET\r\np3p: CP=\"BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo\"\r\nset-cookie: SM=C; domain=c.clarity.ms; path=/; SameSite=None; Secure;\nMUID=1C156DD1AC3C6CF62E9E7B54AD726D97; domain=.clarity.ms; expires=Sun, 08-Nov-2026 19:27:56 GMT; path=/; SameSite=None; Secure; Priority=High;\nMR=0; domain=c.clarity.ms; expires=Tue, 21-Oct-2025 19:27:56 GMT; path=/; SameSite=None; Secure;\nANONCHK=0; domain=c.clarity.ms; expires=Tue, 14-Oct-2025 19:37:56 GMT; path=/; SameSite=None; Secure;\r\nx-azure-ref: 20251014T192756Z-r1dfb69df85wlrlhhC1SVGmep8000000033000000000an66\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"32023bb33cfb2a1990a4ef2d85b6ac16","sha1":"23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1","sha256":"99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12","sha512":"d052ecec2839340876eb57247cfc2e777dd7f2e868dc37cd3f3f740c8deb94917a0c9f2a4fc8229987a0b91b04726de2d1e9f6bcbe3f9bef0e4b7e0d7f65ea12","ssdeep":"","tlshash":"fb900413f7c04440c155d03005170740175cc0100514030f405d104c5c753511c03010","first_seen":"2023-04-05T10:33:55Z","last_seen":"2026-06-03T15:53:53.119427Z","times_seen":31395,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/css/dist/components/style.min.css?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-includes/css/dist/components/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 02 May 2025 12:50:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9P6Imft9kGUv1aIrpMY9t1yE0d9%2Fg%2BddcgTvBWpAsdqlCnpwEuz%2BB3a6khxCxOxQ4XOz%2Bf%2F14EzqAD38XSSo7pE4RnELfMbqfI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"6814bf9a-15667\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fb830dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87655,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"9cff4ca504213841d70a68861c99f510","sha1":"a01f4eaf7aeaa01ea51ff0cd66a62e6a3df66a4e","sha256":"564a066b97b4a5f89415522ee2c046690c3a12c3a344c5375021197063acf4de","sha512":"d1672ca162afcd8e721f1f22a0063599290eaf5d5a6b4201a43f1446b50dedeb9d6a851f5f5f22ab95e98e0ded7eb53b1f61e6b240cecfdc57c1d3fca4ce43b9","ssdeep":"768:IZ5ZWvEo1ColTAaZxISy/2EKCknclD9oTJ76UNkO6rs9jb9jSHt9GSM8cJzDM2:ao1ColTAaZxwlD9oTJ7iyg2","tlshash":"4083a43190501d2a61e3d3a85370fd1b22d452d5dec3e9dba413a9e8cbc728e097b6db","first_seen":"2025-04-17T00:55:00.878882Z","last_seen":"2026-06-03T14:49:48.507364Z","times_seen":11157,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.32.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.32.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8PKAz8HfbBn2elNIa%2BhiJMPk9vJFq%2BrnXJmE02Zlyfzc4B8vEvOx0bTTmpeknS8DUsEcqG4gIq16JLSq1XEo%2BePT%2BEQleDh9uCI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"68dd5f08-156e\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a103851dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5486,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5486), with no line terminators","md5":"f8ab0c98754e13666d2cd378bd023dbb","sha1":"a5226ce1f5dd1eaba7a6d2490eb081bfcc861a0c","sha256":"196f351ce1a780302b50e7b2404023102d7f555aa518d62ec678829c4b7b1185","sha512":"4d78e7fa90bccdf3ac5c09bae6cf94f7f249df6dabb23a510962d1b96072de072a6f81ada0e70f9087a6c38d909aaa42fb5350f7c8d1fa7f90be7578fb2698be","ssdeep":"48:VbD0j9UWW1KebuS9OwVFd4Rd8JN6JnDYQ1I1kFYFsFaFbdFvFblFaFbpFvFbX:Vf0RH1f0qYm6qg3B703VN","tlshash":"adb18c823f830123635f4e67292357bda2280dc44997b6aad2e1ac87e2b5cf5375f854","first_seen":"2024-12-17T09:11:11.376513Z","last_seen":"2026-06-03T17:59:35.847599Z","times_seen":73934,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/google-fonts/css/rubik.css?ver=1755677027","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/rubik.css?ver=1755677027 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Aug 2025 08:03:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LHROM995mtLzRdk0T1edgiy7f7cyef27UvU5xFF8yt8Cg4M7lmhzz1LjFny2QNSsokzwoUcjmlUf4veRkWgoUXPrb5HC6Y9WTDc%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"68a58163-98d3\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a105867dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39123,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (649)","md5":"da481a29551b860f53f980bd4f3ef1cf","sha1":"739705a031d427a6ff7138708e8bd94b6b8c2921","sha256":"30d8489964b5da5e05c2452134fce3bf2d6242d5e06a0c8bb80c0fb3c0ed3df2","sha512":"c49cece2bed111623805d2206f7bbb7dd94e3e66d1ee59ad2c7ac5265642c6b72f551e74749b327e79b35f4177e043d7ff6ce9b2a2755015199646cc799e8c71","ssdeep":"384:jRlkjs8ndXKlk8sVOsETlkpsCVTBElkCs78CmNlkHsgbh7GlkgspCwYvlkts2JHL:DPtLt3VBGaGKmaC","tlshash":"1a0399e1181e5240bb9b1dc6b2cf2d27d90da69a3084c56c97fd06daace7c2432917dd","first_seen":"2025-10-13T19:31:15.51089Z","last_seen":"2026-05-28T03:55:05.080516Z","times_seen":32,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2025/04/No-pressure-but-you-are-missing-desktop-768x402.webp","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/No-pressure-but-you-are-missing-desktop-768x402.webp HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13100\r\nlast-modified: Wed, 02 Apr 2025 12:05:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2UVFNbf4l9aTPodJEmizxkPk%2FFkHFIL4CEoqaPZfbF16Eqzh16rvPb%2Bh8h%2FA8fRsezQTZTxd5Q39mulFDPA3lh1cZfwhzuYUfQ%3D\"}]}\r\netag: \"67ed2807-332c\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10787fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x402, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e70eedc8bb4c95fa37d87dbc727fcaa6","sha1":"1e74e73e1d4c712b91cc7cc2c5391c4cb55074a4","sha256":"87ddcb725ee0c11f83be3441e79cb893e822b7e86baea87eefed1b9858832393","sha512":"2c84d8a8bdf599f829f377e065fa3ffebd29475748dc5a38bfe2314dc5aedfff6ba4c6c3b9ea8928f5fde6e0ce83eccee13d4165630969e1f23c3b3234c824e3","ssdeep":"384:yTDOYFkfANFt7f6T8uZZMAoxHZGOhSFt0y:yDOQkfANFZGJZMAoxHZGkSFV","tlshash":"e542bf3c2d66e8e9ed532a76fda03019ccc58fb07c4b5ba1507326500ee2e8f86b4718","first_seen":"2025-10-13T19:31:14.331965Z","last_seen":"2025-10-30T07:48:34.405676Z","times_seen":19,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81xWdf8JmirTKPWsftWzlotRCbS2pT3oNTUXuLBOhRMZvSCAJ8DSRc31XrVvN7LvudmnGobkrtfQDuw0lSvaUMYd2GlZBZvmPC8%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68dd5f08-164b\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10b8afdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5707,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5667)","md5":"19e75b5538491cf2b6af6701c37bb298","sha1":"8467f54e3d487b72250604abbcc4c71fc603786c","sha256":"472f86f36b79a1f9647af8f2f1d943bf94269b67fa749a6613b97b2e7f7e99e6","sha512":"cddb55bb9241ab56d320f94ce26bdeb27e1bd8d563d2abfb5a55e68de0996edadd1304629bf0aec4f0387eaabd6a1107a9395dd4133e86bbed3cc45f8914142e","ssdeep":"96:B8rAtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:jsNukQ6jq9OVM6MeHGlQTvog02","tlshash":"b5c153941a54fd2b22e134d8e41ba734662ec0333c1afdc1fa22dce955e8ed183aa531","first_seen":"2025-09-29T14:16:27.438426Z","last_seen":"2026-06-03T10:23:25.953564Z","times_seen":4972,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/google-fonts/fonts/rubik-ijwkbxyifdniv7nbrxw.woff2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/rubik-ijwkbxyifdniv7nbrxw.woff2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/wp-content/uploads/elementor/google-fonts/css/rubik.css?ver=1755677027\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35348\r\nlast-modified: Wed, 20 Aug 2025 08:03:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8cnkIRqya6XRnbVD3qcs%2BgDYg2%2BzhtHxuC3fmUC2Awn%2Fp5agvFD684vpAWLFZ1RilJQ4U6DKim1q6rJAh4ui1UbZT5dqByqeuo0%3D\"}]}\r\netag: \"68a58163-8a14\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a15398ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35348,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"b65daadded7406d746e61b25ebbe0ca9","sha1":"ea3f56e306962481bcb38735c71ea5039b9ce2bd","sha256":"691cd1d9b4c0cdf31a1dcf04259c86f92c85e69f6622abab7964d81e36890691","sha512":"d9e53ee3bcdede0965db0fe62de1b5b78d59bad2bc2fbf1ae3ef9152e5883cffdb694a36fffd00ebcc71aaff2c4b58630c808781e966231ce4fc103b62df002a","ssdeep":"768:ob6sJaIWkw3gUba/bdQl/tVgm+l1OXO+FtG4Vqh6rUPA/X:E6sJ4kuo8tLq1OXXPVqh6rAAf","tlshash":"80f2f19ffa66b986b08385e35f265d537aa30c6a6281f521596f210f34dd34f0e71f04","first_seen":"2025-06-08T13:10:33.776668Z","last_seen":"2026-06-03T17:17:49.882091Z","times_seen":3271,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.bing.com/c.gif?ctsa=mr\u0026CtsSyncId=FA27C61E32AC4DE9B1E5B84D896524ED\u0026RedC=c.clarity.ms\u0026MXFR=0BC64B7DD1416355084F5DF8D5416DC9","fqdn":"c.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 09 Sep 2025 10:31:56 GMT","end":"Sun, 08 Mar 2026 10:31:56 GMT"},"fingerprint":{"sha1":"50:8E:E5:0E:CF:A8:D3:35:02:44:1B:62:B8:0C:E5:6C:F2:92:A0:4A","sha256":"AE:24:3D:66:8E:C9:C7:F7:4A:0D:CD:1A:D2:1C:66:76:B4:EF:E3:0C:39:72:89:34:B3:62:09:3A:F8:86:BF:77"}}},"request":{"raw":"GET /c.gif?ctsa=mr\u0026CtsSyncId=FA27C61E32AC4DE9B1E5B84D896524ED\u0026RedC=c.clarity.ms\u0026MXFR=0BC64B7DD1416355084F5DF8D5416DC9 HTTP/1.1\r\nHost: c.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zooog.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: private, no-cache, proxy-revalidate, no-store\r\npragma: no-cache\r\nlocation: https://c.clarity.ms/c.gif?ctsa=mr\u0026CtsSyncId=FA27C61E32AC4DE9B1E5B84D896524ED\u0026MUID=1C156DD1AC3C6CF62E9E7B54AD726D97\r\np3p: CP=\"BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo\"\r\nset-cookie: MUID=1C156DD1AC3C6CF62E9E7B54AD726D97; domain=.bing.com; expires=Sun, 08-Nov-2026 19:27:56 GMT; path=/; SameSite=None; Secure; Priority=High;\nMR=0; domain=c.bing.com; expires=Tue, 21-Oct-2025 19:27:56 GMT; path=/; SameSite=None; Secure;\nSRM_B=1C156DD1AC3C6CF62E9E7B54AD726D97; domain=c.bing.com; expires=Sun, 08-Nov-2026 19:27:56 GMT; path=/; SameSite=None; Secure;\r\nx-powered-by: ASP.NET\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 31D596F036084F4B94561ED1131E88B0 Ref B: OSL231050214036 Ref C: 2025-10-14T19:27:56Z\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":49,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/zoog-core/lib/zoog-icons/style.css?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/zoog-core/lib/zoog-icons/style.css?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Dec 2021 12:42:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4AODtbq%2F6%2Bmz50cRyVqM%2BCUSTBwe4Jvr79MbfH9tXJ5mV%2BpMiCTb5LFZMDrLVmKCB7kz7uZJD2gAuRJtzcLtEI4mG95ZghKfQeo%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"61c46eb7-bf3\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fb834dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3059,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3059), with no line terminators","md5":"431682022c8aa94a62ec94a0424f6696","sha1":"84501870df43baec7939e17f9207649d32d1413f","sha256":"7195c332c0d683253fa73c9e1cc19c0c1c6bcc926e727f3d59b368e314011cda","sha512":"246e52660b9b6acfd9319d667bbaa1cf455447bab17a624c964af1942ff0a36abe00420ea01ad3316fdb46c17764c42f2b35b8e33f87d6b3b90be22da9081b84","ssdeep":"","tlshash":"fe5122e6e82e58c8fb71c802afc0aa981481b135ed990d52f41f841c5df227935cafbc","first_seen":"2023-06-18T19:53:20Z","last_seen":"2026-05-28T03:55:05.198785Z","times_seen":75,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1755677001","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1755677001 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Aug 2025 08:03:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TAW1kYFJIguQbbZUbN87C6jzX2xzrj1PPs4Rsgzm1XRiqawlOAwyS%2BQ4k9XoFPrhrtcz85BtstLBUVOP5QQDNrxtOkd0y%2FS2gRQ%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"68a58149-5ffa\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a105866dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24570,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"79dcadcedd8cbb89c8623abc03c410db","sha1":"05f3f7e7e22961ddce8d71bbf9a21ca02d6c1e70","sha256":"af61095f5417aa582138d5254bf6626f0ccec9b24de84293fdef536967a32fe8","sha512":"42806535c155c42884d18f6ae0ef61a20f348d3e3192fe2bd5f0df2520f40226a3056a396f3fda7a6eabc2bc240e1b051bef4f075aaa41309b8a423c7ad8a168","ssdeep":"384:bdjLdDdydfwdkdRd8jMkLf9xejjzLkfmq1Oje2Nf7nMlj1N2fUgzwjAYffZVK3j/:bdPdDdydodkdRd8QkLVxejXLk+q1Oa2N","tlshash":"f4b2ed91549a1101a7974cc5b3cb7f25984d508ab080d6fe9ffc08d8adebe2523a27df","first_seen":"2025-10-13T19:31:15.083004Z","last_seen":"2026-05-28T03:55:05.078437Z","times_seen":32,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2025/05/pop-up-Try-Premium-risk-free.webp","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/pop-up-Try-Premium-risk-free.webp HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 174210\r\nlast-modified: Mon, 26 May 2025 08:21:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hRC7qvRFJhkrY1SdRgYc5tWLfDI68Na0mEnYtXmWCgMuyCt5fSZjhKtXG%2Fu9qpxFzVPkbjCsiaffO5ZWR7nsX2SYeWZO%2FHhWrb8%3D\"}]}\r\netag: \"683424a3-2a882\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10787adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174210,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b0544cb4416154be1013b54e56f23e2","sha1":"9f8ff1e6cd40721326acb749d7ccd57e156d61d6","sha256":"15b3937a78a7de387379767a89a802f8df885ae904350d4ccf5074977552e393","sha512":"379daa6d1521da18cd80c958336aba0715ab1ee5249a574f135838dab3ffb45a9d0bdb747f060cceb6220d74ef41826c0c89101fcbdea0b04986b81c2e8d1cc1","ssdeep":"3072:+CzeF6DuEAxc9nHjkrfkXJ+IEqE4MRlmYHxDctLjWsxZk5s4JjJG3J:mFCu/Yy8JYqWjxOtLj1IsXZ","tlshash":"540412b34a2926c3da2053b767c91910a456185a5367cc39a2a39ce1d0efcef7ce770d","first_seen":"2025-10-13T19:31:15.486765Z","last_seen":"2026-05-28T03:55:04.997634Z","times_seen":45,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/js/bootstrap.bundle.min.js?ver=4.3.1","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/js/bootstrap.bundle.min.js?ver=4.3.1 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Sep 2021 13:35:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwzxa5T53waZ91OKLl4nXLeSCaB67zL%2FA%2Bm55gyahNVbXGA0u%2FPxqq0PlOkro8k7dqQR67K0jAmxlATgL18LYvjQEXeqPE%2BSqCA%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"61531a0d-11536\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10989cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65297)","md5":"ef58fee438cd2da2c3b33ff6f1cfeebf","sha1":"41a4836fc0253324e7e583905f47ba7194bac91d","sha256":"13f578716138aaf01e3b930e863b46b6a0f33e77513b52c193c949fcf47b080e","sha512":"53ce49ab8ecaba729e823bfa8153009d0c2d423a2f757cff0d03af428c6b0fa8f76867c30dba7900026e39d9d0c75b1e7ccf740fd28129242464647986b2dbb6","ssdeep":"1536:EwGC7pXnzlEHnMX6T50OpPX8EyPoWQ8Bbe:UezMMX69JPtyPoJ","tlshash":"c163c64a3250b4b202dfa177903f460bb737689da50a811cb95da8ed2d7cd993267f3c","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-06-02T23:44:22.695705Z","times_seen":2956,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq; pll_language=zh-cn; gclid=null; utm_source=adsterra; utm_medium=popunder; utm_campaign=cn_windows_registration_zooog; utm_term=none; utm_content=none; referrer_params_1=?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog; PAPVisitorId=i8pXBSMPJaEnzRzMeIjIFDhLy1asVf69; _fbp=fb.1.1760470076229.665650788757767916; _clck=1kqlz9p%5E2%5Eg05%5E0%5E2113\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jKxtgdmE7z04m2RzTKOhfE%2BgO4o5lwYgGxmPqS0zipEjgtxYKrAN1pTgRbc2U6O9yPsIdrdgOlUOgHZ4XLL0niU7sDzMJvAsZII%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68dd5f08-214d\"\r\nexpires: Sun, 11 Jan 2026 19:30:34 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a19aa48dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8525,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8485)","md5":"ba814657bdef695283818df25801f4d1","sha1":"7bab765c254e787ce174c602fe3a56eb6af43530","sha256":"a59a853a38e6a43a229bd96a9fc3181626f7e0590edda9bc52beef2a8d09a422","sha512":"36378051d3e010a2843e82559e045eed139f3cabc62b460cd7cc20fa9ba4215f788649af0cf9e712bac7374ba51841d127bd717af751f5892ae413c19881b3fb","ssdeep":"192:7wfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:MHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"ea02310a74c1982db58b58ba3532432c66a8014de1018f6db1bf78fb85a6d82377b7f1","first_seen":"2025-09-29T14:16:27.398702Z","last_seen":"2026-06-03T10:23:25.949331Z","times_seen":5267,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/css/post-6.css?ver=1760448894","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1760448894 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Oct 2025 13:34:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufSA%2BcIJWAefooDGLqOiil1OmFRaJOAaW7Z2yuR78H2lDt77elxhXYDvevuK7k%2FE7A6YUm013ob91Y0zeA8GDejpl6qS42i2TvU%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68ee517e-555\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a10384edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1365,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1365), with no line terminators","md5":"76d7fe0dca35a27ca45618e38ecece96","sha1":"9ba171b3c0118bbf1517613c076af191e698977c","sha256":"9030f8a1dcdd1c1d6fbeeb7ea7bd5085c89d647043b7487ce6d90cd6333b7d8f","sha512":"97fd819888e8378d1d964dab754ba5f05a27a081bc3177adac815d6261a1dbbfcca9b71dbc892529218387ddcb22aba2a7245531647600c3e3179812c3c07e4f","ssdeep":"","tlshash":"e32105457a66d032e07b052f91c3a42c112cd45f625f8adfe41d9649f8bea4b226c643","first_seen":"2025-10-13T19:31:15.443381Z","last_seen":"2026-05-28T03:55:05.151776Z","times_seen":45,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2021/11/create-account.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/create-account.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 41331\r\nlast-modified: Wed, 21 Dec 2022 10:10:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RjHtzsCwxa0ixQpAsh5ZB0aoqoMx026fCIwtBdpfcKMF4SlKjBXvzVguWOsTz5toGrpLIPCn1NPIpT095eX6jwnssUNBBszaNBs%3D\"}]}\r\netag: \"63a2dbac-a173\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a106870dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41331,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 796 x 1322, 8-bit colormap, non-interlaced","md5":"e46d0db6f9ce28ccac5b3374d5fe4021","sha1":"37563938638d38693e9518d6d37d7d28f8bf3436","sha256":"4fcc2263b8395128123248b64fb5e9d77fc0202e830da00ae8e60c6bb2274979","sha512":"7fe4e4614c5e1363807df2bc3620d43aa79cf10e3171f02d8449e4f69e54d2448268eb7893ee0e32040a80406cb31d84b111cd69997f8ed6b1b73935eb6a3ce7","ssdeep":"768:DfFvo5WMyP/OWkMS0QCN09kgHh9xraXVlkazOX9YMrv5wBdtYslpzSrBMK:D98yHONdvxYHONP5wBUsl6","tlshash":"0903f1462741333aa9a75520a20ab6eb58eb71c86f7249071f7a6ec1603decbcc83645","first_seen":"2025-10-13T19:31:14.71774Z","last_seen":"2025-12-19T05:41:03.617905Z","times_seen":30,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCyCtF3DuPnMGnzSi2giCLvukniBbtwho8cyylh48Sb7z%2BoOKNKAztrR8R8ewO5C%2FXhHoEmJvo7%2F7U8bi6%2FsZA%2BmWG%2F4YQwj3sI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68dd5f08-7e6a\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10c8b8dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32362,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32322)","md5":"11b7c41f4b66211a75fbcb90f1653d72","sha1":"a84b1b29e7fce91619ae27bdbf98726118eb6de1","sha256":"d09a6a5f9de86211c5b9837c65bf1a2f8e8f2d785f2320b945b2427d1206ca17","sha512":"0a1506392f8babdc4c185c8f118058bdc31298d9ccdb3306375591c773d6f71661bed376d71c7dd6f8768325c998f8abbba125f693222e923e2d00ddb7b7bbe2","ssdeep":"768:9j1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:PcaRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"65e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","first_seen":"2025-09-29T14:16:27.310666Z","last_seen":"2026-06-03T10:23:25.954942Z","times_seen":4997,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/google-fonts/fonts/rubik-ijwkbxyifdniv7nbrxw.woff2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/rubik-ijwkbxyifdniv7nbrxw.woff2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/wp-content/uploads/elementor/google-fonts/css/rubik.css?ver=1755677027\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35348\r\nlast-modified: Wed, 20 Aug 2025 08:03:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYIN7nARLdx%2F3tNdElT0vxJiJcVSxYgHzjQ%2BcSELZD1%2FbdtLq%2FU%2F4xWlzfQCiIwv9fYsoIipXvNc%2Bmrja%2F7TGFT2qTJ5llcxhMo%3D\"}]}\r\netag: \"68a58163-8a14\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a14f982dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35348,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"b65daadded7406d746e61b25ebbe0ca9","sha1":"ea3f56e306962481bcb38735c71ea5039b9ce2bd","sha256":"691cd1d9b4c0cdf31a1dcf04259c86f92c85e69f6622abab7964d81e36890691","sha512":"d9e53ee3bcdede0965db0fe62de1b5b78d59bad2bc2fbf1ae3ef9152e5883cffdb694a36fffd00ebcc71aaff2c4b58630c808781e966231ce4fc103b62df002a","ssdeep":"768:ob6sJaIWkw3gUba/bdQl/tVgm+l1OXO+FtG4Vqh6rUPA/X:E6sJ4kuo8tLq1OXXPVqh6rAAf","tlshash":"80f2f19ffa66b986b08385e35f265d537aa30c6a6281f521596f210f34dd34f0e71f04","first_seen":"2025-06-08T13:10:33.776668Z","last_seen":"2026-06-03T17:17:49.882091Z","times_seen":3271,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.rybbit.io/api/track","fqdn":"app.rybbit.io","domain":"rybbit.io","tld":"io"},"ip":{"addr":"142.132.226.253","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.rybbit.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 22:49:20 GMT","end":"Fri, 28 Nov 2025 22:49:19 GMT"},"fingerprint":{"sha1":"1E:B1:69:A2:53:55:C4:3A:A6:BB:35:2B:D3:B6:6A:75:BE:7E:E4:53","sha256":"1A:34:30:9E:F7:35:07:9D:01:B7:CD:50:84:6F:B2:47:EE:00:4A:FE:9F:5E:AC:55:DC:BC:14:12:B7:0C:C4:83"}}},"request":{"raw":"OPTIONS /api/track HTTP/1.1\r\nHost: app.rybbit.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://zooog.info/\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\ncontent-length: 0\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\naccess-control-allow-origin: https://zooog.info\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, PATCH\r\nvia: 1.1 Caddy\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helpcrunch.com/fonts/widget-v3/Inter-SemiBold.woff","fqdn":"helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"172.67.72.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helpcrunch.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 01:48:20 GMT","end":"Wed, 17 Dec 2025 01:48:19 GMT"},"fingerprint":{"sha1":"ED:07:CC:80:9E:5C:DD:D1:C8:0F:E9:48:4C:01:60:3B:CD:FB:4B:00","sha256":"5D:4B:24:C9:50:3D:E3:8A:0B:93:B4:76:FB:7B:E3:55:E9:20:A1:E5:FE:E3:D4:E9:8D:D6:0B:6E:0F:E0:D2:21"}}},"request":{"raw":"GET /fonts/widget-v3/Inter-SemiBold.woff HTTP/1.1\r\nHost: helpcrunch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/font-woff\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 20:59:01 GMT\r\nvary: accept-encoding\r\nexpires: Sun, 04 Oct 2026 19:30:34 GMT\r\ncache-control: max-age=30758400\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZ0FrYk5exwZy5nz%2F4MemT4kOMJyStl7k8P2XSl%2BC9cBuVTHcM3%2FqhhKK%2BlLNUk0vcaWIlsHM32GGVooy6cIsJ2Ds08BBLMKIXr%2FW8k%3D\"}]}\r\nage: 86241\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68e42d95-11cfc\"\r\ncontent-encoding: br\r\ncf-ray: 98e97a1ca95ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72956,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 72956, version 1.0","md5":"de1553f9991ceb1a27c8b815d35063cb","sha1":"366b0c8a5d796081073f8c2b880f1d35172dc7c7","sha256":"f6000e760ed9103684d286734efab2c2a0ae3ac8ce86bdb3287d4adf239710e4","sha512":"1750275dd98ed2982fe69cfccaff2287b2d8fca6faa38c676b269d3ed63c74b254a65320a997a66594874afb30635c6d4e3623e96f8a4d2b27ea4a39c67b0203","ssdeep":"1536:ataNov2b4Sall7LHS0o2gOJjFhf4M7cegd1N1z8GB4rWDFi+:aVv2bY7LSjpOnhfZFGkqFi+","tlshash":"916302565e9853958e5301bea3bf25116390834a2b057ddc3dfb7fa78fc5582b401af0","first_seen":"2023-04-17T08:44:08Z","last_seen":"2026-06-03T09:01:42.317325Z","times_seen":539,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":8,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoogvpn.helpcrunch.com/api/v2/applications/2fc9ac2f-d0c6-4ee4-9da0-7cdcbb84ae7a","fqdn":"zoogvpn.helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"172.67.72.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:57.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helpcrunch.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 01:48:20 GMT","end":"Wed, 17 Dec 2025 01:48:19 GMT"},"fingerprint":{"sha1":"ED:07:CC:80:9E:5C:DD:D1:C8:0F:E9:48:4C:01:60:3B:CD:FB:4B:00","sha256":"5D:4B:24:C9:50:3D:E3:8A:0B:93:B4:76:FB:7B:E3:55:E9:20:A1:E5:FE:E3:D4:E9:8D:D6:0B:6E:0F:E0:D2:21"}}},"request":{"raw":"OPTIONS /api/v2/applications/2fc9ac2f-d0c6-4ee4-9da0-7cdcbb84ae7a HTTP/1.1\r\nHost: zoogvpn.helpcrunch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://zooog.info/\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: PHP/7.3.33\r\ncache-control: no-cache, private\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: DELETE, GET, POST, PUT, PATCH\r\naccess-control-allow-headers: AUTHORIZATION,CONTENT-TYPE\r\nx-request-id: 68eea43d4ffe5\r\ncontent-security-policy: frame-ancestors 'none';\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U58HNPnrvJyfhcoefQRLqpG9CfcShPVi7SDnMeEL5Pz2aUaM7PMvWILzXQ7Mj3tXsu58ldDpuH36oPrr1%2B4x8I6TsQv2Esxyqe16DbYj4EASkltWYg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98e97a1ef86aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/tr.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/tr.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 236\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oRqh7myZ8Hw1aR%2FurB0TLK7ajbBA42m4jFmpQhrOnzJiafhN%2FgavJv1RkjmihSf40jayMEeYwk%2BupjPPvcF7nFGnLikprt23vfI%3D\"}]}\r\netag: \"6645f620-ec\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10888cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"6632066326ed52ed1b2ebd965cd0f4ae","sha1":"f9391bc0b5540b6ec7c287d0074a26834a8f0200","sha256":"868599246b1db45b8e840be750bff93550178aedbb1534d01f665a55913a4c74","sha512":"35c21adc8713359c27fb70948a005ecc3c6e35f3819234d1fd31d1cba16ea1dd3899725664e1d04a7271f7d9871450f98f50d255b91d87307aa727f6209830b4","ssdeep":"","tlshash":"8cd097f512823d1ae88543770401a114ca0102788860280e0864c928c7623e099f06b4","first_seen":"2023-07-24T06:13:04Z","last_seen":"2026-05-28T03:55:05.041288Z","times_seen":174,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"track.zooog.info/conversion.js?cid=wqbqfn8h30p0jbed3in57ubq\u0026payout=OPTIONAL\u0026txid=OPTIONAL\u0026et=real_page_view","fqdn":"track.zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"13.33.235.39","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.zooog.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Tue, 11 Mar 2025 00:00:00 GMT","end":"Thu, 09 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:4E:41:6C:4B:E1:1F:B8:26:E9:39:F5:63:84:19:9E:13:89:25:60","sha256":"5D:CE:8C:CF:63:69:5B:95:F7:CC:C6:F2:39:18:28:3D:32:8B:C5:E2:BF:C6:9A:EC:D1:58:11:37:1E:6B:F2:DA"}}},"request":{"raw":"GET /conversion.js?cid=wqbqfn8h30p0jbed3in57ubq\u0026payout=OPTIONAL\u0026txid=OPTIONAL\u0026et=real_page_view HTTP/1.1\r\nHost: track.zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\nserver: nginx\r\ncache-control: no-store, no-cache, pre-check=0, post-check=0\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 08670c20624d4665fb5e04c733dbaa18.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P7\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: oBidUuFsHG9ote_cNNxfHL1yncrxhYYtMgXx6YI8bJEyqXlraqIVFg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":190,"dns":1,"connect":13,"send":0,"wait":42,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"track.zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"track.zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/signals/config/2004248823089234?v=2.9.235\u0026r=stable\u0026domain=zooog.info\u0026hme=17acfb61045d3371dfae695fa3b5ad6946c5e7b0f340bb5dc12b59e9cfc87854\u0026ex_m=88%2C149%2C129%2C19%2C123%2C62%2C42%2C124%2C69%2C61%2C136%2C77%2C13%2C87%2C27%2C118%2C109%2C67%2C70%2C117%2C133%2C96%2C138%2C7%2C3%2C4%2C6%2C5%2C2%2C78%2C86%2C139%2C215%2C161%2C56%2C220%2C217%2C218%2C49%2C176%2C26%2C66%2C224%2C223%2C164%2C29%2C55%2C8%2C58%2C82%2C83%2C84%2C89%2C113%2C28%2C25%2C116%2C112%2C111%2C130%2C68%2C132%2C131%2C44%2C114%2C54%2C106%2C12%2C135%2C39%2C205%2C207%2C171%2C22%2C23%2C24%2C16%2C17%2C38%2C34%2C36%2C35%2C73%2C79%2C81%2C94%2C122%2C125%2C40%2C95%2C20%2C18%2C100%2C63%2C32%2C127%2C126%2C128%2C119%2C21%2C31%2C53%2C93%2C134%2C64%2C15%2C30%2C186%2C157%2C266%2C203%2C147%2C189%2C182%2C91%2C115%2C72%2C104%2C48%2C41%2C102%2C103%2C108%2C52%2C14%2C110%2C101%2C59%2C43%2C97%2C47%2C50%2C46%2C85%2C137%2C0%2C107%2C11%2C105%2C9%2C1%2C51%2C80%2C57%2C60%2C99%2C76%2C75%2C45%2C120%2C74%2C71%2C65%2C98%2C90%2C37%2C121%2C33%2C92%2C10%2C140","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Wed, 22 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"9C:F2:36:25:23:20:27:BB:8A:DB:2B:5C:FD:1D:C7:5E:77:A5:81:38","sha256":"27:5B:C7:BD:5A:2D:AE:D4:DD:D1:34:BB:58:96:D9:62:0A:4A:09:1D:AC:D5:B0:15:00:10:EE:51:B9:48:2F:94"}}},"request":{"raw":"GET /signals/config/2004248823089234?v=2.9.235\u0026r=stable\u0026domain=zooog.info\u0026hme=17acfb61045d3371dfae695fa3b5ad6946c5e7b0f340bb5dc12b59e9cfc87854\u0026ex_m=88%2C149%2C129%2C19%2C123%2C62%2C42%2C124%2C69%2C61%2C136%2C77%2C13%2C87%2C27%2C118%2C109%2C67%2C70%2C117%2C133%2C96%2C138%2C7%2C3%2C4%2C6%2C5%2C2%2C78%2C86%2C139%2C215%2C161%2C56%2C220%2C217%2C218%2C49%2C176%2C26%2C66%2C224%2C223%2C164%2C29%2C55%2C8%2C58%2C82%2C83%2C84%2C89%2C113%2C28%2C25%2C116%2C112%2C111%2C130%2C68%2C132%2C131%2C44%2C114%2C54%2C106%2C12%2C135%2C39%2C205%2C207%2C171%2C22%2C23%2C24%2C16%2C17%2C38%2C34%2C36%2C35%2C73%2C79%2C81%2C94%2C122%2C125%2C40%2C95%2C20%2C18%2C100%2C63%2C32%2C127%2C126%2C128%2C119%2C21%2C31%2C53%2C93%2C134%2C64%2C15%2C30%2C186%2C157%2C266%2C203%2C147%2C189%2C182%2C91%2C115%2C72%2C104%2C48%2C41%2C102%2C103%2C108%2C52%2C14%2C110%2C101%2C59%2C43%2C97%2C47%2C50%2C46%2C85%2C137%2C0%2C107%2C11%2C105%2C9%2C1%2C51%2C80%2C57%2C60%2C99%2C76%2C75%2C45%2C120%2C74%2C71%2C65%2C98%2C90%2C37%2C121%2C33%2C92%2C10%2C140 HTTP/1.1\r\nHost: connect.facebook.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/x-javascript; charset=utf-8\r\ntiming-allow-origin: *\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", coep_report=\"https://www.facebook.com/browser_reporting/coep/?minimize=0\", permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coep\\/?minimize=0\"}],\"group\":\"coep_report\"}, {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ncontent-security-policy: default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-nloepN3Q' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;require-trusted-types-for 'script';\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: same-origin-allow-popups\r\npragma: public\r\ncache-control: public, max-age=1200\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-fb-debug: LcNwUfM77i3aPbZ/l8PPT9fwOKPXNwlyHqpjbRKtzhzcW3eYh3l4AUNI37IZ7DRdoab6cgDMbs3P47lzGrwOHg==\r\ncontent-length: 29060\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=12, rtx=0, c=24, mss=1232, tbw=5269, tp=11, tpl=0, uplat=1, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126045,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5221)","md5":"704d29738ec8fe748e40db51dc40904b","sha1":"b98380270f1065c637ffc851580a203a56475ead","sha256":"8549b89024a44f135b45dfb717dff37ce8862b426243f9ade4116d7e8750786d","sha512":"6bf03665c589778ce61d19a1211009f88dc6af1804acfaec90050ade2112728eafd59b5cc912e85bc19be0f45023746bfc6759b9ea0b861950a099c799b6e984","ssdeep":"3072:RT4h73Xb51u2K2hv5+JEclRZ9D7MtimuX:Rkh7nb51u2KUv5+JEclRZ9D7w3G","tlshash":"84c3b789b2d1b06382b6b96da67f410775b959a3b0c4c920d58cdcc43fa90f94173fab","first_seen":"2025-10-13T19:31:15.504658Z","last_seen":"2025-10-14T19:28:32.630354Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.helpcrunch.com/9881.js","fqdn":"embed.helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"104.26.1.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:57.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embed.helpcrunch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 23:21:14 GMT","end":"Tue, 25 Nov 2025 00:21:09 GMT"},"fingerprint":{"sha1":"DA:FE:C3:0D:E6:5D:28:73:3E:F7:AE:0D:30:82:A3:CB:D5:14:16:54","sha256":"F3:CD:AB:0E:64:DD:F9:D3:80:F0:4C:F3:0F:1D:DB:8F:E7:97:97:F6:B5:45:82:8A:89:55:4E:D7:F6:A2:89:7A"}}},"request":{"raw":"GET /9881.js HTTP/1.1\r\nHost: embed.helpcrunch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"3695abcd3ff462b2f4f2c651c0a33321\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NGdz%2FoCEvU8%2FkRFTjqD6z5z4wS8Kj%2FCIx%2F%2BcrJ5%2F3ZX5NG6dK5rjJPfZcPYNHk2lFhj55sCH15mMBoPrMl%2Bp8anA3YLHdzpdCQu1UQt%2FMw9cIWn4qSZC73zReMNHltrD6nzpBVS9pA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98e97a211d48120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1003), with no line terminators","md5":"48877c50864293bc2a847a2ffc0636a6","sha1":"6fb8ab223409c4088a5b8d86f8d0dd6ef0338dce","sha256":"d9e08fbae5c199f4e2769c146802c227b1f0de1b427a250e8801a3e9b4f927ec","sha512":"d44426b0c3a7061871db13526065368627caec024de43d781f5f433b82f30e0502aad2a4d26388881f9b9b445f4cede085c11f93397969215a07f862a3d650e8","ssdeep":"","tlshash":"3511218e554ab962ab32039a4c3f2f495c6cba79181da88967e06510763ac6c133577c","first_seen":"2024-10-04T11:01:22.364584Z","last_seen":"2026-06-03T09:01:42.325932Z","times_seen":291,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/css/post-66841.css?ver=1760448895","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-66841.css?ver=1760448895 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Oct 2025 13:34:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDxZPK37Spye30j%2FVbY9BMflaxL0SJspHhUdbLYBqjMJkaqTEFMGWVO22%2BbdHOaLeskPqYH6Af0KSxPHFecLs2TQJHkGlxMCpEk%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68ee517f-2b6a\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a104857dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11114,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11114), with no line terminators","md5":"79a2e3ab6dfc53d728074abafb04236c","sha1":"793c43e85ee3d17509a6de7dbddd31ab4b104e1b","sha256":"fd9a14479d047e0bd455327d20c3cddaace3e3393e7e6d85a656c562d8e480bc","sha512":"d73048889f92e3f027a54724c4ff9671e9a5ead8cfbc2bddc6e701047045da3f416349298c205c9686e3576eb4731081f3a0521fe7120482864d47cd3a596e34","ssdeep":"192:J0rFRd8uNqOOcVOq8aRnJWGqJwQR6Q2qC8+9itE9OE26uPQOUeBgnPhJQ8ue8OFk:mqgZSRGq","tlshash":"e8326a697c23605c702f252f5103a2dc21644cc9e82eb7dae8b96523f5bade633f4e15","first_seen":"2025-10-13T19:31:14.009081Z","last_seen":"2025-12-19T21:29:09.019025Z","times_seen":31,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2023/03/home-img-free-VPN-plan-min-768x460.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/home-img-free-VPN-plan-min-768x460.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 259374\r\nlast-modified: Wed, 29 Mar 2023 11:04:03 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85ULF967wbzXmyPvP5ApGu1g1M1tNj1bwgU3Q9j%2F6AFvI8DEBgRZ0puOBYDXSnStF%2BdSWWgsYePZ45w3%2BUmKEzisqTXkQq7VFxQ%3D\"}]}\r\netag: \"64241b23-3f52e\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a106874dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259374,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 460, 8-bit/color RGBA, non-interlaced","md5":"052b1b051c569406fc577ae85324466f","sha1":"5163cd0e14f8d889c87632ef014a2bb4333a95e6","sha256":"c13ea429cef3746cc68a6e13d80958cf22ee2cdb9e3ccab805de6bb5b59a49fe","sha512":"0abd64526f8d2f52f8a298ea8f29fe3c58511c78a1fdde50da5cac102b53f1023aa860865d3e7e504d52141ee8eb4cc0591b35a2a2218611bc1e3beeb9bb90b8","ssdeep":"6144:hSS4QZet7fN4HUwWZK8/wQuoaW80kDp1IOLM80vXXl:4v8+hnwvhoaFt1IeE","tlshash":"7e44235993df441bc48b0a89ec15fe588940eee1c773ac472abd6a62b333f959184f70","first_seen":"2025-10-13T19:31:15.350527Z","last_seen":"2025-12-19T05:41:03.603269Z","times_seen":30,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Dec 2024 00:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HhzZcMu%2F8a83r9OG3MRZ7Bfnm%2BYc7vbC%2Btkbu1%2BgEOSfDdMH%2FlYteL73Ttym1wfnG0SgQHVKEpOxZVLmpfFTES3ggHGvaCHN0EM%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"674e4c29-12a8\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10d8bddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4776,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-06-03T17:54:22.406877Z","times_seen":224178,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 17:43:42 GMT\r\nexpires: Thu, 08 Oct 2026 17:43:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 524654\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-06-03T18:06:22.702554Z","times_seen":28735,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":281,"dns":6,"connect":29,"send":0,"wait":17,"receive":7,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.amazonaws.com/cdn.aimtell.com/trackpush/trackpush.min.js","fqdn":"s3.amazonaws.com","domain":"s3.amazonaws.com","tld":""},"ip":{"addr":"52.217.114.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:D2:7A:E0:6B:B2:6D:C0:8F:8C:4E:E5:2B:1F:47:F3:EF:60:7F:68","sha256":"EF:42:24:62:84:5D:EF:F9:AE:18:7F:85:D7:C7:56:73:2D:8B:30:D2:CD:83:77:3B:45:EF:24:B2:93:43:99:33"}}},"request":{"raw":"GET /cdn.aimtell.com/trackpush/trackpush.min.js HTTP/1.1\r\nHost: s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: /DZpqRI9++N6Dfrbt124ICmDy197+WgZKskUXhoDJLDfgd00TvpIDpdU9eixeNQJXMyPHBuJOlc=\r\nx-amz-request-id: C59THG3E2TQ24PDT\r\nDate: Tue, 14 Oct 2025 19:27:57 GMT\r\nLast-Modified: Wed, 24 Sep 2025 17:08:21 GMT\r\nETag: \"6362da5ed8c149e76860558c877fcc9b\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\nAccept-Ranges: bytes\r\nContent-Type: text/javascript\r\nContent-Length: 13786\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50144,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (50144), with no line terminators","md5":"6842d72a9e67a1ba77674dc5fcad8aa1","sha1":"3da16a890c492991d2947cd2286eba0405fd2c5c","sha256":"94cfcd90fe7f51681938fa0236a839607e88a50e83dc024ac2d9d2c44be3cb37","sha512":"d76b2ac92172f2fc5089d9605bdb95195ce434d0be7749833517492b02c4ce688c64e41d24c0f8c314f07bb30edd209ecc4cf5a291b133e798b10a5f3b0fddd0","ssdeep":"1536:nU9sUfFyCWoJxWngPXFxZLByTP2RAhjMCg5hP:ysUfA7oGgtAhMX9","tlshash":"2133d76a73442060c2ffc37fd4ef42c1243545497a4f84a8828dee90abe7e9ed167d99","first_seen":"2025-09-26T07:31:54.36845Z","last_seen":"2026-04-29T07:57:35.53798Z","times_seen":421,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":219,"dns":6,"connect":93,"send":0,"wait":117,"receive":2,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 May 2024 11:58:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=862bc9pCd%2F%2F37jT16kH8vqdoGWo0Ptx2w1ehRC1FmaPfR6X1Oe7NjOgRQUSSVzPSGPtY3LEoLzBODrAFlsLfy1V63xUbkVi8i3I%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6645f501-15601\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a10586bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-03T17:54:34.592617Z","times_seen":883758,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/id.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/id.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 209\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkUq14EpJ9bpYPz4TK2pW%2FGytH%2BadU0rw9dS9SS2NV4QqGtMPltll%2FI4y88Cu3nXIsqPwGzykh5hh4jMk5a4vBx7o1cbsLOO2Bk%3D\"}]}\r\netag: \"6645f620-d1\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a109893dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"ba885e9307bb09329efdca99b46cd159","sha1":"f9d4ad41a24287017c5970918dbed0c679af3e16","sha256":"6d6be5e8968870bd645d4eca1d28a7b0eb085c9292822fc5564a45174c6290a0","sha512":"f32112097c73a9eafed32d58a8b114b545ee4a28a7450a1e296ba05b37f4d197463e21464510abc9ffc615b4a19a8458d0303e9a1ef3b337d86519562844e9b6","ssdeep":"","tlshash":"dbd022e7abd8ac3cf1c51f33400f8808a8e2ceba0cd24a1c149aaf2c2022000ccc00a1","first_seen":"2023-07-06T09:52:10Z","last_seen":"2026-05-28T03:55:05.065982Z","times_seen":97,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/css/font-awesome.min.css?ver=4.7","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/css/font-awesome.min.css?ver=4.7 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Sep 2021 13:35:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9SxohMxaMENEu%2BryWmjqbv27bNqPH%2FwE%2B7i59W6BoXxwr5i63FkbPTkzGkf0RZpZba%2F5PuQKWPrdNiPGIK3YKj8kLaSblHaJ9o%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"61531a0d-7918\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a109898dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-03T17:56:27.528329Z","times_seen":281484,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 May 2024 11:58:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hu1IsJd7t8uRD20A2qeQvZjkT%2BSwq3t58ZYICm3FxYwJrRT3DecFENG%2F6nDJ%2FrFEYdU3kH%2Bf8YQoGMeIk1agaBkL9a4ZRXt7fYQ%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6645f501-23b5\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10f8c3dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-06-03T17:54:22.492637Z","times_seen":253870,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100|Montserrat:100","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css?family=Roboto:100|Montserrat:100 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Oct 2025 19:27:55 GMT\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7414,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1e6b942b81a9a8d57147ae60bd808663","sha1":"fdc9448dd1d4e0cbfdc6c8658d68913d68183c07","sha256":"a5fc5fe6cb209ce4b4c38e5a045ba09dc17e3be3258f7aefcdbe7a534e5ed06a","sha512":"7a41828af79676b12963f02f779e8c5d3a74d6e78d5ace07b00ca1a8b3837a14d2efd8de9ca19271962126f5b3acff8b232a0112d0c8138bbbed65e7221c5e8f","ssdeep":"192:N73d7Fo7w7VP7/PN1zPNxPNqPNFpPNFq4PNPbqGIwV4ePNCPNjNPNI:NDdxokNrF1zFxFqFfF44FTqY4eFCFZFI","tlshash":"f6e10c9108175440a7835ce223ce7e35ee4f92117084c0b6bffcaa6bede6d6612b536d","first_seen":"2025-09-25T20:25:50.497762Z","last_seen":"2025-11-11T19:47:11.956728Z","times_seen":60,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2023/04/thevpnexperts.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/thevpnexperts.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 4991\r\nlast-modified: Wed, 05 Apr 2023 08:58:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DgB0OrinpT9vKcySCZQE45h0zLDRG74mPEg63c3o%2FYxl9850iSEf9pBzX7Dym73N6J3ZNiys1G6%2FBppfUBf2OUsDhZabnIe4Ef0%3D\"}]}\r\netag: \"642d382b-137f\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10787bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4991,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 45, 8-bit/color RGBA, non-interlaced","md5":"016243f216114528d32d300873c46495","sha1":"92ae64e055353429c0eca433458d74cfbad26519","sha256":"c6e412c618df066d00fac2cb0835c61450389872b02ad6ddeebcfdeeee8b9a32","sha512":"560b6248804cdd85b5ef84c2be526c1001b509434dcbf63194c910bd486a7c0972fe11aa581624d17ab0a62fc56cdace3a7ab7ebe21708d2b9e23198a722a9c4","ssdeep":"96:4CObI3+B2w7qualPB1MvSYT9EM3GdSIW79SbwcsoEsjET+p0+UWIyg:4RbIO2kiBIfT39jisaATkUKg","tlshash":"eba18fe5ff941653db23ca246a9c3115b07e4a073000cbc2a099e6374b1e751cb2adf7","first_seen":"2025-03-17T07:40:24.653726Z","last_seen":"2026-05-28T03:55:05.119042Z","times_seen":47,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/style.css?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/style.css?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Feb 2022 13:19:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQRvhGzZMaxtHO3dxJpfrjOdJI7MsHDTegwbn14V%2F0WpI0YAkkr%2F1ahSD4XXpV4%2BMP%2FE3ldQGWwRPo2TqsGid8Dl6qcTEpArk%2Bk%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"61fbd676-4e6\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fe83fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c01d66602aa9e1901e8b6edb3a3d581d","sha1":"75850852b96469638688635d90308177924fe613","sha256":"cccd8f144ee0552f36d8ab7026123f475fdd01f1e6da38adb1da3c414766aa2c","sha512":"551a610cc029b7712675a67d670da92a69ac068ab6ef67434af12fd49539821d2981db465380ff8fb73bd3a497104c3993ee34b99cbbafcc3905b38c3b2801f2","ssdeep":"","tlshash":"27210245b567280f3142464fb37b67cdaf9e5740564c059af61f8504c3ec5a01bbf3a9","first_seen":"2023-06-18T19:53:20Z","last_seen":"2026-05-28T03:55:05.213099Z","times_seen":75,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/css/style.css?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/css/style.css?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Dec 2024 21:40:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gyc%2FuBOexQuwHmu%2FyNBW5oGLOEMQQtE9vHCkhQDQyfNA0r%2BT5IhSvZ9M%2F1Eou71fFnDdzcIxL9EtFcpGwuWK5CT7Y2v2cUyf9Ug%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"6758b550-2b990\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fe840dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178576,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"32fcd8a12bc67838ace04a75a45f6266","sha1":"5e4288481426916b95b71fb3a34564782709ed95","sha256":"bf9d5151e043fa376b7f5b54bb53a1fed909645592077690eb06709bc49e48f8","sha512":"3ad6f8d985ee3c19176e7d44cde9574ec672b97ae26a5ea322f37c4de7a38187cf3f26c1c4170f4a87661e430d285a747ca747e0d38f4e2b44a035171b35fe77","ssdeep":"3072:NT5ZkPr0BipFSGzQuRS1wQOtG1zQFGelL7nBb1KJEI9yyC/vYrMsqJz6Q0i1GGdY:NT5ZkPr0gp4GzQuRS1wQOtG1zQFGelLe","tlshash":"a404a66366c01c44521b9959dfe99be41b2d50b3ae0e4debb095781cd3cc2d826a3fce","first_seen":"2025-10-13T19:31:13.935663Z","last_seen":"2026-05-28T03:55:05.039056Z","times_seen":33,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.32.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.32.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68dd5f08-fe\"\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vcIfMXhJThxE9p5m4LrRutSsgLkUoeC00q1EYJr6XvlkeFfiVYz5mRn37uxkWqAova92DxoopUJwYGOr69XChxfvr6xRsPiScYo%3D\"}]}\r\ncf-ray: 98e97a103849dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"de6251fcca2ebd1dcde53765ba330c7c","sha1":"58829e856d37505461185a36ea6634b148f1f071","sha256":"dc4e0e15bebc3bd9d0908c0a4fd0a5010c2342b9a51013b34ce6cd541f3ae7fc","sha512":"69ca3aa3e04c1ec77c956061585f1540245b4d50f309d90c2f26c50d2784e7908e9e6214e7ecd117202fff076fe4b153bd523e1194122cebeaa082184c382cbf","ssdeep":"","tlshash":"e0d05b4074674385301f5959567b265e38c01ddce346cb90dce156125a7acc83372120","first_seen":"2025-09-29T14:16:27.363073Z","last_seen":"2026-06-03T04:27:27.549725Z","times_seen":3950,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/dataforseo-marketing/js/js-cookie.min.js?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/dataforseo-marketing/js/js-cookie.min.js?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 09 Jul 2025 11:17:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=721E0ejbWdBJ0WLOg8FrtrO6X2i43swtMeFTiCWVY%2FvctdDfDd8a56yCreWcz4fSkyDtODW7DPXd7dQEX%2BQPs9gmGWx5CdbbDvs%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"686e4fdf-643\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a105868dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1603,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1572), with CRLF line terminators","md5":"7781def0e9245115e07dbeaa6a19544f","sha1":"892e78730c50cdd1d3181cacdc28e44330c3b58d","sha256":"0b1aa0b9443038da4da13a9cf13dff08098a9c2f6c56d1016b7e23dfaf8707ae","sha512":"a8aa3aaabf4af8e97cd854cb12582a85372dfe655e96b3fb557f530e51039fc765853185f0fe24364874c537b35aab5924e6cddc1dc6575b936ee81f84a5a251","ssdeep":"","tlshash":"6231958930253c9d06ae1229776f27cfb1b84e095c8d698d5b1ca6f136326178057fe5","first_seen":"2025-07-03T16:57:10.780198Z","last_seen":"2026-05-28T03:55:05.123408Z","times_seen":74,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/us.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/us.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 350\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAlz%2BLFv6EQholSNs0jU8PIG7boV4bMIwwGHf9Stc8%2FFDjQVA8nRVbTYXqC5YP%2B7ZkymPEDfYbPNgTHvr7jBLlVsk%2Br%2FYFK92oI%3D\"}]}\r\netag: \"6645f620-15e\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a107880dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"d090a14ba53d52439ad53c855e731246","sha1":"8330526cdcb51bfaf1b5c196c00e4efeb5785eb1","sha256":"7bdc4fd1b52f88617553782da88299fc8551f6921d5a30c5a29b96cb8b4c3eae","sha512":"3fbc2ea1529f4b856213d96e48b4074a98addcb32567b95da13a69c103e5bae220e8f9ef173209dcb0717a34fdf88b7d8fccde6d00aa72032a3b8a9f23ef2a8b","ssdeep":"","tlshash":"69e0c01a29d73d2c95ad83630b1e4974c865c5205b55d53f1547b523135606149b8041","first_seen":"2023-05-14T23:27:01Z","last_seen":"2026-06-01T21:03:07.680696Z","times_seen":668,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/css/dist/block-editor/style.min.css?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-includes/css/dist/block-editor/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Aug 2025 17:01:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6R5SOnWr5KH6uEZvedao5pWmw1rm0MuASjENXgzSOOouLfPKufgATBs%2BS5pIWZ7uXDBlVOB8jcGSYVkW6XNgAVxpi0s9aTgkCA%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"688cf305-1d046\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fb832dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118854,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8cf71cde15009c8cdf8be127c1006463","sha1":"94ef5e5bea34bbc4eab189754e653ac7d103aa56","sha256":"9ee02563ead63d23fd39d8cbeba7af6aae28b6229fdff5d1d674333df7c94adb","sha512":"f4abddf835458e3f10d4a31bfb19561acb2d308f66a0ea1243bc53b77c57b9b48935ff6adc7a56cb320c5d577b817cf94d049362eb351a49e0174e68b6b55617","ssdeep":"768:lvbUDEbwum0K14HL85ZTyN148SM0QaUejuw7u6GopsJqjuomCZGXoZMo27sRBaJh:nKCejD7u/gAkRaZ","tlshash":"35c33d267d3f19ee62b6513fcd61a0c6e2ca8401fa52aec9e895dd54a0cf0870f57237","first_seen":"2025-07-16T13:44:09.781867Z","last_seen":"2026-06-03T11:57:52.623209Z","times_seen":8139,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B90ilFNKjo4GdaJddE3mYHNRtaT6Mm5tnEC4QK2bkNd0degLIH0z7ssVZcjPs6NYUO2MEtM1zDiYMxqncdwAVI3CMEjkBfU8uz8%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68dd5f08-e8bb\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10c8b2dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59579,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59538)","md5":"b4795cffbd1bc48ca0b3ab574d341793","sha1":"e414a0728114ddc381392329930e9cafae3a8795","sha256":"b899d383e6f2393c031827aea899094aad6f28d18c0d1d45563844f4bb72c844","sha512":"236f40aab3e3dafabdad6e5a91bb9d5f295d9933c7248ec55797b4002c024f5d6c55acf2d01c591e74462deed45c08a4efb3f9f482dfdd6487d46d6d2c315ba9","ssdeep":"1536:RGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:O6SOEAu","tlshash":"de43e9863652f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","first_seen":"2025-09-29T14:16:27.455974Z","last_seen":"2026-06-03T10:23:25.969565Z","times_seen":4969,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/proelements-master/assets/js/frontend.min.js?ver=3.31.2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/proelements-master/assets/js/frontend.min.js?ver=3.31.2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Sep 2025 13:17:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2BCa11T%2BKVRWil6ZsG1kjZIAnJBkiqwUArxNJ0byWgJeAuFxvrLOhW%2FrVsORDev6R%2BZEQcQIU4xUnM0qpXpQd5JN5Hm8KKHFst8%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68b6ee59-5e91\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10f8c5dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24209,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24166)","md5":"1e7893c90df878c3494dcb3e158aa517","sha1":"ce8abc4af7d6ce69fad3f193ac37cd8097ba6b20","sha256":"a5de99761e07fe5c535922eec07192917c68cfb8b1d6fcecd48c4d90e14f8d55","sha512":"fda55c91456d7958da78d9d661b8f30bcf77aaef9295d76a01940004726aad1b8721a60ff52185d9690f19be5cda1017594d6370a9dbfed9a6cc2d7c22387203","ssdeep":"384:Cbxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7F:Cbxw+EVxFm6cKikdHd7taQtHuGJswg/i","tlshash":"2bb2d9053163ac7a50cf815be467420e77378894740570ed7abc6cdba5b8e9a33ea339","first_seen":"2025-09-04T01:10:20.608668Z","last_seen":"2026-06-02T18:16:56.08344Z","times_seen":358,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/proelements-master/assets/js/elements-handlers.min.js?ver=3.31.2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/proelements-master/assets/js/elements-handlers.min.js?ver=3.31.2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Sep 2025 13:17:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbJXRu7gzHBjuQYUzZWQER4kgQolNxVs1Z1Mr0r7uVYTYTf5O73ukysXrOPyz0BVE2GSshKqZBSIxhdogCd8GSUzlUuSIRxDAJ8%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68b6ee59-ae7d\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10f8c6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44626)","md5":"5deafb6ffc21bc99329c9c9a2e9b42f7","sha1":"db955c43ee061dd9fdd1917945b683546edea603","sha256":"08236d1783812ec92b4233f8274ddf66150fd420eaca8bc618c26e0de4b4584e","sha512":"9dc18052d9e30f71e44942d8209ffcd4d98cfe57017520ea9cd259949eddadd091b82647fa45954331d39df3c3fb152340f02e5e335deffdd6692a9ce831a1d6","ssdeep":"768:CB/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFgm:C9t5D1+WE9A5yLcWJ9mBtIoERuWfRMBg","tlshash":"4c13a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","first_seen":"2025-09-04T01:10:20.629509Z","last_seen":"2026-06-02T18:16:55.992251Z","times_seen":358,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/wp-content/themes/dvpn/assets/css/font-awesome.min.css?ver=4.7\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 77160\r\nlast-modified: Tue, 28 Sep 2021 13:35:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gxaFQ%2Fi0vIlF%2FC4%2FxcjsJsrI6yX8wlajKoBMOHEulEi696uwPzXaxq8mfX2O1YvajtAGH5GB1U%2BcG4qjAOSpewDFTMqR0FQAYVc%3D\"}]}\r\netag: \"61531a0d-12d68\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a15c9b3dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-03T17:54:37.966152Z","times_seen":488128,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scripts.clarity.ms/0.8.33/clarity.js","fqdn":"scripts.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"13.107.213.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scripts.clarity.ms","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Jul 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9B:A4:5D:E2:38:42:E2:7A:A2:45:6E:08:CB:35:B9:72:C5:BA:A7","sha256":"3F:C2:47:9C:33:FD:21:D4:54:83:9C:4A:B4:22:9F:91:C5:9F:4E:75:5D:67:C2:3F:A1:31:60:2A:90:D9:5A:10"}}},"request":{"raw":"GET /0.8.33/clarity.js HTTP/1.1\r\nHost: scripts.clarity.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/javascript;charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 12 Oct 2025 13:33:12 GMT\r\netag: W/\"0x8DE0993E40508E5\"\r\nx-ms-request-id: b5fe0a7b-501e-0016-2247-3cd80c000000\r\nx-ms-version: 2018-03-28\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20251014T192756Z-r1dfb69df85s65c7hC1SVGngn800000003q0000000002svt\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\ncontent-encoding: br\r\ncache-control: public, max-age=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":78471,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators","md5":"0b08b741220aee01d0d055fe7a6f5b93","sha1":"30389e7d60456ece1bee4ec945a128e827f2a6f3","sha256":"37b07a7c07134b5f2374fd0c6ee86853191a8236585be56c0895dab209ae32cc","sha512":"2636f45f6c28d25c3de172711496804679a3688c643a3b8b19fc73db5af62adb7ee6c1b052d0c1bc293f3d176a85d6dbcf5ec94b9e953f92411cf0eda27fe69d","ssdeep":"1536:GQPzHqofC4+Nvtl8HTHpn1z2sA0T+q+PGySF:PP7qofBSAXz2sA0Tr","tlshash":"8873e7dc7243707e42a760b5807f120bf23a6d4a780b5c50da66d6c43c78e9692bbf6d","first_seen":"2025-10-08T18:48:07.937536Z","last_seen":"2025-12-12T23:07:23.357321Z","times_seen":1567,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":18,"dns":1,"connect":20,"send":0,"wait":38,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq; pll_language=zh-cn; gclid=null; utm_source=adsterra; utm_medium=popunder; utm_campaign=cn_windows_registration_zooog; utm_term=none; utm_content=none; referrer_params_1=?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lrA3LY5JLW1dE87R8Ot2DFWfD5yjHCiU0Ez1Ry0GfOGKPuKykNT1XoQYl%2B24JC7%2B7VukYh76fRF48rF%2FYHpj04%2BlqtpLOZmZzv4%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68dd5f08-2d66\"\r\nexpires: Sun, 11 Jan 2026 19:30:34 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a1779f9dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11622,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11409)","md5":"b7c95a7a15037d6d426efc06ae6e0c81","sha1":"2ea08bc0eee97c4dd4d96fbcae022fd132ee3a11","sha256":"30770e96ca66d9f13e483db507cef243b0602cbd356bc98a0b5aebf89717bcd2","sha512":"50900d7d694920e757a4cd7ebbf0872bbc12c5dbf8ec68e43a9a6c9836fd2c4551f6975ce16ad301b05d4e1ab82c5632dacdce70973bec6fdb32408bf3cddb5c","ssdeep":"192:X4QA3vFKhXb66GBXiWV+tcqqLm1tlY2hI7a2pK1y6VTEZ+K0IGiwZ2uSneq1m+np:KE56BX9+tjqLm1tu2hlbJVT6bXk2u3qV","tlshash":"2b3295c5f185395647ff7034722f220a2337589ce4466d58bc29c4e169f8e8e12b6fba","first_seen":"2025-05-21T22:47:05.823896Z","last_seen":"2026-06-03T18:01:07.795523Z","times_seen":56585,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/css/bootstrap.min.css?ver=3.3.7","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/css/bootstrap.min.css?ver=3.3.7 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Sep 2021 13:35:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVlBgC680sVER7lJM%2Bm6mSkgMuqFmKDSoxaKK%2BZ3P0uSPzOoxjrYtR%2F5v8fyjqdBpO4iBw9ifjEI5mvhjPz3Tvt2C7RW0prHi5k%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"61531a0d-2606e\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fd83bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"a15c2ac3234aa8f6064ef9c1f7383c37","sha1":"6e10354828454898fda80f55f3decb347fd9ed21","sha256":"60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36","sha512":"b435cf71a9ae66c59677a3ac285c87ea702a87f32367fe5893cf13e68f9a31fca0a8d14f6a7d692f23c5027751ce63961ca4fe8d20f35a926ff24ae3eb1d4b30","ssdeep":"1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F","tlshash":"68e386a6f5a0312de4a7c61964d0bafe156f8145d7220bfbf8273b7447892c70a63e4c","first_seen":"2023-04-05T08:00:04Z","last_seen":"2026-06-03T16:38:34.178773Z","times_seen":41085,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/proelements-master/assets/css/conditionals/popup.min.css?ver=3.31.2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/proelements-master/assets/css/conditionals/popup.min.css?ver=3.31.2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 02 Sep 2025 13:17:13 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b6ee59-3e3\"\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qQZQJniTlLTfHOMtCod4T8oPBGhKdjShLLI%2FRvktJDRh9fEMNPPOjUX3J%2FETiqAZDmvmPEIY9v%2F1ObD3RoS4BxmyEbe5oATwQE%3D\"}]}\r\ncf-ray: 98e97a10384cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":995,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (995), with no line terminators","md5":"3034ff16bd46f230e8c546990ff1735a","sha1":"a80e0d3f3dadb578d99869db272f5cecb9a3997d","sha256":"3e86e49c78cd2befb9c7e7b27ee263298290728f7489b17077f00c25e37a5838","sha512":"06d12b5e5d9f6c1b240c03a8e42f8c1cd327a524bfc6b5757ad77311fad793bf20635f4f5910db01d4f9b3ec781f3d3fa0699cc8186c501d32d4ac3766e90a45","ssdeep":"","tlshash":"d6115b913d5bb538901f423bba433ecd691254c5b7022a98ec70e83745e5c84756e5e9","first_seen":"2024-12-11T20:13:02.117127Z","last_seen":"2026-06-03T18:06:16.755619Z","times_seen":38888,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/proelements-master/assets/js/webpack-pro.runtime.min.js?ver=3.31.2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/proelements-master/assets/js/webpack-pro.runtime.min.js?ver=3.31.2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Sep 2025 13:17:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYvSqWijzTqFaSjhA0ANqqhwiSVyDXU9iM11EItE4KDImnRuqRr2eVcqH1oANMNjGqhUbkHtuUymZqHp8AecpvwUvKGTmyGIc3c%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68b6ee59-1867\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10f8c4dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6247,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"059374b2f781287ea57cffedc1a06abd","sha1":"a0ddee35284d6da6ed18baeebd1e8719843f15a8","sha256":"afa81f151dd346474bf8c02760caee53ce1c8a6ed000ead97c7d6bdd43446c42","sha512":"8c02e5bd7ebfd400f35b7d6d73c1b08b7f23f60051571189df4c4bbba2ff5e5ec664d9582bf77e1752f663f76ff24038c6053da3e254389c98c7726e8e8cf5cf","ssdeep":"96:C5dxwrudY4kjboFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:C5TXd4jboFemUN537MPa/pMdOQ8Mk2","tlshash":"43d1659805489d2b26e43ae8b15b6b741b3dc0323c5ada81e611eddc18fcfd183ea532","first_seen":"2025-09-04T01:10:20.626589Z","last_seen":"2026-06-02T18:16:56.03012Z","times_seen":355,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoogvpn.postaffiliatepro.com/scripts/1rg5e25qux8?accountId=default1\u0026url=S_zooog.info%2Fzh-cn%2Fvpn-for-windows-in-china-registration%2F\u0026referrer=\u0026isInIframe=false\u0026getParams=%3Fvoluum_id%3Dwqbqfn8h30p0jbed3in57ubq%26utm_source%3Dadsterra%26utm_medium%3Dpopunder%26utm_campaign%3Dcn_windows_registration_zooog\u0026anchor=","fqdn":"zoogvpn.postaffiliatepro.com","domain":"postaffiliatepro.com","tld":"com"},"ip":{"addr":"172.105.76.105","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.postaffiliatepro.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 12:38:46 GMT","end":"Tue, 02 Dec 2025 12:38:45 GMT"},"fingerprint":{"sha1":"7E:00:24:19:6E:0D:11:71:80:5E:66:2E:AB:BE:16:B8:29:82:E5:32","sha256":"18:35:36:8C:FA:FE:88:D1:09:89:2A:CB:7B:C5:DF:05:04:3D:2E:E3:63:99:7F:F2:BB:73:DA:75:E8:86:B3:4C"}}},"request":{"raw":"GET /scripts/1rg5e25qux8?accountId=default1\u0026url=S_zooog.info%2Fzh-cn%2Fvpn-for-windows-in-china-registration%2F\u0026referrer=\u0026isInIframe=false\u0026getParams=%3Fvoluum_id%3Dwqbqfn8h30p0jbed3in57ubq%26utm_source%3Dadsterra%26utm_medium%3Dpopunder%26utm_campaign%3Dcn_windows_registration_zooog\u0026anchor= HTTP/1.1\r\nHost: zoogvpn.postaffiliatepro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\ncontent-length: 66\r\nset-cookie: PAPVisitorId=i8pXBSMPJaEnzRzMeIjIFDhLy1asVf69; Domain=.postaffiliatepro.com; Max-Age=31556926; Path=/; SameSite=None; Secure\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e43f36e65e3ed441ebcb0442346ebb75","sha1":"534002a66b600e5bded5305abe7760dc384d38c1","sha256":"f378885f4e9fcd5cc853c1afab86016ccfde24f958025192b0a7642526a8e597","sha512":"b3986aa633a574f3f187404d06a5e9a6229e4b4285676ceb2fb34bfb729041c10a0c7aecd304cf725dd0f080773a66be2deb34886c6aebbebd3219ccd263862d","ssdeep":"","tlshash":"7fa00277445d6758960405ec1077c49140a6a8b66494899256338b80b6a7950de533a5","first_seen":"2025-10-14T19:28:32.749525Z","last_seen":"2025-10-14T19:28:32.749525Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/pum/pum-site-styles.css?generated=1756761548\u0026ver=1.21.4","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/pum/pum-site-styles.css?generated=1756761548\u0026ver=1.21.4 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Sep 2025 21:19:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AoCsG3eMp6Huu9U9NeH8jEi%2F9zhOtwTi08KuokUiQBElW%2BRZyBkNghXL8%2FSrHuXKdi9ndkxDjwxLy8nMKmvCXo%2BRkKXeS%2BSS0oQ%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"68b60dcc-4521\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a105862dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17697,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7476), with CRLF, LF line terminators","md5":"a5a1d96288a5b5b2b1c9f0358c12ef52","sha1":"503b852a5fa97cfaf8faebae7ae688c4476cc993","sha256":"6be5277239460b0da5b95182c349fa282f7c45efcdf03b81ad9243bb5bf70fb3","sha512":"57cb4485f0e34bd28dc9c2558561d34706bc29b350b1c3ea0af12309d0766fda325f3ce88118b03e7eb94c1d9c9cc8fb47e0f4f155fcb9f353861a1aef392ab2","ssdeep":"384:BGowDBqnGGt3BMiv/g/zmeZm5MVK2/PLn6+mCwzSnl/qvsf3flbBU+MwJ/tV1h61:TdRsiL4jUk3PROkMEvkZrd","tlshash":"0f8211340a311350b1a7f7387af1af9c2b27b121c642a2ada6965c95c3cf17bd1d275c","first_seen":"2025-10-13T19:31:13.920902Z","last_seen":"2026-05-28T03:55:05.210448Z","times_seen":33,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jun 2023 06:49:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZhoU7T2NqhJjKsnP0sbuJBiPQV9FzUCqZGy0ZKOEcLkEmZfj2ODNVmAYZj5Cnu8tOONawkqNWcz49owE%2BcFGYHhcRVylXcMsXY%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6482cb74-3509\"\r\nexpires: Mon, 12 Jan 2026 19:27:43 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 11\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a10686cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-03T17:54:34.523408Z","times_seen":815093,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2023/04/WizCase.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/WizCase.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 5622\r\nlast-modified: Wed, 05 Apr 2023 08:57:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sa4582WpbnNztPTYvFqViRN2E4uD1IBCtpEDfnIHAMx5zgcusMIfWpDgS%2FHyaR02sljC31nbCCZeR9BKjfPf9cb3eJzbw9NitSI%3D\"}]}\r\netag: \"642d3800-15f6\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a107879dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5622,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 258 x 75, 8-bit/color RGBA, non-interlaced","md5":"814269c2443ad3756ae07b0b9fd0153c","sha1":"af298b3b3c0a35166fb581445afaef092c606b85","sha256":"f833a2f36d190027ec8e200dbda9b9ab62147c5bd5626dde436302bca4df7cf7","sha512":"352336314214e460b7c397fc9e9bd7807d471bda61f6d3d7965018316d313ae71582dbffe61adcbcfa8f9edea2eccd826e22226b09605bcf1b97771527a42921","ssdeep":"96:Nu99D7cP6rk25pAi8kb8jVnZT7OPdT0r7eHJQhClWloJcN49S2KJbckjTZMriORg:Nu99D7gCt5pAi8k4T72F0hSQoJcC9HqL","tlshash":"b1c19eddd53d123f8ad2b6b3a09f5538c0681ebcab803942c839805473f51ff5ac0a95","first_seen":"2025-03-17T07:40:24.748216Z","last_seen":"2026-05-28T03:55:05.155794Z","times_seen":47,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/dvpn-core/assets/js/subscribe.js?ver=1.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/dvpn-core/assets/js/subscribe.js?ver=1.0 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Jul 2025 13:09:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jXUaLAuFWajySoJgo2vmRTTjJDF%2BLkSeDJSPKnmRUzQjhppCEKHnbz58cHVOzwMYbPmXt%2FUx8EkB0XpPNbgef9%2Fp5KGidsbfAag%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"686fbb7e-69b\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10989adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1691,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8f9628208fffb7df9f60990a1b1bad90","sha1":"6b3cb808b563d28efa845ec7e6dd51f5dd2e2d90","sha256":"553243801f0d0699539ce0d9c08879691a3460694f93b4adde7a37918c901a43","sha512":"ea6f8c79b4f415723f7ee3dc8402250085fcb9331a3123d072ff8d82fc3dff33eba419dffe16ec4e6597c90f7f9d806a0dca13a037eaf4ccd01afbf852925d7b","ssdeep":"","tlshash":"9431e188ef7e29914671f03b2caf9ac7c16d192719004c6ebcdc48180fe5b6cac2f855","first_seen":"2023-06-18T19:53:19Z","last_seen":"2026-05-28T03:55:05.045254Z","times_seen":81,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2021/09/favicon.ico","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:57.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2021/09/favicon.ico HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq; pll_language=zh-cn; gclid=null; utm_source=adsterra; utm_medium=popunder; utm_campaign=cn_windows_registration_zooog; utm_term=none; utm_content=none; referrer_params_1=?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog; PAPVisitorId=i8pXBSMPJaEnzRzMeIjIFDhLy1asVf69; _fbp=fb.1.1760470076229.665650788757767916; _clck=1kqlz9p%5E2%5Eg05%5E0%5E2113; AF_SMART_LINK=https://zooog.onelink.me/P6cg?af_js_web=true\u0026af_ss_ver=2_9_3\u0026pid=adsterra\u0026c=cn_windows_registration_zooog\u0026af_channel=popunder\u0026af_ad=none\u0026af_adset=none\u0026af_sub1=none\u0026af_sub2=none\u0026af_sub3=none\u0026af_sub4=none\u0026af_sub5=none\u0026voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026af_ss_ui=true\u0026af_ss_gtm_ui=true; _clsk=tpkw8q%5E1760470077108%5E1%5E1%5Eb.clarity.ms%2Fcollect\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:57 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Tue, 09 Nov 2021 12:14:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gz0eCBFU7ZiSsxF4e1EWvc3PBu6f%2BUXK5EuYs4mKt7V3gwjFXoxtW2XeiS2gBMDEG8Kj%2B6XIP2u%2Fm6OT2WmnCmr2UGlkuYsSB4A%3D\"}]}\r\netag: \"618a6618-1536\"\r\nexpires: Sun, 11 Jan 2026 19:30:34 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a1ecb90dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"9d4db93065de120906166abdac0e0710","sha1":"c22701f1b3ba7db02697b4fee758dc1548cfbdcd","sha256":"141dc69bd4021bbc0eb6bbbd24ae44bc63c5bed715d2b30989f627de8c5ede57","sha512":"1406b8628abf23ea805f20b197db3798959271ae33608dac4bc041534426ea71ca11c3caca4fbeea5eafae19b0250f5266e0e36a5d8cca501ac0a2fc5f564b93","ssdeep":"24:Etieeeeeeeee44fozlJTukvWBg7TM/KESP/rJAgBMyV3666666666666666v/VeV:mk3KZ8A86gBM83Cor8gCatKix","tlshash":"0cb1ae7957a4cd88f01b16bb4562ef50662f3fc3e51a688b53c92df77d61541e2c008b","first_seen":"2023-06-18T19:53:20Z","last_seen":"2026-05-28T16:58:05.652746Z","times_seen":87,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/html5-video-player/build/blocks/view.css?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/html5-video-player/build/blocks/view.css?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Sep 2025 21:18:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nX65mQqVtG5tnbQgN0vrelhZp3Wf9lZcuAAzmkINFJzUYc5HObjyCqAVQEv6H1RKbJbGKS7h3Q2OmFZRwEZPLkIUP8flCOymrUI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68b60db1-a48e\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fa82edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42126,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (32554)","md5":"48f299d3e93b9307dbd0b7208b1b8a4d","sha1":"14084566c7f285348d2b6997bf9d5e4efbe8fd57","sha256":"a0a553d3bba19778bb038f235486b20ac04ab1a62c349d9c35b36e126014434b","sha512":"0444f89e2b0fd726b9ff0e1fb492e096d6c993b302fcf4cd90f3b32ad9e4a3c9b6a4949e19100a63160babb931f574ca6651201b6da5fd9f956808e2694ebee6","ssdeep":"384:N3+ynfW9q2N8LOiBcn6Vq7oq+qIqVqeCGWB21hgQ/rrabP1j6/zaJBS:NPnfW5N8LOi2639bPXJBS","tlshash":"8a13956179682138f87bd16937b1d5cd333ca102fde25aa9b595b720c9ceaf306b3241","first_seen":"2025-08-19T07:51:05.991453Z","last_seen":"2026-05-24T06:30:49.176097Z","times_seen":141,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/css/post-66631.css?ver=1760448895","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-66631.css?ver=1760448895 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Oct 2025 13:34:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EtT7WstRK3nRvh7aEN8F5FXlxI4ldYemrVk%2BcY%2BD7i7DiF9MMufyqzAzLwTJQIPGceP7QMsaqSAWVzLRRq1rmlfUjfd9ES8i%2Blk%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68ee517f-1898\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a104859dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6220), with CRLF line terminators","md5":"16a94aad1693caa889d1325894996da6","sha1":"671cd56875e4276a7b6ccb53a004039068b8278b","sha256":"e7acf5b1d0be2a3945e854a87af1da12a05b4d3b3b03745706031f5f984d26fa","sha512":"4b6a90d4b7bdd33393feed134b99f97f3e0a8269849f08e8f980ce6a11265ac5cf6bfb540369a8ee894dfdcb3b19a2c00be3bd442880b245d3d74c2b1ce53c4e","ssdeep":"192:MVO5DNqC69FZajpWl6It0d1QnJWSa0XCS:3pC","tlshash":"5dd18c443d53e11eb67f302f3107a0ee101c88cea96eabd6f0549103fab6da937e0524","first_seen":"2025-10-13T19:31:15.493684Z","last_seen":"2025-10-30T07:48:34.369374Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/br.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/br.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 353\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MCkg%2BEV8S2VotwD64RrgtfLrcg5u67gC8eN%2FsxfSyhg3w%2F7jQNudF0DhspcSK%2F08RAZV2%2BcdsfPYY1i8wFPfrJ%2FThFPW%2FZTGTQ%3D\"}]}\r\netag: \"6645f620-161\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a109895dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"a0063869f0bdbaff08b81ce996a3555b","sha1":"0b6d48391262a3f1b764b8f764a3225859c49885","sha256":"7dfe84faf51f33af5a66f356a57efcc53951f01c7529deb3e6edab005e72ae0d","sha512":"5e245bbae4367758f39d37e87bc2da21f59c16ba2c7d3274ef0da4fe7d4f8264fbad62aba7bbf3fba829f008f6cee87312c9deb5a47c02414b43106d1eeb21c9","ssdeep":"","tlshash":"99e0c0c6911bee3dcc1562365e50c024f1222c4c995340cb8f4d48086c6408a10fca54","first_seen":"2023-07-06T09:52:10Z","last_seen":"2026-05-30T08:28:07.143573Z","times_seen":99,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IrwrJ5KlrMv%2FACm6SK06a2N1GVppQaVfyHvBcZoDU5B003FMp4giIVzn%2BhExsPvfQ6foH36wuFlNseXzUbGY09HdUcUuTHjmx0Q%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68dd5f08-2315d\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10d8bcdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143709,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-06-03T18:00:47.697519Z","times_seen":90397,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoogvpn.postaffiliatepro.com/scripts/1jg5e25qux8","fqdn":"zoogvpn.postaffiliatepro.com","domain":"postaffiliatepro.com","tld":"com"},"ip":{"addr":"172.105.76.105","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.postaffiliatepro.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 12:38:46 GMT","end":"Tue, 02 Dec 2025 12:38:45 GMT"},"fingerprint":{"sha1":"7E:00:24:19:6E:0D:11:71:80:5E:66:2E:AB:BE:16:B8:29:82:E5:32","sha256":"18:35:36:8C:FA:FE:88:D1:09:89:2A:CB:7B:C5:DF:05:04:3D:2E:E3:63:99:7F:F2:BB:73:DA:75:E8:86:B3:4C"}}},"request":{"raw":"GET /scripts/1jg5e25qux8 HTTP/1.1\r\nHost: zoogvpn.postaffiliatepro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5107\r\netag: \"4ffd-63df9ee27ca00\"\r\nlast-modified: Thu, 04 Sep 2025 13:45:12 GMT\r\nx-srv: 1\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=7200, must-revalidate\r\nexpires: Tue, 14 Oct 2025 20:48:41 GMT\r\nx-varnish: 316347412 306622554\r\nage: 2354\r\nvary: Accept-Encoding\r\nvia: 1.1 varnish (1.lb-app.pap.linode-de)\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20477,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20477), with no line terminators","md5":"52c8dbd6884a5772af76926e0789dab4","sha1":"72f7a5f6d1019b0303f7a1c3b38d4eef99482d85","sha256":"44179693c37b04b60ed1c2febdb821f42c9a01cdf38027ea221a4f50f36412b0","sha512":"7375f335e683767fcbb02b566054b58aa49d0f2156d0b0264df1153987ca16a68eba41c44975f7dc59ecaa36dee846f3334020c4c577a19e2e9b58481c2e0a5e","ssdeep":"384:vje5Jv29nzUjRhvEIKVihMd9i2NAnU69HfiY77LVQY4:vje5JvhDT0","tlshash":"72922e4ab5c5a668868360a1142f415a913f584f7491c1bcbcb3ece16c7fc8f8b1bb79","first_seen":"2025-07-19T08:54:31.790341Z","last_seen":"2026-05-17T09:22:58.149961Z","times_seen":550,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":3,"connect":25,"send":0,"wait":26,"receive":1,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T19:27:53.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlink: \u003chttps://zooog.info/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://zooog.info/wp-json/wp/v2/pages/64251\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://zooog.info/?p=64251\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLrNSrSdzGRU9mciHn3s3p%2FBbb7iBruFejrTxSMZv%2Fm7kFrx70si%2FL1aXhxj5q8dSTHWaMyjJYMDnf4uFTD%2FAph4Hh0vxXI7\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: vl-cid=wqbqfn8h30p0jbed3in57ubq; Path=/; Domain=zooog.info; Max-Age=2592000; Expires=Thu, 13 Nov 2025 19:27:54 GMT\r\ncf-ray: 98e97a082b745684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Elementor:3.32.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":228758,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34425), with CRLF, LF line terminators","md5":"0476879b20fb06499eaf69b6132c0925","sha1":"1a032ad915e083616d0ecefff2f8c3bec6967453","sha256":"f2b7678ba5d1688cb33d385e375917dc400e660b84da0f1805428be3b1e55f49","sha512":"ac309cf00aa395f7b5cff1a79c7a4fb655d522a292ae347ea3ecf10cbe59d955020ba0cf8e8161acc908663ccb4a5fd34f087e9a6729982f27e228ce51a958ff","ssdeep":"3072:Ekni3/so/7jF9yN9EhFUuKqTNoz+Qlx0qTNoz+OlxuME8sHI4/UeLk61KJH4tRz9:D1o/7jPeWFUu5e+0xze+mxuZ","tlshash":"f7244b6279970426215f11df8017230ce0da9ee7e502e6f4f5fe80a46bf8dd436e3a69","first_seen":"2025-10-14T19:28:25.545131Z","last_seen":"2025-10-14T19:28:32.819951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1016,"timings":{"blocked":22,"dns":1,"connect":3,"send":0,"wait":970,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/css/post-55495.css?ver=1760448895","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-55495.css?ver=1760448895 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Oct 2025 13:34:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zB05Iv%2BTCgkIRGEcwwrFS%2FLoYIwl8hvp%2FqroF9CC1zKtrS3vR80BBt23%2F0qftG9bTDdGpG%2B4%2FRgS9q93hJqaGI8926diSaLnIHQ%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68ee517f-2f45\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a105860dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12101,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12101), with no line terminators","md5":"90b3adf5760001fcbc882ce7e5bf4ab4","sha1":"64acf2baf36db080dbe39562cdcb55491f528f43","sha256":"7c6215634aa225ca64e21f426a26f5ff84e41e1201a21df8e5059acf0572d7d2","sha512":"953abc87867c9dbb556bbd5cec9fafcaf4a80709b986959bebee0aa3b9a91f14899dc869880eba65812017936f33a79de95dc75f0859364013c352a6c686bbc7","ssdeep":"192:EOIhuedOhrQOqXAFjTnJW9vwQREDqCKloAbQ9uhrnuDuz0lvwOU+OgTObKEThuMC:IXXgUZqcNI9hnd","tlshash":"b24269697c53d124b16f211fa403a9cc2234a8d9a42a7be7e831a027f4f5df733e5a15","first_seen":"2025-10-13T19:31:14.9458Z","last_seen":"2025-12-19T21:29:08.977674Z","times_seen":31,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/plugins/isotope/isotope.pkgd.min.js?ver=3.0.6","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/plugins/isotope/isotope.pkgd.min.js?ver=3.0.6 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Sep 2021 13:35:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTfNOnYK5kbWOlxh%2BzNlNoKZCC9OUA9Pe0DhWA7lPEKuDd5UuPO8ITIaYE4yhqlI6uqXQiDuf0eVgeyvygrtMmPz9mtAEuOsfzE%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"61531a0d-8a80\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10b8a9dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019), with CRLF line terminators","md5":"5fb7c19c9c51cfb99f5ff942629f0f21","sha1":"14c7f59e73d2a99aa688c2443a9a9b24acbff43c","sha256":"a931e5af561b1f0efaf6cdb96aeac4c035c30756dd6edd1091da1a68747d35bc","sha512":"c634a129ea9a27dd22c8382b46a94f07465001f26a027707849d60b402f21470ee5f329d46902084f317705cda5873eeed22d0624ee21220e88f09d23f317039","ssdeep":"768:PAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz231Fxt:/xVKDSfJP4Nnmc6FuCshD6cD6xS9ODzE","tlshash":"faf2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:18:38Z","last_seen":"2026-06-03T16:58:50.46888Z","times_seen":6014,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2023/12/buildings-2-1024x552.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/buildings-2-1024x552.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/wp-content/uploads/elementor/css/post-64251.css?ver=1760448896\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 152941\r\nlast-modified: Mon, 18 Dec 2023 13:43:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=htMLTyKDBzh%2Bq0axM4Oa%2Fgk0oI0%2BF%2BDyscYF7dhcpyMcYGaTCeCtmrO8kL9Gyac16275vYwwSVQhR1jbNZxxCJDozVSCt45vmdc%3D\"}]}\r\netag: \"65804c8b-2556d\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a14f97edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152941,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 552, 8-bit/color RGBA, non-interlaced","md5":"f3e64db93f8daf7b9e037353fa882c11","sha1":"b63545a36f80a51e67287514089da8cd2f8c0f23","sha256":"1442dc15027146bd7cade1ffc590da95bb0211af1592faa2a663c65d9fe946d8","sha512":"5e8267104de5d21f5ed75c182eda3c53b452c7f1b0ab01593fb44479ff7f9745ca98eb892d30b8cd2db7b35c2dc5c34b304075fe7e93eb02b3dc2632ae7f62cb","ssdeep":"3072:KpgBgAU/oRLjKwKwvnymitrl+nsKjOPvRN1Xq970Hex2CYc:9Be/oNWwBvyvtsn1jEZN1k0Ne","tlshash":"55e312a5ad8c9028d492f34b93124b4817af4d30989087148dd6997f6fad32f4fdb3e6","first_seen":"2025-10-13T19:31:14.049618Z","last_seen":"2025-12-19T05:41:03.593904Z","times_seen":30,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/google-fonts/fonts/rubik-ijwkbxyifdniv7nbrxw.woff2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/rubik-ijwkbxyifdniv7nbrxw.woff2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/wp-content/uploads/elementor/google-fonts/css/rubik.css?ver=1755677027\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35348\r\nlast-modified: Wed, 20 Aug 2025 08:03:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mT8AbKOEeinojq%2BihV9MOJPZXfaveVqnFwUMkXjYsvjhQSZDioOUzWNEEa9Jxd%2FPPtaMnNx7J%2B33D8JyayzSIyLERZU1CX2R5Kc%3D\"}]}\r\netag: \"68a58163-8a14\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a157999dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35348,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"b65daadded7406d746e61b25ebbe0ca9","sha1":"ea3f56e306962481bcb38735c71ea5039b9ce2bd","sha256":"691cd1d9b4c0cdf31a1dcf04259c86f92c85e69f6622abab7964d81e36890691","sha512":"d9e53ee3bcdede0965db0fe62de1b5b78d59bad2bc2fbf1ae3ef9152e5883cffdb694a36fffd00ebcc71aaff2c4b58630c808781e966231ce4fc103b62df002a","ssdeep":"768:ob6sJaIWkw3gUba/bdQl/tVgm+l1OXO+FtG4Vqh6rUPA/X:E6sJ4kuo8tLq1OXXPVqh6rAAf","tlshash":"80f2f19ffa66b986b08385e35f265d537aa30c6a6281f521596f210f34dd34f0e71f04","first_seen":"2025-06-08T13:10:33.776668Z","last_seen":"2026-06-03T17:17:49.882091Z","times_seen":3271,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2025/04/No-pressure-but-you-are-missing-mobil-751x1024.webp","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/No-pressure-but-you-are-missing-mobil-751x1024.webp HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27122\r\nlast-modified: Fri, 04 Apr 2025 07:53:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6g5AQ1dBIKTwHQNfPZKNvguN2EFA7gBevLb7%2BR3Oq2hpmj8sXcv7BJaRwGUeu4NFFUCQlIBUeCbHRU67dZO4lcEGrcG3x46b3F4%3D\"}]}\r\netag: \"67ef9008-69f2\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10787edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27122,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"66cf4edceaaa5884d9b44c51a1a37041","sha1":"4a0e85b17b0a82b6961b8887762836b0917fbbfe","sha256":"a66a76b5b785571aeeeb5b506bb589d00b013567fdf87c10e70e10eda1561d9a","sha512":"3aca958d3bc94dfbee2b822a0780a0060a1c471a59966a23d61c96951fdec005522f46c68945b3c68cdd5557488aedfd291b097d9105dfd55e3612d8b5294efd","ssdeep":"768:pm2fspPj/OKCr8G8r4W9UtxJqYy4E4ayM7OW+C8aJDe:pN0pPj/OKCYG8rUtnZy4E4ayMKIBJDe","tlshash":"5cc2e1c03a4f9039e35d90b586a47c07fe48715914c7eafb5a2d8682d46e2b258bfb1c","first_seen":"2025-10-13T19:31:14.039375Z","last_seen":"2025-10-30T07:48:34.348294Z","times_seen":19,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ru.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ru.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 265\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iv3mSlBvHzLWUd%2FacSyYRHevZewYxS86KEBImcDVj3Lw6kSGIMmJxO4%2FNF0PUV751sHH0Jrkj3%2FCHOmkafq1k4J41KZSVy8mO80%3D\"}]}\r\netag: \"6645f620-109\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a108885dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"8333cff217d9f84df4e251776bd0521b","sha1":"478b32eb299004e26093a98288748bbea24c2e71","sha256":"9bf6bf3dcc07223416fc8bbb8f49bff57d21c1c6dffd76f38f8c11e7d054c340","sha512":"0621e13aa6bbf460a0b4ef38652c7e9f812075c1fadab42858cbfd7d6cb86f0c2dfb696ffa5e65190e55aa0ee656e5bcf4350992a5099cc90abfce5381bc54b0","ssdeep":"","tlshash":"bed02bd15b762c29f99b023f1514c568d4602854cd94c61a54568c257d2593dd8645a3","first_seen":"2023-05-22T13:48:49Z","last_seen":"2026-06-01T10:10:23.632308Z","times_seen":173,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ae.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ae.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 228\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cbdb%2FAzAvQaDR3sAIp%2BFwLRZ4JWykvtUoZGNUjiCN%2FkXWbTSzDO9UhemEuddwQZ%2BZS07qaHSlOt8U3J0MUOCvTbG86tbefLRvHw%3D\"}]}\r\netag: \"6645f620-e4\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a108890dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"42abedbc27f22652e705122d8be028d7","sha1":"d4dad539e3ca5a766c5f833e588e97ebce6da01c","sha256":"d961b612c2fb39ab98bd5fedb40f100c275e5b186d19e92a84b92ab29c39e1f1","sha512":"622b9e17a34df8bcf52bf5f6c8f3dd7f5a4fa1a890277acdf89f905d7c8ee69e1f138dd1fa30fe48d318f1474e1db63f06635e6056279ed8c5fa62258bf47b43","ssdeep":"","tlshash":"58d097c7faa0423cfa0a1132180e0628fc324e22d51512878146872e008418872402d6","first_seen":"2025-03-17T07:40:24.736677Z","last_seen":"2026-05-28T03:55:05.069686Z","times_seen":75,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30992\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 01:05:25 GMT\r\nexpires: Thu, 08 Oct 2026 01:05:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 584550\r\nlast-modified: Tue, 16 Sep 2025 13:31:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30992, version 1.0","md5":"7dc7d01533c963a285fd36c5abbb58a2","sha1":"73ee042eb471294fba713f6ab9f91a93fe464583","sha256":"4608fe39fa0f9651ce629e11e99708914f569823ab37bd9d564fccbec7e1a4a4","sha512":"436bd20867d1a283d586d6911e8c6aa40a1a331ee5a54245c72726497346042843de95ef6d562c755f793e3883aabbb81bc41786a24311015592f1eb0a9be1dd","ssdeep":"768:v0hv0VMEt1jVDpK36ZjTSVKGCz8VfDrJkNuIBvkxyw:v0VEvjnKKZSVY8VfDlafE","tlshash":"04d2f1954aef7208f02917fda3ca015a550610eccbdc5aa5bbe2dca885148614e8f6ed","first_seen":"2025-09-17T00:11:12.784576Z","last_seen":"2026-06-03T17:22:29.995962Z","times_seen":18241,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":204,"dns":20,"connect":17,"send":0,"wait":17,"receive":16,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2021/09/favicon.ico","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:57.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2021/09/favicon.ico HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq; pll_language=zh-cn; gclid=null; utm_source=adsterra; utm_medium=popunder; utm_campaign=cn_windows_registration_zooog; utm_term=none; utm_content=none; referrer_params_1=?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog; PAPVisitorId=i8pXBSMPJaEnzRzMeIjIFDhLy1asVf69; _fbp=fb.1.1760470076229.665650788757767916; _clck=1kqlz9p%5E2%5Eg05%5E0%5E2113; AF_SMART_LINK=https://zooog.onelink.me/P6cg?af_js_web=true\u0026af_ss_ver=2_9_3\u0026pid=adsterra\u0026c=cn_windows_registration_zooog\u0026af_channel=popunder\u0026af_ad=none\u0026af_adset=none\u0026af_sub1=none\u0026af_sub2=none\u0026af_sub3=none\u0026af_sub4=none\u0026af_sub5=none\u0026voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026af_ss_ui=true\u0026af_ss_gtm_ui=true; _clsk=tpkw8q%5E1760470077108%5E1%5E1%5Eb.clarity.ms%2Fcollect\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:57 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Tue, 09 Nov 2021 12:14:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ves8hEfkW%2BM49bjh10kBWysaFHJmgLSbk8pfeOfNQXeeT3msMMmXMxSkyhqClD8EVovvw5mbj0fr7gsy8yP%2FDW3CXDiIDz3Tms4%3D\"}]}\r\netag: \"618a6618-1536\"\r\nexpires: Sun, 11 Jan 2026 19:30:34 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a1ecb91dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"9d4db93065de120906166abdac0e0710","sha1":"c22701f1b3ba7db02697b4fee758dc1548cfbdcd","sha256":"141dc69bd4021bbc0eb6bbbd24ae44bc63c5bed715d2b30989f627de8c5ede57","sha512":"1406b8628abf23ea805f20b197db3798959271ae33608dac4bc041534426ea71ca11c3caca4fbeea5eafae19b0250f5266e0e36a5d8cca501ac0a2fc5f564b93","ssdeep":"24:Etieeeeeeeee44fozlJTukvWBg7TM/KESP/rJAgBMyV3666666666666666v/VeV:mk3KZ8A86gBM83Cor8gCatKix","tlshash":"0cb1ae7957a4cd88f01b16bb4562ef50662f3fc3e51a688b53c92df77d61541e2c008b","first_seen":"2023-06-18T19:53:20Z","last_seen":"2026-05-28T16:58:05.652746Z","times_seen":87,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2021/11/install.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/install.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 38510\r\nlast-modified: Wed, 21 Dec 2022 10:08:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9y%2F7eeNXobdD7YuUQZK86gnUDo2%2FOxSUNRuHGh7hupX0Kc3HiOxcudw62lDoOQtNkDISGbtb1U3vSnY8yUSsL%2FlAu9lOp5O3TGw%3D\"}]}\r\netag: \"63a2db1c-966e\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a106871dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 974, 8-bit colormap, non-interlaced","md5":"2a21838f50f0f914614007c114922142","sha1":"469c62aa05646479e1933ba8b685716b95381f87","sha256":"09e9182864b9ee2ce2b2d9a93c2b98667457976608230183b453afd29e0d09da","sha512":"16808f8add2e0828d8f82ca512417d823263c8564cd17c6465a148728bb2411318f8557d3b2fb1056614646036a0aae643851a47c3e0da36f3bf8f11aeea2164","ssdeep":"768:k5KdzcR3p5X3H4Mvi2kvWPdhuihZmBeULIdkc4JIE85b:UKdzc+Mv7kvWPdhuifWjLakcI8b","tlshash":"9a03f1fdb39b9a8e583370879f14a9c498d505851ec8d417e673898b3aebc007771636","first_seen":"2025-10-13T19:31:13.942108Z","last_seen":"2025-12-19T05:41:03.612118Z","times_seen":30,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1760448894","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1760448894 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Oct 2025 13:34:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pKsG6cUEI0oilRbiyUuwCfNlc9VaEU%2BGyC5C2F7blG%2FB8cXuieBdpO02JhLj50WaH%2Fxuwm53HhPEs06JichpDTlbVOKRc%2FnkzU%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68ee517e-d23f\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a102847dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53823,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53823), with no line terminators","md5":"4cc4b11d587a51dd3f1018db1d104f2b","sha1":"41cd5673a53fde427c39d70ec1edd6e6e9b0a447","sha256":"0d543fd736caad8860dad97c0cae1de4e3cada4628b28df0cb1dab5b9457cada","sha512":"2be5c885386427125ed31a3f2920fe14bdf0641967304b6bb4dd4738412a9d645d220e6b30dee51ebfa12ee9f0db4f06806e539ed43d1b0f6bf3080e5d33abb3","ssdeep":"384:5srJ//vsyuUUEloZ0Ok0e/lmRC5Cz9TfikvmGkvmCFldlRaE2ksYrT:WhB/u2J7lllNX7sy","tlshash":"1f330b623d13b269226f482b82d7354c536495c1ee4376d9fa04c5239afece63b36c1b","first_seen":"2025-09-18T22:19:36.142175Z","last_seen":"2026-05-31T14:35:55.681709Z","times_seen":388,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1760448894","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/custom-widget-icon-list.min.css?ver=1760448894 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Oct 2025 13:34:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mt5TQynfvhqJmE7Jyv92GcseeuFTOoCxLoDcijNME5CnjZyT9RtBkOc8%2FvrO3ueknXJunWmu6KmzgZwlTXoExltH3y1VFOmoiCk%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68ee517e-28e4\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a10384ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10468,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10468), with no line terminators","md5":"bd9ea96663880e57c1f3f268d4dd137a","sha1":"9371e4ec76ac5af174c500399da4f7433074ee2b","sha256":"77048b8435ad61fb7ca934b36f84648cae77c38409a71e13b918eb05f39c3935","sha512":"d473db6adb431f2ab5792741c1aa52e6f6aaf15258742d3459f4ad6232d05e51d1d775bff5f669f65276ecf031698982351d336a9bead76777807a33e0d3ab91","ssdeep":"192:eKTrGZCLG+tl+A0zb+W6obQ6x6AHReKuLj6hXvR0:eyg0","tlshash":"ab22c4817d53814e1aff641b141b254ca1c9d4dee9bbecd5e8a6630386fbdc83b31928","first_seen":"2025-08-11T15:35:00.141564Z","last_seen":"2026-05-31T19:06:29.236335Z","times_seen":646,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/css/color.schemes.css?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/css/color.schemes.css?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 28 Sep 2021 13:35:09 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"61531a0d-0\"\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=er9DgBkUSD1mOMJBIfhLPYdo4lTOuIx40QNnF553DVjuOdi8O0VRbEmWPbwFhtjYsbBxdVlPCqI4C%2BS5Mcm%2BpAOAgxEucbbKBW0%3D\"}]}\r\ncf-ray: 98e97a105863dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1755676896","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1755676896 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Aug 2025 08:03:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pOUZDEm0aL6pQp%2BNmz5L4xiSiedVwuGZfk3rettAu5UZRRC29MtAYxsUCwV7zNjnyiobxHaR4wuFUls%2BIZnA5Pd3%2BSF2sqH6xkI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"68a58148-19fc2\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a105865dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106434,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"182e3169ec9849b42f27fba31d25bac6","sha1":"b13a76e724d4518f4fa255615cccac4bbd7ab2c1","sha256":"9d22f282d0430f7c0ec2ced9291c5a515c7d6c13622b0fba574e556a990f7d6d","sha512":"1a7b607843de2a4d12efb55224a2f4e481f7f910504b67b824e15fb20594c3a3df04b51f9f573aee704043fddef8f02d0966c054d9b9771f07cb5ff613dcc43b","ssdeep":"768:yl1YlIBMKTP7ZY0ArkWUlwgwH0SuRKfvw45LWOBx12Hnd87tlCXDtIu:sRODgFynUj+7wdSHUJJ","tlshash":"c8a331a200170101a39758d223cf7e38fd0e92467544d179abfc4babeedbd6512aa39d","first_seen":"2025-10-13T19:31:14.170115Z","last_seen":"2026-05-28T03:55:05.193289Z","times_seen":32,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/fr.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/fr.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 271\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7gSlksPrronxKBseo3TJ1qmS2n0U76McfO5y77YEyNudBEt0%2BM1dBSEfYpKPaqrSZ%2FCKgI3bH8oDmQpKu8nX53J0U743M2x6ro%3D\"}]}\r\netag: \"6645f620-10f\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a107881dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"a4b69fc581f26f929bd30e23c0b6c5bb","sha1":"753551d08eafcc4f4c6eb05f45320160b4d48197","sha256":"b7d183dce188ef91df5ddcd9ff5378e1b64ce515ccb048ed2a1f32d4fd0a0a3e","sha512":"54f5ffc69268d6d6474b436ae5b272b05833946483cc1d6097ae3ae36d15b263c49a425ee91f2c9b282dc17aafc1e2390ca1346986f7453825c80f484fd3da71","ssdeep":"","tlshash":"c9d02b5102a05d7ea559953760952310b87522581ca8984f30a324089a6ed65d88a783","first_seen":"2023-06-06T05:51:24Z","last_seen":"2026-06-03T03:49:21.661424Z","times_seen":334,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/sa.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/sa.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 233\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PfxMTiEb2a09DNBdYBWPZr3W3MgMhAm1KeKIqr%2B1uIAETl68cMMWYbyNaKfZi%2BOzAKcBND1RKbdhWiynkTRZaioxkS8%2BnhHffJg%3D\"}]}\r\netag: \"6645f620-e9\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10888ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"0781212d395296511e086f5a911376b5","sha1":"38b8e00021c8a6c69e75bc374f96fffb40d3862e","sha256":"a87f510604df39537562844712cd450ca3d7b601b2ab7a63d8ecc1868152cc9f","sha512":"15f2a122afa7de0967c19c0c86f9e16e7ae934da86f1e58f390d82743a5b998988ed2138ddf5a4e26ca97f86b038147d76778c0af4aeed1448d0c08748096742","ssdeep":"","tlshash":"12d0a7c66585ecfcf732d23b4d9581b48f1509604ea1c41a6152cae15166745f1b0dd9","first_seen":"2025-03-17T07:40:24.735469Z","last_seen":"2026-05-28T03:55:05.175006Z","times_seen":79,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/css/dist/preferences/style.min.css?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-includes/css/dist/preferences/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Dec 2024 00:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=APnYIPXi6zvTzBU6I8G4UCgVEkkUbf0plNHRXKP%2FtZCku8QVTv4mWnYCwGvM2iXwokrZrTI0kMV70ZZuh9szRnag8Gk04vXlXPQ%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"674e4c29-5bb\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fb831dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1467,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1467), with no line terminators","md5":"dc0788554cb8343df92df1bb867893ae","sha1":"eb1b88ac97bc84ee1213255125dd8152da3cacba","sha256":"3170050ba182339c71a5efb9c1d7fc59a2f49251f211031bf7a17502bc4a346d","sha512":"417cfe6c591f5e5505b37cef7ae613adf440c6d59f971005f78071e930a2161ef788ae08788f633986dc7c350a46d63c6549983a6810370fb0153c80799525b2","ssdeep":"","tlshash":"14318d31d87662b9536f417a29732b1e25c45b61673e7fc29c216c08fd84ea10c073e3","first_seen":"2024-12-01T11:06:01.146755Z","last_seen":"2026-06-03T16:11:41.039368Z","times_seen":10192,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.32.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.32.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68dd5f08-258\"\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMlB2UNey4aWQ8IPeAyN1ehB1InsWhX4rN5z%2FE7sQOm2GM2MXbvsUJlUhkgTxHouzQcSqnRlEyFhCfjd%2B8tBkNCNN62BT0Tvkbc%3D\"}]}\r\ncf-ray: 98e97a102848dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"a3417b3a52fee05dd3d6dfff3b5907ca","sha1":"f5a45a868472889b99efd2808d6c7897ec9302c8","sha256":"08155f07db5a591fe2bc5588edb0fcd73314df176fab907382eac483a6162111","sha512":"627c6cf3a17f55da87b27ab2fe9481bc5746a7da586248ce71c34b2fd69b48604c4c9292b0c490570a6e5297fc9bf20c6337f2baa15cd31d75a4198d3114ab4a","ssdeep":"","tlshash":"c7f019237d4b9469783f19571143337c74944fc893a0a8d8e8fa91436df4ca67330611","first_seen":"2025-09-29T14:16:27.441434Z","last_seen":"2026-06-03T04:27:27.556116Z","times_seen":4123,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/plugins/owl-carousel/owl.carousel.min.js?ver=2.3.4","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/plugins/owl-carousel/owl.carousel.min.js?ver=2.3.4 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Sep 2021 13:35:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBWJISx14SeQSwC9aaVn72F%2BZqzBQkVwV9l%2BdLxUChLrTZ2RiXwVq5Q0%2FlXvqYBwPhyiF3kPyEF395DNIuYQJDLD87ToOQfH%2B0s%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"61531a0d-ad36\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10b8a7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-06-03T17:51:37.828258Z","times_seen":58883,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2023/04/vpnMentor.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/vpnMentor.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 4152\r\nlast-modified: Wed, 05 Apr 2023 08:56:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDeKB53h%2BzyuIJy2%2Bdoo8dDvSzNEW28pr3IX0lId1n%2F0ulDMzYwWz2dAjaD3PhjuH37kO9LZ2G7zarX3JbsKU0IKEiIvabHPvdM%3D\"}]}\r\netag: \"642d37b7-1038\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a107875dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 45, 8-bit/color RGBA, non-interlaced","md5":"bdc3b44b8179925f7b331b6abd309299","sha1":"549abaa5aeac52ec9e3f9c15a6ff7c2d5ace5beb","sha256":"4a3392c95b0d7d70c7a83ad5243b22d66d30c7b301138159cc722764b389aa22","sha512":"21108b7a9ae84baf73de44e330249f11e0331932300fb6c54a763cff76d3b5381ab4fd9acc065a7684e925f497fb4eb0b2b8d16e87bd9ed8069e60214ccfd369","ssdeep":"96:fo0+lVkLdZCYkRYF/fYUWK3HUTnBBqjXMNW820udgfR:Q0+bMY+hfYdKXUTnMN0Agp","tlshash":"1e818c85823e64edd76ec8443f80010fee0d67284297c802db75f91f5a8927dc603b5c","first_seen":"2025-03-17T07:40:24.770602Z","last_seen":"2026-05-28T03:55:05.117966Z","times_seen":59,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/fbevents.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Tue, 21 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"9E:7D:DD:5A:93:A5:78:83:2A:C1:D4:6B:F8:84:FD:91:5B:D7:32:1E","sha256":"71:9E:8E:93:C5:EC:CA:F8:74:ED:3D:67:76:58:35:01:3D:C9:A7:9F:4A:95:58:10:36:06:6E:7A:83:21:17:98"}}},"request":{"raw":"GET /en_US/fbevents.js HTTP/1.1\r\nHost: connect.facebook.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/x-javascript; charset=utf-8\r\ntiming-allow-origin: *\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", coep_report=\"https://www.facebook.com/browser_reporting/coep/?minimize=0\", permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coep\\/?minimize=0\"}],\"group\":\"coep_report\"}, {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ncontent-security-policy: default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-Fnto9M4y' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;require-trusted-types-for 'script';\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: same-origin-allow-popups\r\npragma: public\r\ncache-control: public, max-age=1200\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-fb-debug: Cl91H8AxwXUWPwXYiPAE4A5MBT6atLV5Fevw61FRscauWn6XSi+IC/uigChAlrWRmSAfITrpldWndhvsfenNwg==\r\ncontent-length: 85076\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=13, mss=1380, tbw=4141, tp=-1, tpl=-1, uplat=0, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":329460,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10296)","md5":"0ac58ebfed5ec22986ad71ea6e0578f8","sha1":"59e782696ca21fc17822e5b8f924047936c98f27","sha256":"27da9cf46700841a6def729f7474a08b0bb40d58a4abd9f04a0b845fa38b11f7","sha512":"00263dc471be050ff2e01a5ce536de783a1d3f514ffe4611dd94e98b721132580a2bcfcdee2be2198473891a6adc234e47a669c90f6f4a7a71d3561d60cc344a","ssdeep":"6144:RZLeu8xwDkLBTrbEJixLNaZgVOvw6Kia3ZY/ncQfNvQ:NgLUVNvQ","tlshash":"0e64b98975d1b09247b678ac926f4007b1bb99e6b0c8c930d59dedc43e784ed5033faa","first_seen":"2025-10-10T22:03:20.956818Z","last_seen":"2026-04-20T09:02:43.946936Z","times_seen":2737,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":178,"dns":0,"connect":46,"send":0,"wait":23,"receive":54,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.facebook.com/tr/?id=2004248823089234\u0026ev=PageView\u0026dl=https%3A%2F%2Fzooog.info%2Fzh-cn%2Fvpn-for-windows-in-china-registration%2F%3Fvoluum_id%3Dwqbqfn8h30p0jbed3in57ubq%26utm_source%3Dadsterra%26utm_medium%3Dpopunder%26utm_campaign%3Dcn_windows_registration_zooog\u0026rl=\u0026if=false\u0026ts=1760470076242\u0026sw=1280\u0026sh=1024\u0026v=2.9.235\u0026r=stable\u0026ec=0\u0026o=4126\u0026fbp=fb.1.1760470076229.665650788757767916\u0026cs_est=true\u0026ler=empty\u0026pmd[title]=%E9%80%82%E7%94%A8%E4%BA%8E%20Windows%20%E7%9A%84%20VPN%20%E2%80%93%20ZoogVPN\u0026pmd[contents]=%5B%5D\u0026plt=2361\u0026it=1760470075957\u0026coo=false\u0026expv2[0]=pl0\u0026expv2[1]=el2\u0026expv2[2]=bc1\u0026rqm=GET","fqdn":"www.facebook.com","domain":"facebook.com","tld":"com"},"ip":{"addr":"31.13.72.36","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Tue, 21 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"9E:7D:DD:5A:93:A5:78:83:2A:C1:D4:6B:F8:84:FD:91:5B:D7:32:1E","sha256":"71:9E:8E:93:C5:EC:CA:F8:74:ED:3D:67:76:58:35:01:3D:C9:A7:9F:4A:95:58:10:36:06:6E:7A:83:21:17:98"}}},"request":{"raw":"GET /tr/?id=2004248823089234\u0026ev=PageView\u0026dl=https%3A%2F%2Fzooog.info%2Fzh-cn%2Fvpn-for-windows-in-china-registration%2F%3Fvoluum_id%3Dwqbqfn8h30p0jbed3in57ubq%26utm_source%3Dadsterra%26utm_medium%3Dpopunder%26utm_campaign%3Dcn_windows_registration_zooog\u0026rl=\u0026if=false\u0026ts=1760470076242\u0026sw=1280\u0026sh=1024\u0026v=2.9.235\u0026r=stable\u0026ec=0\u0026o=4126\u0026fbp=fb.1.1760470076229.665650788757767916\u0026cs_est=true\u0026ler=empty\u0026pmd[title]=%E9%80%82%E7%94%A8%E4%BA%8E%20Windows%20%E7%9A%84%20VPN%20%E2%80%93%20ZoogVPN\u0026pmd[contents]=%5B%5D\u0026plt=2361\u0026it=1760470075957\u0026coo=false\u0026expv2[0]=pl0\u0026expv2[1]=el2\u0026expv2[2]=bc1\u0026rqm=GET HTTP/1.1\r\nHost: www.facebook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\naccess-control-allow-origin: \r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-length: 0\r\nserver: proxygen-bolt\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=10, mss=1380, tbw=4141, tp=-1, tpl=-1, uplat=0, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":26,"dns":1,"connect":8,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helpcrunch.com/fonts/widget-v3/Inter-Medium.woff","fqdn":"helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"172.67.72.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helpcrunch.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 01:48:20 GMT","end":"Wed, 17 Dec 2025 01:48:19 GMT"},"fingerprint":{"sha1":"ED:07:CC:80:9E:5C:DD:D1:C8:0F:E9:48:4C:01:60:3B:CD:FB:4B:00","sha256":"5D:4B:24:C9:50:3D:E3:8A:0B:93:B4:76:FB:7B:E3:55:E9:20:A1:E5:FE:E3:D4:E9:8D:D6:0B:6E:0F:E0:D2:21"}}},"request":{"raw":"GET /fonts/widget-v3/Inter-Medium.woff HTTP/1.1\r\nHost: helpcrunch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/font-woff\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 20:59:01 GMT\r\nvary: accept-encoding\r\nexpires: Sun, 04 Oct 2026 19:30:34 GMT\r\ncache-control: max-age=30758400\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2csCjTwxbFpCl860HK1liDltRQow%2FU%2FzxIkEK2as34XEcFuhSlx8RNb3Rju9rwk4Rt0qFJI6xAq4LJjJ8E%2FDNQkdB93fRd3MWmcEJJY%3D\"}]}\r\nage: 86241\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68e42d95-11d80\"\r\ncontent-encoding: br\r\ncf-ray: 98e97a1ca94fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73088,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 73088, version 1.0","md5":"e90a4b5803e7dad44ecc1cd62e8ff8fd","sha1":"c2dbd05f40df87fdf39d6a48ded8597bf25b7d36","sha256":"bb69e0f3ab5a802c43bfac1203237f079fdced4ac1a073ce3a8d173d17ecfc93","sha512":"2173b1570d947284a8765040c66ec5c7549e36d975517c23dde0135361a2799cc3a6a2a263ad52b8b3e2ab828cb6e6da1da60ba816d8c61a5429987f0e9f5aec","ssdeep":"1536:cQhWxXWaBpRalAMPiLDYvvu6P+mCCyqVSLHpf8W6o8YMsk1:cQ0ckJ4Xuh3qoN8WeR1","tlshash":"4063028bbad5d085cb6da873491346bb49d743459de78f09bc88bf30cd885a3c8b9e44","first_seen":"2023-04-17T08:44:08Z","last_seen":"2026-06-03T09:01:42.306594Z","times_seen":541,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"ws.helpcrunch.com/service-socket.io/?EIO=3\u0026transport=websocket","fqdn":"ws.helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"65.21.140.182","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:57.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.helpcrunch.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 23:15:58 GMT","end":"Mon, 29 Dec 2025 23:15:57 GMT"},"fingerprint":{"sha1":"90:2B:4D:25:69:15:0D:99:A5:55:AC:1D:C3:3F:63:2C:0E:2F:9F:2C","sha256":"60:53:A0:51:32:53:CF:99:F4:53:52:A7:F7:FD:3B:38:D7:99:3A:CC:AC:EF:BC:FC:42:EC:CE:E9:1D:74:ED:4D"}}},"request":{"raw":"GET /service-socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: ws.helpcrunch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zooog.info\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: rrmEeKijLKJLtMMwUDrbLg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 14 Oct 2025 19:27:57 GMT\r\nConnection: upgrade\r\nServer: nginx\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: CSOGBphM4Z/jDeVCX4ZbdYYx2ts=\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":92,"connect":106,"send":0,"wait":15,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clarity.ms/tag/m5agyg39eq","fqdn":"www.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"20.250.198.32","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.tag.clarity.ms","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 27 Aug 2025 11:45:54 GMT","end":"Mon, 23 Feb 2026 11:45:54 GMT"},"fingerprint":{"sha1":"F7:B3:5C:2B:F3:6E:1F:75:5E:04:45:D3:F8:73:AF:90:B4:D8:5E:63","sha256":"61:B7:13:1C:78:E6:D7:9E:AB:19:5B:23:A2:84:B6:A2:80:04:7B:31:EF:71:43:66:B5:3D:F9:DB:E9:BE:1F:D8"}}},"request":{"raw":"GET /tag/m5agyg39eq HTTP/1.1\r\nHost: www.clarity.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 14 Oct 2025 19:27:55 GMT\r\nContent-Type: application/x-javascript\r\nContent-Length: 699\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store\r\nExpires: -1\r\nSet-Cookie: CLID=0137d4de97bf4d8dba723d551f81b1f7.20251014.20261014; expires=Wed, 14 Oct 2026 19:27:55 GMT; path=/; secure; samesite=none; httponly\r\nRequest-Context: appId=cid-v1:24dd0b7c-7995-45d6-b3b6-925639dc2d30\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":699,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (699), with no line terminators","md5":"d23da032d1233f9afcdd43a2f6433a12","sha1":"347af9248bf93c6d9d7655c2544655252d102ed4","sha256":"1a9e7efcc6e3a6d47fa230af986f22f6fac0a756a2d4d6a9280dd51d81d7ae20","sha512":"75f446feef00e68b0e7248d0c7e2a4c2dbb646b0852749d863e3ebde121490fd6436972dcf52f716152dd11f800c09f7284c5d31f3f2e0fbeffa2b37e5ec329d","ssdeep":"","tlshash":"5701f436540ea07463b5755533fbea147577120e15181102d19f8a76b818fcb119359e","first_seen":"2025-10-14T19:28:24.785911Z","last_seen":"2025-10-14T19:28:32.90912Z","times_seen":2,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":207,"dns":43,"connect":37,"send":0,"wait":39,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helpcrunch.com/fonts/widget-v3/Inter-Bold.woff","fqdn":"helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"172.67.72.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helpcrunch.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 01:48:20 GMT","end":"Wed, 17 Dec 2025 01:48:19 GMT"},"fingerprint":{"sha1":"ED:07:CC:80:9E:5C:DD:D1:C8:0F:E9:48:4C:01:60:3B:CD:FB:4B:00","sha256":"5D:4B:24:C9:50:3D:E3:8A:0B:93:B4:76:FB:7B:E3:55:E9:20:A1:E5:FE:E3:D4:E9:8D:D6:0B:6E:0F:E0:D2:21"}}},"request":{"raw":"GET /fonts/widget-v3/Inter-Bold.woff HTTP/1.1\r\nHost: helpcrunch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/font-woff\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 20:59:01 GMT\r\nvary: accept-encoding\r\nexpires: Sun, 04 Oct 2026 19:30:34 GMT\r\ncache-control: max-age=30758400\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3yAUJofC1g8UblCj101xU5LBZPxj5x00GUZWtCKvyrMurdeiE2NDNnR74P57nQYq%2Bs%2BnNDyGdKHuF9OTaBWkZ751yz%2Ffn19tBCiafmw%3D\"}]}\r\nage: 86241\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68e42d95-11d9c\"\r\ncontent-encoding: br\r\ncf-ray: 98e97a1ca963a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73116,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 73116, version 1.0","md5":"7493cc0b031ce990cdaa4f42000905c4","sha1":"f16d62412e1b9eaa8e4180dfa614134e05382f46","sha256":"c1c23e749153a1832a113ba39b2e38a7043950e229bb635a2508cc59518ea50f","sha512":"f930cabc6df9de470bde91289e4b1d539431107d91f1a34ac7dd3d64a938b49a834d0682a5fa977b6018eaa9fd3474d1fefd333d7a18655207a3c2ec43111dde","ssdeep":"1536:ch8opZ/5QralxeNVQ2nphMaL4JRfAwTiWXxZhZxZl7DdB2/6WrWDFiq:cmoPZEVdnFiNAwjxxTl77SqFiq","tlshash":"23630144f7f4adedcaf7603d93ab4737929b9244220adf48710682598e8db81bd81d7c","first_seen":"2023-04-17T08:44:08Z","last_seen":"2026-06-03T09:01:42.325302Z","times_seen":540,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":13,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoogvpn.helpcrunch.com/api/v2/applications/2fc9ac2f-d0c6-4ee4-9da0-7cdcbb84ae7a","fqdn":"zoogvpn.helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"172.67.72.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:57.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helpcrunch.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 01:48:20 GMT","end":"Wed, 17 Dec 2025 01:48:19 GMT"},"fingerprint":{"sha1":"ED:07:CC:80:9E:5C:DD:D1:C8:0F:E9:48:4C:01:60:3B:CD:FB:4B:00","sha256":"5D:4B:24:C9:50:3D:E3:8A:0B:93:B4:76:FB:7B:E3:55:E9:20:A1:E5:FE:E3:D4:E9:8D:D6:0B:6E:0F:E0:D2:21"}}},"request":{"raw":"GET /api/v2/applications/2fc9ac2f-d0c6-4ee4-9da0-7cdcbb84ae7a HTTP/1.1\r\nHost: zoogvpn.helpcrunch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zooog.info/\r\nContent-Type: application/json\r\nAuthorization: Bearer product=\"55\" secret=\"ced1252c3c6f52c53ac0d5506039eee591f01f32c7d41123ccf6c55a0597e337\"\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:57 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Encoding, Origin\r\nserver: cloudflare\r\nx-powered-by: PHP/7.3.33\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-request-id: 68eea43d80842\r\ncontent-security-policy: frame-ancestors 'none';\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AE3TFrh%2FKH6mld9Pi0RgysNnZ%2F1gAwiFzkYOOoqKIss2uYq1ha6hfUhB0dpL2L%2FUbMfi2IXGtV7d7oAkA%2F8DxvlrLMYTH19ARmkQEJ38zox%2Bp8LSDw%3D%3D\"}]}\r\ncf-ray: 98e97a1f6989a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":250025,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"aec86dacc50c7dc575f903542737e8d3","sha1":"d6376ecae3a2f874d8b6a6be2438c880953a0fe0","sha256":"0730292afae0e9ce90f6f12683e0ff867fe2d26fd1cf0f479f3acb33514b727e","sha512":"cc674a4badc75fc29b1cc50f36cf2c371cd7d313edf7bd0c7903a990b32111de3631096b268af3d29a6900980da410555bf68b653822d661c046f9ac0c905d8f","ssdeep":"1536:/gy2xv8K3e/44e/44A8aozA8ao9Oe0VIl0VIN+W+WbGPTwAEAdPTwAEAFHvSBQMq:Gv8KKokoB+W+WbGPTfECPTfEXBQEBQR","tlshash":"34342eee80fa16ee659af0c6ee766e6d34f30441c144e77bdc6e175bc504270a2b1b0a","first_seen":"2025-10-14T19:28:32.917748Z","last_seen":"2025-10-14T19:28:32.917748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/css/font-awesome.all.min.css?ver=5.9.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/css/font-awesome.all.min.css?ver=5.9.0 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Sep 2021 13:35:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1MZMXllXkFsg5alrGN5e%2BRIN0QUNHHI4z%2FT7A8NbY2%2BwJpt6A6P63ivmamMb20jgueuMawOjQP4JrWifJdq%2Frue81R25e4vinIM%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"61531a0d-da9f\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fe83cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55967,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55782)","md5":"dbf9d822cefe851ba6f66e1ad57e8987","sha1":"2c43148f7df780e8b40a3ab09c770f03adbf11af","sha256":"533143d96607d94d5d4292838e364aef656d3de58fe74368263776eab9c07542","sha512":"ab779669bc993dcd574c2985fbcfcbb84d68ce9839c719fb88ef3dc9f48e779fe82afcaa2e7828346b31f23abdd98f1e5c9fc847141b102f85192631b64da88b","ssdeep":"768:suC31sPizPq4/vnUAUHJvkQCg/xMQyjJrX759sGZQz5:suTPUC4/vMHBBC8gd7nsDF","tlshash":"85430bb8e54c41c9a731c44fbf82b2bc61baf73ce5910d95f00e691c2ad26a811c5fb9","first_seen":"2023-04-05T23:27:49Z","last_seen":"2026-06-03T17:54:37.807381Z","times_seen":19919,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/eg.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/eg.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 266\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o581UBFZOJLfZrDo55o4M8HPFlOHWTj9DhZNom%2BEKVVWA9rU3sAeulNYf3FVWX7fm71hyqOjdeltYVDiMIRYJeBRSTGNSzob8C8%3D\"}]}\r\netag: \"6645f620-10a\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10888fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"f81e9a53cee08c6f1e88b813f3b6e9da","sha1":"baf82bc9b87a1527fcbab140c0a480931522feef","sha256":"483d00baed198f04a74b324eb15de1d469277c959e42fbbb88f91a5b4cbf3a9b","sha512":"7aaf58a4f329c5dbd6a6c716c25c1792a3c0d615d88c0c8df6f0f8092aeb35d294da54db79140ef79c6c4533d20d1b0304b09cd191fcf65e8e6a2f11aae01e16","ssdeep":"","tlshash":"7bd075ef9104f324e10c0e13a01c4b21cdbe546b02204f0093028fbd277400a0f703f6","first_seen":"2025-03-17T07:40:24.721453Z","last_seen":"2026-05-28T03:55:05.029456Z","times_seen":77,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rubik%3A400%2C500%2C600%2C700%2C800%2C900%7CNunito+Sans%3A400%2C500%2C600%2C700%2C800%2C900\u0026subset=latin%2Clatin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css?family=Rubik%3A400%2C500%2C600%2C700%2C800%2C900%7CNunito+Sans%3A400%2C500%2C600%2C700%2C800%2C900\u0026subset=latin%2Clatin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Oct 2025 19:27:55 GMT\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28170,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"dc03005b7be2cfca9a02084a3528d059","sha1":"ad8337ed50eebd5d7cb2e2ffbec14ee56fbb2715","sha256":"4932d21d432991381ad2be476eb213d5f2125219f74b261f23d198f128dd06b1","sha512":"cb2182c9ecd0825fc847462e252a4b9ed3bfc2c5d63c690aab6bd4a4a4e6e8b3f4962e497c7703fe6b1713c34b0a5ac585cf11cec1b197ac711f0356cc8e6a70","ssdeep":"768:CiQjWvbt7Yxva46NsvlDFCnv8ecPKv3ZXUVvyrlbxLM:CiQjWvbt7Yxva46NsvlDFCnv8ecPKv3s","tlshash":"58c2ffe0082e9494bb432cc233ce7d36de0fa1513055d429aafd199aeca7c76636578e","first_seen":"2025-09-25T20:25:50.396439Z","last_seen":"2026-05-28T03:55:05.032714Z","times_seen":70,"resource_available":false,"data":null}},"time_used":1020,"timings":{"blocked":433,"dns":1,"connect":14,"send":0,"wait":35,"receive":0,"ssl":533},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/css/post-56266.css?ver=1760448895","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-56266.css?ver=1760448895 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Oct 2025 13:34:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TUTvJ%2FF%2BJBrcCPHtoGRsS4jezDR60333lUuzA2Qb%2FdKaWtCFPaOapml5yvx57zjPOc1%2BOAZcEzc3eZZDc85deFqulT6UhTxE%2Fn0%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68ee517f-9e9\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a10585fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2537,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2537), with no line terminators","md5":"a4aedb6eda501b6da1f3765ce78fa1d6","sha1":"2af066eb2740d63a961c6103ef36b95be711ecf4","sha256":"cd7dca08ff3051b83a8c0d20c47062efe70c823acdd9692262b29d539cb1ed77","sha512":"ff1dd66e6bc700543f3a97e5e643eb360df314f9708047dc87131d5a2ad91b9b294b14b41ccff384f694a8437f5d0e1c2f60c3753cac68ae6fd64a7cf4f1d1fb","ssdeep":"","tlshash":"1e51ac997c139524b06f712f6617e08c041488cce59abaeaf554a01fb0ffd8137f1b26","first_seen":"2025-06-21T07:32:10.583135Z","last_seen":"2026-05-28T03:55:05.091196Z","times_seen":61,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2023/04/TechRadar.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/TechRadar.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2443\r\nlast-modified: Wed, 05 Apr 2023 08:57:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2Z8vGqhsu2Rz1F91bAY%2BXZykRD0O6LAk6u75nDoKIdepHfDUNbulxEk2nnIRhmgT8hGP1bWlmPf8BBqk57g6aoQCWafhSuUxCA%3D\"}]}\r\netag: \"642d37ec-98b\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a107877dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2443,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 45, 8-bit/color RGBA, non-interlaced","md5":"af129b3277e61ed62399e220c016103d","sha1":"57cc3eab4ed81de6a0761ad428e15e2441a1f20f","sha256":"f80d482f532d4f3ed9b4e34292e3b12bc303c0280007832e98eeb8a1af89507c","sha512":"81170ec41d6f8992ccff010922fcc161c042d301a76afea5ebbe833bb02b510092314d04e56d6f8e5a012ee921de9f1ec9fabb81b97b03de51a179a3b3f98286","ssdeep":"","tlshash":"16512ccdf492d1247ab356ad436d18a3aa6bf54fa91144ceac883c2d079b84503b8dcb","first_seen":"2025-03-17T07:40:24.664284Z","last_seen":"2026-05-28T03:55:05.12076Z","times_seen":59,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/zoog-core/assets/js/core.js?ver=1.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/zoog-core/assets/js/core.js?ver=1.0 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 15:23:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FVKc7Cf8JgVASwiYK3rlyK8vnQSIbSFeMgSH2se4LsVjAF5H1vWFRPHlWrqLmZLPaNyye3hP6n%2FBWYxe1pa6ElSpM8Ei2MckCWw%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"642aef67-44d\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10989bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1101,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4a51829e7efc41b0d4ebf1e6381e2bf4","sha1":"3cdb3578a50f3e5072db1f413d836e4c94a6e2db","sha256":"5cba6f93a38078e88c7d2bd870cfafabaec9504c093351fd431155679cd52192","sha512":"b8a12b8cf6150f725014a223de96a016c7bb789d7d63614a8d3534e0a4fccd539ea638572e050b2a6404708389cb223065cc1abd40991faba7e1b638a3ed7294","ssdeep":"","tlshash":"a211ed056126809a4db223ffc99303bceb662173f4d9814939cc912c0f7157404eaefc","first_seen":"2023-06-18T19:53:19Z","last_seen":"2026-05-28T03:55:05.222351Z","times_seen":80,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/lib/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 77160\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HoSJDWfrIWpQxdIQdlVqxgGxhb1BLX2fxs2QaRHZy4OA9Q%2FwP4CQgRYV4ihAJcB4kSSbYVhCXTEI6hq4pGonR8pzlHzWJhV1K8M%3D\"}]}\r\netag: \"68dd5f08-12d68\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a14f983dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-03T17:54:37.966152Z","times_seen":488128,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/google-fonts/fonts/rubik-ijwebxyifdniv7nenx661a.woff2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/rubik-ijwebxyifdniv7nenx661a.woff2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/wp-content/uploads/elementor/google-fonts/css/rubik.css?ver=1755677027\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 36616\r\nlast-modified: Wed, 20 Aug 2025 08:03:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Szm6wHfO4HkxJL%2Fdm767mz5%2BMoSigZc428I%2FGMgPiKoSTBk50xD9yOoLFAIeZ8fzmMdF3fQwZEs8GUytLRBIZAaU16HpIwDAS4%3D\"}]}\r\netag: \"68a5815e-8f08\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a150984dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36616,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 36616, version 1.0","md5":"7abeb01acf52023b55c5b622067c9936","sha1":"0f2553fa1f6a9f34e9527d9be288ab5dd3c28704","sha256":"4d9f552c4b0a7f02f231e56198d80aed8550bdfb7e7541260b2b20455b14fb88","sha512":"7b59b52831ca73697ba0040af9192d5262610d968fe0e5a3cab8866cce09f33f7719f3f2eda63c74463f56189c39948fc5351c89247a80debcf9b43bbe2997ea","ssdeep":"768:msMeiG+OlQ90qWJXnhSkIFFuE0vEgsR2dkcMLa8NbpGtv0:msMahJSkiuE7RYkCGbss","tlshash":"a7f2f11a501a305ac5f16ef89b05cbc7757d8fc15c9eaeab6c4c3a23324c073a1a5f62","first_seen":"2025-06-16T14:50:35.826025Z","last_seen":"2026-06-03T12:53:03.006852Z","times_seen":360,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1755676896\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40128\r\nlast-modified: Wed, 20 Aug 2025 08:03:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6mfqM03AcscSj9QH2Kuzv4oi3tqS4Zut8Yyt2fnOfxGIc84JTkxkLYKo3UlIfZGnGllZOmuTOep3P5OUXEwjqJYG7wVn5ZbL6Y%3D\"}]}\r\netag: \"68a58148-9cc0\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a15398fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-03T17:54:42.556019Z","times_seen":865501,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/popup-maker/dist/packages/block-library-style.css?ver=dbea705cfafe089d65f1","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/popup-maker/dist/packages/block-library-style.css?ver=dbea705cfafe089d65f1 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Oct 2025 17:04:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3tIF4VZYul3hWrcThgT7pt62x7JhUZO3D3JkwK59ViuZS3NuT7%2BqbG29mCuLhH%2FRtR%2BnanaZI6HzRpkrzY1QUC8ISJa9NVfFEU8%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"68dd5f0e-1ada\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fb833dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6874,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5035)","md5":"9963176ef6137ecf4405a5ccd36aa797","sha1":"0138ff5476e23d1aa559d37fe0671adadf551d79","sha256":"689988a155295dd0a03c78ee8a7d31e27d12f39d3f71d2f4734e38c035186e9f","sha512":"2e77c8c1772b13960169048785558182dd57d64df0022e543ee6c8940f6bf84801e1b461f8cf6cbfe6580e7652bb2c96d40e302c9480d5ff52f1f277df393ddf","ssdeep":"48:1C5YCBS0/oE7MIzfS5vuP2K5igELRvrPtkWg:1C5Zp/oE7dLn+IZArg","tlshash":"c5e1b981926cbff8d65d6734c686c64473117190a75a28acd071d8fc22ce98b89fdb2f","first_seen":"2025-09-16T08:52:04.555083Z","last_seen":"2026-06-03T17:30:46.731791Z","times_seen":12792,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/plugins/owl-carousel/owl.carousel.min.css?ver=2.3.4","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/plugins/owl-carousel/owl.carousel.min.css?ver=2.3.4 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Sep 2021 13:35:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmOY0f6eKQLsm4MqCtNzRW%2BuvPApiLzsdMKLbalEuIDQMThZC9RACTYQzkh3h4wqluMc5Prmfa4UumJ5dHFenPNgv2A7SZGNFlY%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"61531a0d-d17\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fe83ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-06-03T17:51:37.776279Z","times_seen":38206,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/css/post-66657.css?ver=1760448895","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-66657.css?ver=1760448895 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Oct 2025 13:34:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejYtT1pwH8ykHPktXkqGowsIJ9NjvNPsytzwo0t4ywiE6gPKb%2BEnmRoLm0ySLSLHpSgrgvAXasEnNUeioSLRKuGVqK7G3dVM660%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68ee517f-18e6\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a104858dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6298), with CRLF line terminators","md5":"4be25c75666c345fef4a2a17b616ac0f","sha1":"364e0329ba30c83af7f2cb7389111a126097b542","sha256":"40d5f0a1f19f992e5c545d4cb2c64267c55e8493bf0be0a999c1750b33315187","sha512":"8d5940257ad5f74fc4680f9ef136ae16b5432ac90da7c7ac3356db8576f3adca4c9558cdd1f0e558cc898a2912325e3b2a856d6672ccbd72e0c9f381cf7bb1b9","ssdeep":"192:0yJyO1yTywHkwajphYbql6It0Lfn8k75mH8PqCkC9u1JxHL6kt/lgS8MlglCylg1:0YLw5ktphYbpfn8k7sHBb1Jd2ktdgS8o","tlshash":"93d178853c67a129727f311f3287a99c902c88cae97e7fe6f0115283b9f6d9233c4914","first_seen":"2025-10-13T19:31:14.697245Z","last_seen":"2025-10-30T07:48:34.349973Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/es.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/es.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 290\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4zRM8pSde9a3w9AmINFKJTi7AMCB00schuBrTEGYZsxx1CdZ7EQoF5WIMVMA8cusuGnfLLiD5ytcjlZBPeIYiCXbIl2pkPTtN0%3D\"}]}\r\netag: \"6645f620-122\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a108886dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"72e61ec9fea3cf1e70955a02d210723e","sha1":"22fd6f4802f2f78488a5b12918c802cbe77403ae","sha256":"ee43de7f6648dac36980de3bcf1bf0d34f07178fdb8afac80541f5cf1660cc5d","sha512":"a66e647b332f97a79a757b5a022c576433b7e894712b46c19a901ddd5695e8ab8e95af4290627c4743fd4351f5013b0329802f6755b7897a4f7b474fba1cb980","ssdeep":"","tlshash":"c9d0ebb2e33d8f78d02d0233dd88c85ca8204a1a4a580f4f0ed2a03288131e52e20ea2","first_seen":"2023-05-04T14:14:32Z","last_seen":"2026-06-03T03:49:21.635226Z","times_seen":324,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/pum/pum-site-scripts.js?defer\u0026generated=1756761548\u0026ver=1.21.4","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/pum/pum-site-scripts.js?defer\u0026generated=1756761548\u0026ver=1.21.4 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Sep 2025 21:19:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s4QDX4NGZHQhTCOxB4%2FOFYim5RVbnr75XfjXe87i0QosVO7hWOW3r84%2FO%2BKPiDtMTZUgnRFt%2BCFRZaYjk%2FIn0TBf5vUwMF0ZwHk%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68b60dcc-11208\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10f8c0dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70152,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65395)","md5":"92ed32dffae1b0b3312acd6ef8248cf3","sha1":"15adeb1a6208b2101ec103d7970a6c94aa517b6b","sha256":"20d9afcb576c50a636afb254abae04d0c3973aa87668824ad7f487ef0766372d","sha512":"639d6ab477f09f1edb7a0906f331f2df1af7202fc40425ff551c914f031e46ced557ec6fc5dbe5591a78f275d024cc4591c3b5c4f3c137c43f6767cf6879ad6f","ssdeep":"1536:LCGfzaI8uoB4ANgKf/c5/IOqIjPGVNfS1bt:TFWNz/c5/405","tlshash":"4b63f94d3990b69242ffb178512f160af333882a501a9890b668ccf57f7d98f9253f6d","first_seen":"2025-10-13T19:31:14.616641Z","last_seen":"2026-05-28T03:55:05.026829Z","times_seen":33,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.3.2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.3.2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Oct 2025 17:04:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlRut%2BE72qoYhLUNlxIgZTxl926PtEVJEDW9pwy%2B3LIjrQu4e9imD1xzaDNp9wCqx32pLoNkUzbd7Ej0Qih3ZTzAiK1n4n3B9Kc%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68dd5f0a-2d63\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10f8bfdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11619,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11619), with no line terminators","md5":"99d1d9d8adfac1b92176aff67bc9a33c","sha1":"341f57bf344cd8ef1518881af2ded6c97427227d","sha256":"840f6feef0dc41ac3fcc4a3492963c661be1f57c6308890c77c5eda09e43edc1","sha512":"8ad65c8ea4eb6bd48f8cfa32465557097f68e59ffed38ff9786d77362b142d09dd1a9c7905d8c983a2a4190f5d3f98c53d3f32144f1b5ceff9616a892edf232b","ssdeep":"192:4v69bN3SLFNjilRm5ReHKj2H8gH+gwnmMQwco/0MbYrdpb9pPkx:4v69bNiVii2KnpcLpb9p8x","tlshash":"0c32e988378776f056b36025947f761ab136ab74741c8850a21ad8e06db9d8fe073f3e","first_seen":"2025-08-24T14:38:05.703596Z","last_seen":"2026-06-03T17:04:40.207079Z","times_seen":6156,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"signals.aimtell.com/pageview?id_site=25476\u0026v=3.988\u0026support=0\u0026state=default\u0026wl=0\u0026ref=aHR0cHM6Ly96b29vZy5pbmZvL3poLWNuL3Zwbi1mb3Itd2luZG93cy1pbi1jaGluYS1yZWdpc3RyYXRpb24vP3ZvbHV1bV9pZD13cWJxZm44aDMwcDBqYmVkM2luNTd1YnEmdXRtX3NvdXJjZT1hZHN0ZXJyYSZ1dG1fbWVkaXVtPXBvcHVuZGVyJnV0bV9jYW1wYWlnbj1jbl93aW5kb3dzX3JlZ2lzdHJhdGlvbl96b29vZw==","fqdn":"signals.aimtell.com","domain":"aimtell.com","tld":"com"},"ip":{"addr":"104.18.5.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aimtell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 01:57:37 GMT","end":"Wed, 19 Nov 2025 02:57:26 GMT"},"fingerprint":{"sha1":"B7:31:54:D5:E8:79:1B:2E:58:FE:2D:08:9A:27:3F:EF:C0:61:9A:DD","sha256":"29:B5:E5:AF:7F:4C:86:A0:EA:05:EF:85:B2:B5:74:9E:0A:10:5D:AD:84:B9:0C:2B:E4:AF:2B:74:53:DA:32:14"}}},"request":{"raw":"POST /pageview?id_site=25476\u0026v=3.988\u0026support=0\u0026state=default\u0026wl=0\u0026ref=aHR0cHM6Ly96b29vZy5pbmZvL3poLWNuL3Zwbi1mb3Itd2luZG93cy1pbi1jaGluYS1yZWdpc3RyYXRpb24vP3ZvbHV1bV9pZD13cWJxZm44aDMwcDBqYmVkM2luNTd1YnEmdXRtX3NvdXJjZT1hZHN0ZXJyYSZ1dG1fbWVkaXVtPXBvcHVuZGVyJnV0bV9jYW1wYWlnbj1jbl93aW5kb3dzX3JlZ2lzdHJhdGlvbl96b29vZw== HTTP/1.1\r\nHost: signals.aimtell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncf-ray: 98e97a1a1e0b4c11-OSL\r\naccess-control-allow-origin: https://zooog.info\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\naccess-control-expose-headers: Aimtell-Hash-Exists, Aimtell-Traverse, Aimtell-Signal, Aimtell-Iso\r\naimtell-hash-exists: 0\r\naimtell-iso: NO\r\naimtell-signal: 0\r\naimtell-traverse: 0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-06-03T17:39:31.474073Z","times_seen":100846,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":33,"dns":17,"connect":1,"send":0,"wait":20,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helpcrunch.com/fonts/widget-v3/Inter-Regular.woff","fqdn":"helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"172.67.72.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helpcrunch.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 01:48:20 GMT","end":"Wed, 17 Dec 2025 01:48:19 GMT"},"fingerprint":{"sha1":"ED:07:CC:80:9E:5C:DD:D1:C8:0F:E9:48:4C:01:60:3B:CD:FB:4B:00","sha256":"5D:4B:24:C9:50:3D:E3:8A:0B:93:B4:76:FB:7B:E3:55:E9:20:A1:E5:FE:E3:D4:E9:8D:D6:0B:6E:0F:E0:D2:21"}}},"request":{"raw":"GET /fonts/widget-v3/Inter-Regular.woff HTTP/1.1\r\nHost: helpcrunch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/font-woff\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 20:59:01 GMT\r\nvary: accept-encoding\r\nexpires: Sun, 04 Oct 2026 19:30:34 GMT\r\ncache-control: max-age=30758400\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nihTtufjNdJ2gQMy9DL0qkMpdIHy%2B16QPVr9TmymtOqQZ%2FtXxujS2Y23IgT3oIe56ub8K7MOZgIZFsTzkrkvHp1WF3W7uSm39KyEtUU%3D\"}]}\r\nage: 86241\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68e42d95-110dc\"\r\ncontent-encoding: br\r\ncf-ray: 98e97a1ca94ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69852,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 69852, version 1.0","md5":"9c42066f8a17572a6ef8c3df4f2d849a","sha1":"80d97c5c69e791e824cf25d18b51214fc7a36733","sha256":"604a1aec3d12a88e3782e988ddbe071e0ef64474b9d04ddc1518d27071976769","sha512":"07822e2c0209d3c81a4835c1f102e32b12f5fc87ad579de53c97815ad8dd6983165c3b457f78a48e7164c4cba7dab3b2293960f67feab8dcba64c74ea06c2fdd","ssdeep":"1536:UzKHh3gOOOO2RMZaltV2o9TL/65i3gODhG3CJMQ0FuFSsm:Z12oNSrjydG/","tlshash":"cc63f1b829b91463cdd22135de4fbfa297c2832c2f6ed339a119b3141a95160bcafd51","first_seen":"2023-04-17T08:44:08Z","last_seen":"2026-06-03T09:01:42.328279Z","times_seen":541,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:54.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXyKktzcd%2Fmet0UlHNtgqPdraWSpa6J%2B5Sb0vEhHEH%2Bqy8FDzKerbLIek%2FzWgxLLOXP35r0jD5cPD4oTA4GM5G%2FPACgTuIxNFxw%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"68dd5f08-7917\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a0fe83edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30999,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"008e0bb5ebfa7bc298a042f95944df25","sha1":"93897ebc560b38a1d2bff43c22dd6a3b7ee90c0c","sha256":"c4047043368afb4baf1aed25d358a5c2a333842a3b436b58491ab36aeee65b9d","sha512":"3f43f1a813b8188e7f8d296999491f99aff9010060f3e26b20ec32502fa76926361eda0644cdd20995661119206376c74516ea2a63ec4087fe88443aa3304022","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8E:wwlr+Klk3Yi+fwYUf2l8yQ/e9v3","tlshash":"b2d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T04:30:10Z","last_seen":"2026-06-03T18:01:43.81095Z","times_seen":37545,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/css/post-66838.css?ver=1760448895","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-66838.css?ver=1760448895 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Oct 2025 13:34:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDxePqFGJY0vj30034WafwXqkmCDYg7%2FevdZwVEZU6XP3dY883WLulhu8H1cgrSu525YYX67DD4XyQtHcuh%2BppQzS6cqm5Fjj%2BU%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68ee517f-2f78\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a104856dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12152,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12152), with no line terminators","md5":"1e19c9a5faf213ecb9cd3d5f6b0bc121","sha1":"e6e81c4b8d8a9d386788d42cf6f34c3acb091764","sha256":"16a12d72704f2e0607c21b28b371be878bd85642b2faeb760bcac435d6862d61","sha512":"7585da152087e4acd451fbee7fcd99daace8b35b700feca58d31fab7f4fc0cf7f589f37b0ddcb0d02e3c588940049aa30c07163d2dc1f7821602c22553213c80","ssdeep":"192:Wjpe0rdeM/eVo4uBOOCQ5OqI2RnJWImewQRcl2qCOE+9tFvq9aGu7MOoKBgnBtjA:qAxgB5XSHSjT3g","tlshash":"a6426be97ea35029b11f24af911361cc21244cd9d42eb7dae8319627f2b5cf233e4e56","first_seen":"2025-10-13T19:31:13.978769Z","last_seen":"2025-12-19T21:29:08.978505Z","times_seen":31,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2021/11/click.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/click.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 47996\r\nlast-modified: Wed, 21 Dec 2022 10:16:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d284LtyQ0VvWD6MtIFSuM80%2Fx8w7OQWGrI0YFQM%2FLJo00p8dWeqexOJVsKSAP6PGwfZwFwWtV%2FnmtZyb%2B4phITbv4hsTCjDmTfU%3D\"}]}\r\netag: \"63a2dce1-bb7c\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a106873dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47996,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 843, 8-bit colormap, non-interlaced","md5":"a5ad7148a0616264a93dc99457cf83c1","sha1":"420819b9d2b257b5778b1d0b6955b09c0615ef64","sha256":"ae8d6e6e911f62871d3b28afeae853c8da0e8de9586e310d734ccd19b5366a73","sha512":"327200c56481562f67690215fa5366b23281b9905c871b46fc479c4bf1e17b78d6a0fc70200876e82cdd05bf2dfe1023437ffbee55f17097d1ef8a64b4a39a97","ssdeep":"768:qkWxpubul0fpY6RjnapKnfigUH6/RHFD9Pyj4rPz9PbbrPGjYru0bv6+ey2Sx8tM:qkWxVl0RY6RjnOmtUwFJPyjWPz9P6Zgr","tlshash":"3e2302bd7d5071aaaf644052c30e5da6eec33e1a3cfc3bb44129518b1e46c523a94ab6","first_seen":"2025-10-13T19:31:14.029263Z","last_seen":"2025-12-19T05:41:03.581722Z","times_seen":30,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/nl.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/nl.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 243\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1PN%2FNLmxkymwrIVXiHLEIk61MmjtOTIZNv5EbnlaqlLtOl9%2FJT12H2lHQ7wtqHNLZfRvhVENrd%2Bjt60MiQuWoW8XEJungSeElw%3D\"}]}\r\netag: \"6645f620-f3\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10888adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"72f3b5cd891ac4b424071741954ca654","sha1":"c8a2604bead07e45daaa53af30bf0d937870b0da","sha256":"c0da39dfab2a366de1c0efa54c349ef46cdb40d083882d3fc7530de710845cf2","sha512":"74b3ae5c68bf48350c7a08c524f27c4fc1d17733a653df9626b3856fbb7f7af79255a29da2174810db9f59c142242afb17b5291922a107d25778b995ed69385b","ssdeep":"","tlshash":"d1d097e381d68f3ec6aef3335313c948ed6e04788e29602b903a42768628000488419e","first_seen":"2023-07-06T09:52:10Z","last_seen":"2026-06-03T03:49:21.672786Z","times_seen":169,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/cn.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/cn.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 252\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UwBnq%2FgXewgvDbxBIdbSw2mNZxsCEY83QsBvplv7KhCInOjINTTn20hT7YPAgq%2FBEJCOc6rzFFGWJq6y19ZKIKl8pXVcfXB%2B%2Fgs%3D\"}]}\r\netag: \"6645f620-fc\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a108891dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"ab35a5e5633e760b31754cca263a6184","sha1":"ba1751246ac6d4b762e370b1eb29d219a3bfbf54","sha256":"c9db31d43b24c3f411603160fc6554ceb91e1c628696646a13a563feddee0540","sha512":"da9ffe766c62b63e757c965ad338a1b586f0450645634b585b45e209c590981516a1b4022a4c0c0ab04b91b1eba83a195deb75c32f83d8e66855cd13a5d2a9a7","ssdeep":"","tlshash":"d6d02bcedb9c6cbed67a07360b7074116534172f8e155447718f91861ec38a24890155","first_seen":"2023-08-10T21:26:20Z","last_seen":"2026-05-28T03:55:05.050761Z","times_seen":112,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/kr.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/kr.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 339\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bP1tl1AkKX1sR5jTdKT21Kc6CdI3sxedX3H0BBx8ygRJLpfVz2w%2BSKFAM9m2ex9fhXTtl8QRm2RZa2eQqq3yu%2B37VqQXT1Art%2B8%3D\"}]}\r\netag: \"6645f620-153\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a109894dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"aef6e961c115feccf59a8de1c7a5e101","sha1":"a9158a3748d8b4ff91ecc7cf942d908b325d61dd","sha256":"296f5722ef36477feb23f79b20a628df8baf4527d29e16ff161a5bc95dca3890","sha512":"845a8f555c54cbd279608cb8e14ee611fc261df03a86f5a5e428974f25b6f78ecca452828917c879a061ddb2b0844510a47642614d9c7204c70f9f1e3be646b0","ssdeep":"","tlshash":"a5e02894c7f8883088d487718f046445dd3155382ce6f64f58164d71231814dd9d5746","first_seen":"2023-09-20T09:46:52Z","last_seen":"2026-05-28T03:55:05.135128Z","times_seen":89,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/js/menu.min.js?ver=1.0.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/js/menu.min.js?ver=1.0.0 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Sep 2021 13:35:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CovhyoAYsXxesGhzaXO3YaM6USsjWvIruAOOoANGpY%2FCu99RYINkpgSg0svnvh%2F%2BKh08EzlxkDauHPg8LEB9cqs5ipdmi5eaehY%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"61531a0d-527\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10b8a6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1319,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1319), with no line terminators","md5":"11523555d48b38ac0c755b91472b6e54","sha1":"00e1c7432fe7e9c9a040752ea2240ad8f2dfddbb","sha256":"72d17bd9918958ea5db273de0af388d3a26f9696739d0c4d2c38462dac595589","sha512":"29d6aa714ef5150f269ab5d007ab7482898d85acd1d1b8410b0551671eaf998de77294087eed27020450fe36ac82835e65d775b5b2eefaa5f4fdf1ca585f3d1b","ssdeep":"","tlshash":"1321e15e792059ec45af736311b783d151720e1d81448101f37121f56efe2a27ae3f4a","first_seen":"2023-03-12T20:22:28Z","last_seen":"2026-06-03T08:30:51.85149Z","times_seen":365,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b.clarity.ms/collect","fqdn":"b.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"4.153.129.168","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:57.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.clarity.ms","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 22 Sep 2025 11:47:39 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2F:AB:D5:00:D8:CA:A1:68:80:2A:8F:B1:B8:AB:7D:53:51:17:B8:E7","sha256":"0D:97:E9:2D:71:3C:37:42:39:CA:7C:7D:94:7C:09:4B:F2:66:B1:07:28:4A:D3:BC:6A:8C:DF:E6:8A:28:E2:71"}}},"request":{"raw":"POST /collect HTTP/1.1\r\nHost: b.clarity.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 82020\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nCookie: MUID=1C156DD1AC3C6CF62E9E7B54AD726D97\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nDate: Tue, 14 Oct 2025 19:27:57 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://zooog.info\r\nVary: Origin\r\nRequest-Context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.7.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.7.0 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 08 Nov 2021 15:24:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRSA6BhqETAPCAqNt6H399ZLuLhTtrIptJD8er%2FWy6GQrKdAAGiTmq1RqZBPebM2RsKM06y451PLcRZugVvXvyJea0QjAnOcLNU%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"61894133-76878\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a105861dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485496,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65358)","md5":"447df0b82fca972d090f4b55835b9289","sha1":"58eaaa51c8ddc2eb3a46e7e93b9c1da5946ee23c","sha256":"184158b86609c0805441583af03684e5d2e349b481bc5e0b405eef4f63d0f25f","sha512":"a033e9ee488c23b3c452744a9ab18e26716fd5488f2cd131daa6aaf60308e0e5e65b618414b0936046c76a17ad8fe67324f85ef72ef1869b67e9e6e5cb04b348","ssdeep":"3072:vR/QvmKEBVJh/PJMcokaCeLYtz+RJwKZ1kkUSbxhJwdO8BEo2HwSMxnp5ANdl0gN:vR/3/+ck","tlshash":"16a430b2f894241f23674cbd30e0b92abe1701f2d5c21fae7568e6945e0686f353a735","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-06-03T11:37:28.421335Z","times_seen":35144,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2021/11/easy-to-use-768x763.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/easy-to-use-768x763.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 43876\r\nlast-modified: Thu, 23 Dec 2021 11:11:29 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FgjLTJ4vsWX6Azj96SzR1NlLnpQzFATMHETFwysEdbJfWHdcbUY74g0qiQNVPIQFHTribwJSDbxKDLTmRUOkx1lJBH0W7G95CoA%3D\"}]}\r\netag: \"61c45961-ab64\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10686edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 763, 8-bit colormap, non-interlaced","md5":"f2b2bbbabf7e7d5482c959c852337548","sha1":"eba01358da56eff6e041ffff29e6f64bf7423ce1","sha256":"1cf67c089f532f8089a3eea89d25c3291b33daa38a185aba23253bcba62e5ac0","sha512":"0f812360db02346a4b27d3e854cf0bb31819cfe98847f4f7435596ac2d261bd369f9c790173096f0296da7d9c5e6550e06dcacfc8f4de13b37d3b0f0b409ff85","ssdeep":"768:FQwmccZquKhMAnD64ngRdGFu7e9fd9BQS3lvr0tlQQwRXcYlLV63:FQ+AquKhfn2IgRI9/9vdqtKcgLs","tlshash":"c313f23f9ae6548f41e7640e952e8383e5174b4c0d34bf893ea1a0188f1e5ff84ca921","first_seen":"2025-10-13T19:31:13.957972Z","last_seen":"2025-12-19T05:41:03.5973Z","times_seen":30,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/plugins/isotope/imagesloaded.pkgd.min.js?ver=4.1.4","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/plugins/isotope/imagesloaded.pkgd.min.js?ver=4.1.4 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Sep 2021 13:35:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8PNQb1S45zSFJ%2BrVDq1QlcwDmjDLioVlhsRW9ah%2FMJzzXdt2IRAcXtdpxm%2BkVxDZIbLBakllcXv80L4fG267Ks%2FNojaDlR3NxI8%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"61531a0d-15e0\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10b8acdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477), with CRLF line terminators","md5":"81545aed80e2c8b710b729bea178621b","sha1":"049173b82e68c40492961bb95ddacefb44eab680","sha256":"5a65b0ca177f1c0433c0ead611692521c23e6668846a2861fedc09ae11416ffc","sha512":"627555d455405e30e77fd0e51bbd9ef070e7964d61ce37d61a5dad65d6bcca809956d18df46bb3e2d7c502d690ab17a2e7cc1caeb07a9a2c3a5519b925fbd971","ssdeep":"96:cww1xr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBVd:cwwfrycrr3rKvE9IjRxjGjgNhdTLo3rt","tlshash":"15c122cd77a275362296f0b3a21f020f7276406e6918815d7969ecf25cfcd092633bb0","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-06-03T12:29:06.935385Z","times_seen":13373,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.helpcrunch.com/sdk.js","fqdn":"embed.helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"104.26.1.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embed.helpcrunch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 23:21:14 GMT","end":"Tue, 25 Nov 2025 00:21:09 GMT"},"fingerprint":{"sha1":"DA:FE:C3:0D:E6:5D:28:73:3E:F7:AE:0D:30:82:A3:CB:D5:14:16:54","sha256":"F3:CD:AB:0E:64:DD:F9:D3:80:F0:4C:F3:0F:1D:DB:8F:E7:97:97:F6:B5:45:82:8A:89:55:4E:D7:F6:A2:89:7A"}}},"request":{"raw":"GET /sdk.js HTTP/1.1\r\nHost: embed.helpcrunch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zooog.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQ%2FlW%2B5mkOdjScdWtbTF%2Byn7jOT8Vvl76eBmXJG9RQArgdfwTVI%2FL%2FkEifq0mUT0%2FEQ6f51gBGCtdPZfyZbQY5mQJRRgZvNl1IRS%2B9fpr8Q2V02%2B2kYeDlod17MR3g%3D%3D\"}]}\r\netag: W/\"4e402d61b978a525ffcfe5e5afced3a8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 98e97a1b3b0156ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8206,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8206), with no line terminators","md5":"231c177c3527aa2432072e58aa2286d5","sha1":"0b83aad984a47e49592c98694533100d39597857","sha256":"971fe6e8a9a38522eb8819bba5e3dabe73ce602a7991448d8c301821c4ed6047","sha512":"8085b47d3bcbe0f99a558ea3f994e25bd5213f05c4c58342ce2f13a19faf09bf4c7988e5060a80cd5828e85b00d5bb6ac486461c0e3bf1c82e507b17a4b4634a","ssdeep":"192:2uY6HNQTT44fp4QcJPNXgoxc/wT+S+AxGjBBr:3Y6tQA4hMxFgpBAxGX","tlshash":"e8022b6db35114640a738fb407ff8388a5392434be3588d08e45c95b6aaae8e4377f7c","first_seen":"2025-07-16T20:38:33.156736Z","last_seen":"2026-04-28T20:09:52.998058Z","times_seen":125,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":85,"dns":0,"connect":1,"send":0,"wait":15,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/it.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/it.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 234\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRQ86ERMpOqvwWN7nDc3%2BiL3MQQ8EA0%2FaUkgMY%2FvQbh4NlnB%2BUFIHQ8Bb4By9w05Cq4hxvjJjYb%2FrV0JK5ME5Nkr80%2F%2FaUOSCWA%3D\"}]}\r\netag: \"6645f620-ea\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10888bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"e81ea8ac981f01e75d14135b5e78fd21","sha1":"8d17aab009617fecee8ec80d366c1bee6e4ebbb6","sha256":"5486d67c53956813c2ab1fdef773516ee85aff7adae4ae0186cf09e398c1e28f","sha512":"ba35e4133e221ddf3075de08ff95b0dcfd649f8ff10129c61fd21483f230bfd58a46c51a86a53de95e09261d0f82cc9aa581e7b7262efb8961e58e717ec7281b","ssdeep":"","tlshash":"bed097d55f712c38a185102320ac6d2048121b20cf88f0d31ac1563e3d26a00c0f88f3","first_seen":"2023-05-24T16:15:36Z","last_seen":"2026-06-03T03:49:21.640622Z","times_seen":233,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2023/03/BG-L36UUQ-min.webp","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/BG-L36UUQ-min.webp HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/wp-content/uploads/elementor/css/post-64251.css?ver=1760448896\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44278\r\nlast-modified: Wed, 29 Mar 2023 07:03:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HieH3Uj%2FOw%2FRCuQA%2BQwXraEuo%2Bq5%2Fu8HETjG1ZYcAz12BwoQQfvELbVgUw4NTNzvHUh7a8tM8w8Gjx%2FegGLIrEchqL43RcmsejY%3D\"}]}\r\netag: \"6423e2b9-acf6\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a14f980dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1040, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eacd9aed7a57ed560e29bc6972bf4a5d","sha1":"343aad606bc12d9a654da9ed0a6961c630985a0c","sha256":"0aeca27d27b519c3edc1541a0bd4f577cd5de9308f1fde16793090c867ccbe0f","sha512":"009dd81baf1c4d9b01eb13e51e30816179d2b7bf2e85b3c1f622b1e62183a90cc4f905034b971fc9452867e67e3c586791e67b3790bccb660f4084194ba7b1a8","ssdeep":"768:MATXfxq0XjAhkaTKHY1Elv06vBfCiuOGP+ToydckCo6Z9CEfr6+qfA0a:MAFq0XjAvUYaWivB6ZUEf2Hf5a","tlshash":"2f13f16b84561162f91864b28a32d45710b713fd7e4463f7eed20fc960b31b888f1b9b","first_seen":"2025-03-17T07:40:24.724173Z","last_seen":"2026-05-28T03:55:05.023663Z","times_seen":61,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/de.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/de.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 357\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvAZD0oISGiNwqVJvQKt2CYyTxhbw5U%2FokRbCm8PAKDJ2ApYpcrgZlJ6iKT4%2BOK9ZMqewqbWJHj%2BefU6ASDa%2FKdrxxykMP33TqE%3D\"}]}\r\netag: \"6645f620-165\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a107882dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"c8366d209d63b7cda8314d4258c36807","sha1":"6adb58ed9c1803599601de3f3645b0181c23709c","sha256":"6434052af0ddf6b0203fc314c95448d2148edc35dab8973128a46430fd6152c2","sha512":"9a78f5c6c4d95d2e73ee6a8b3e623660592a00713ba8461d5f772f689d6f0e6baf1aa0ce2b651e401dfb75ec3fa73e3784e0a0c0caf03f8e17657e1ef9843a30","ssdeep":"","tlshash":"7be0c0d01560ed29e2815af9449e4181d07b24be40ca16871c16cda90a4ad7b82523ad","first_seen":"2023-05-14T23:27:01Z","last_seen":"2026-06-03T03:49:21.624493Z","times_seen":437,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.3.2","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.3.2 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Oct 2025 17:04:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2FCxYkE43YQ%2BnrE1%2BQGMJFHb4QxA54HX8NWBm4HL5uema20JNvH58UxlKWT8VFMszizVMmMufV71C5%2FhUZ4nEdnNlfd%2BE5Yv1bU%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"68dd5f0a-1e42\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a105864dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7746,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7745)","md5":"84e9faf79071506b26972607fba4a77b","sha1":"ed2f91660e67dd1f5abe015bebede7605e8989cf","sha256":"96102022182a1acb5f4755104dd3f246c5826140767d6da628271ba0e2b0068e","sha512":"198dceda6384eb0b6f2f853252d4aa1c2e874555bc51aacff67f4158cb95a1da7c04bd3de7d460838975824d9a177312d48e8ae78f6a3e12412794449bfdd54f","ssdeep":"192:8USu7icfgjw1aGbXIOjS5MLE88slOhyga5wX2cd:Z/Dzp5wX2cd","tlshash":"b0f1dd237b37b3481567e53ea2ce2bb87275c2a5d2030dd9e4f1a218d3de9d4172258c","first_seen":"2025-09-18T15:25:21.725716Z","last_seen":"2026-06-03T17:04:40.203099Z","times_seen":23547,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.rybbit.io/api/site/1137/tracking-config","fqdn":"app.rybbit.io","domain":"rybbit.io","tld":"io"},"ip":{"addr":"142.132.226.253","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.rybbit.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 22:49:20 GMT","end":"Fri, 28 Nov 2025 22:49:19 GMT"},"fingerprint":{"sha1":"1E:B1:69:A2:53:55:C4:3A:A6:BB:35:2B:D3:B6:6A:75:BE:7E:E4:53","sha256":"1A:34:30:9E:F7:35:07:9D:01:B7:CD:50:84:6F:B2:47:EE:00:4A:FE:9F:5E:AC:55:DC:BC:14:12:B7:0C:C4:83"}}},"request":{"raw":"GET /api/site/1137/tracking-config HTTP/1.1\r\nHost: app.rybbit.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zooog.info/\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 158\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\nvia: 1.1 Caddy\r\nvary: Origin\r\naccess-control-allow-origin: https://zooog.info\r\naccess-control-allow-credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":158,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f08940ab8995d6f83025689d9c3813ef","sha1":"b85c483de60f3ceeaaf8939fc2e77b7849101a3a","sha256":"5e35ef2ed23a60e05d161aacf711a31e35a57ea5b236cef777fa56a69d7b8328","sha512":"9e88ca79067f12bc4be38c856dc3ae5804bab5990f0ee4d4d2f99c36f950743c65348eb236139c34327bec047d66e7d57adbbbcff0b12ef4b75018dac7ef9dfb","ssdeep":"","tlshash":"e3c04c19c5dc5cfee494821996763e511f3d153735487344e75b1c0a2aa69d271b2007","first_seen":"2025-09-24T07:40:06.77269Z","last_seen":"2026-06-02T07:29:56.045425Z","times_seen":244,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq; pll_language=zh-cn; gclid=null; utm_source=adsterra; utm_medium=popunder; utm_campaign=cn_windows_registration_zooog; utm_term=none; utm_content=none; referrer_params_1=?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog; PAPVisitorId=i8pXBSMPJaEnzRzMeIjIFDhLy1asVf69; _fbp=fb.1.1760470076229.665650788757767916; _clck=1kqlz9p%5E2%5Eg05%5E0%5E2113\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 489\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnVb6d48qI6Q42gMdyrn3l3z4G9evSy4uE06jai%2B136mYvQx%2Bf4FYS0KPIKgEVKx0pJwqgyE6c0ec5ArT7qFltewA%2FsmRUFCa6U%3D\"}]}\r\netag: \"68dd5f08-1e9\"\r\nexpires: Sun, 11 Jan 2026 19:30:34 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a19aa43dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (449)","md5":"6b71a11df9f5c5155e31bd1bab6b90e9","sha1":"ebdd33494c35a372a4deb56365a93b9c442cf42d","sha256":"0ac32e0cd0885e8d2bcad7cad36f561abd8c7bc4fac5c74cd6fe234b65784363","sha512":"a9bd5d42b07be3cee61bb1857618b1b5bf002091d9fdf7bd99eb53521e83ad44a01b2abee9d987ae3ad92062dcf6e23cf1eba9519ab3803ee1c1f2b6b5080014","ssdeep":"","tlshash":"daf09eb970d238ff140f44820a97102de5981cf5422560417ef944383a75ea4b23539e","first_seen":"2025-09-29T16:52:39.689457Z","last_seen":"2026-06-03T10:23:25.994667Z","times_seen":3253,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoogvpn.widget.helpcrunch.com/","fqdn":"zoogvpn.widget.helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"172.67.72.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.widget.helpcrunch.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:08:15 GMT","end":"Wed, 17 Dec 2025 08:08:14 GMT"},"fingerprint":{"sha1":"5D:67:EF:7D:50:E0:9D:C2:4B:19:F3:0D:17:1C:A9:0F:F9:6F:EE:FE","sha256":"BA:67:4F:F6:95:BC:C8:A6:1E:6A:F1:56:2C:57:A3:02:C6:9F:63:22:48:C3:B1:E3:B7:D7:F3:A5:35:C0:16:B9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zoogvpn.widget.helpcrunch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\nlocation: https://embed.helpcrunch.com/sdk.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7ZYCINSeZYC9lKkQ6ZVgz8RHRj3bzSTno1nBY5W02Zwc7EBHsP9%2B1F%2FBV8qHiD6n3VuPigYA6gSeSYRi5R01AJFkjK%2BTcI2Pyiogg6T5lD%2F9lWRZsTmOOn3Is8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98e97a1a4aca4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8206,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":33,"dns":20,"connect":1,"send":0,"wait":4,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/elementor/css/post-64251.css?ver=1760448896","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-64251.css?ver=1760448896 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Oct 2025 13:34:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enawK4h2eZ%2FP%2FaoPZAIDFqIfhirDkO1aJDjRJ0orLnlwAlBSJHhRHMox00LNNAYp2gzoqVPNh5WnV6fqxXC%2FZl0B0x8E9hGe1%2Fk%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68ee5180-e4e1\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a103854dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58593,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51001), with CRLF, LF line terminators","md5":"4fb30af09e4b6563bde2fe411953d592","sha1":"17291eb7b37cb03c0699e4d2760e173a2ed480f2","sha256":"6394c172908d2433d8db3a98378e575e68d2d3be78708ce91a9870483120f5c3","sha512":"7ad234b7351cd51e32a6f3a621fb5300d10d9f24b8287ebe8ea7961d940c34f954660595d4126bdecabcd64a555dfc8c5bcd4e555ba02963ccf76ce1af0bbb7f","ssdeep":"768:HoNLKwCkOe77wxiXdl3RYcWnwKG1ne3VDWnIa90weue7Ur1eXw5:IQwCkOe77wxiXdl3RIenNNeue7Ur1eXi","tlshash":"5a437b597c53001cb02faa0b9093f69caa254cdad07fb6daf8259117f275ea537f0e12","first_seen":"2025-10-14T07:37:17.724807Z","last_seen":"2025-12-19T05:41:03.615589Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.19.4","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.19.4 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\nlast-modified: Mon, 01 Sep 2025 21:18:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kp4A2vghYO%2FZ22Qa0hYLYJ8jDb9x6P0JbZZTd9tM9%2BaLbUMu4vNDuE9qAqxs%2FpAmKju8RjQXZK5Mf2A9O1g6cT%2Ft0hQ1A33XKFg%3D\"}]}\r\netag: \"68b60db5-0\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10f8c2dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b.clarity.ms/collect","fqdn":"b.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"4.153.129.168","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:59.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.clarity.ms","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 22 Sep 2025 11:47:39 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2F:AB:D5:00:D8:CA:A1:68:80:2A:8F:B1:B8:AB:7D:53:51:17:B8:E7","sha256":"0D:97:E9:2D:71:3C:37:42:39:CA:7C:7D:94:7C:09:4B:F2:66:B1:07:28:4A:D3:BC:6A:8C:DF:E6:8A:28:E2:71"}}},"request":{"raw":"POST /collect HTTP/1.1\r\nHost: b.clarity.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 141189\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nCookie: MUID=1C156DD1AC3C6CF62E9E7B54AD726D97\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nDate: Tue, 14 Oct 2025 19:27:59 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://zooog.info\r\nVary: Origin\r\nRequest-Context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/css/conditionals/shapes.min.css?ver=3.32.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/shapes.min.css?ver=3.32.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68dd5f08-285\"\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRwk%2BAb4zGJG%2FcuH9qJqq%2F4YUEOOf4KwbHVockfzjEUSX2ez5legRgafVfWVyGgDrTSOC4pRLsWIoTurIgbZ2upEn7xlIgt9EuM%3D\"}]}\r\ncf-ray: 98e97a103853dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (645), with no line terminators","md5":"ba2bc873ba3e8ccaffc77028bf9ee723","sha1":"ddde3c7ed3181d7ececbdbc35e3cb49a786f0060","sha256":"c5feb6bfb7973d126626671a6555cc3f88fb4d569138e4b05174e85fb0d3f8f2","sha512":"d1ea7902168d9013d78076e15ae2ce2f4a94a6057a9f9e7ad54e0832ffb0c52a2890b4f9ed8b0ffbe82d3c4ebdd1ca0f781c9796b526d6cd3a99420d9e6eae54","ssdeep":"","tlshash":"29f02d767d17501c802f921346c74a0e612496c717e22558f509414728ffdf1b35d24f","first_seen":"2024-12-17T09:11:11.315263Z","last_seen":"2026-06-03T16:35:55.391312Z","times_seen":18976,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/js/download.js?ver=1.0.5","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/js/download.js?ver=1.0.5 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Dec 2024 22:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2BDZJttMp2Qw6jEy8BRm4ogwOquEw9X%2BSjZoouX%2F93kfQ5C6DYmrgV5xNiNJto09XcF%2FyRZ7O9WdrcZv8smqCNPV6PaBL5orZPs%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6758bc5a-2028\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10b8addfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8232,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"bdacea33e74a5a215aa92f338dff2075","sha1":"10e05557a62c902289f08e394fc86180b538f7f1","sha256":"5ad18ae5fed2b073c9f0ab4f0471895b48eccb543351c9ce1eac8e0b3a912580","sha512":"36c972b857128b8a154740f4d87ae812e5909c33be4e855c58e898a9d180196c57915a63cc4e1f16426da9c5b399aaa89d15a49aef79f2a16004e07f923e9f7a","ssdeep":"192:7/q2uebvpTE84Kg/KbvpTE84Kc/3Uu14lb/pTEc45SJ2SRpTEc4qo/xzAj1lAJSp:Dq2QVIlgq","tlshash":"960234149ba2d44b5131233eaabb6609f77d00734441dd3eb8ec564b6f32921a690fdf","first_seen":"2025-03-19T06:59:38.396879Z","last_seen":"2026-05-28T03:55:05.030896Z","times_seen":34,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 May 2025 12:50:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xqPlStDGqmtjGUnSyCObcSloIXYW6mFV%2FdUF7BLKBLhLEqgDaz45EUooi%2FPHBPno8ao9nLlmiwAcYzU1QRFj0OkjhjbPnaf5ldk%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6814bf9a-53d8\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10c8b7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-03T17:54:34.596599Z","times_seen":294462,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.clarity.ms/c.gif","fqdn":"c.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c.msn.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Sat, 11 Oct 2025 23:23:02 GMT","end":"Thu, 09 Apr 2026 23:23:02 GMT"},"fingerprint":{"sha1":"01:EE:1B:54:2A:08:98:01:F5:B8:9D:16:25:A1:8C:E6:3C:DE:46:E5","sha256":"FC:0B:9F:AE:E8:A1:E7:C2:A3:64:B0:2E:BF:41:1E:C8:F7:07:9E:F7:BA:40:1D:2B:72:68:E0:60:9B:40:EB:F0"}}},"request":{"raw":"GET /c.gif HTTP/1.1\r\nHost: c.clarity.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-length: 0\r\nlocation: https://c.bing.com/c.gif?ctsa=mr\u0026CtsSyncId=FA27C61E32AC4DE9B1E5B84D896524ED\u0026RedC=c.clarity.ms\u0026MXFR=0BC64B7DD1416355084F5DF8D5416DC9\r\ncache-control: private, no-cache, proxy-revalidate, no-store\r\npragma: no-cache\r\nx-powered-by: ASP.NET\r\np3p: CP=\"BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo\"\r\nset-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;\nMUID=0BC64B7DD1416355084F5DF8D5416DC9; domain=.clarity.ms; expires=Sun, 08-Nov-2026 19:27:56 GMT; path=/; SameSite=None; Secure; Priority=High;\r\nx-azure-ref: 20251014T192756Z-r1dfb69df85wlrlhhC1SVGmep8000000033000000000an5x\r\nx-cache: CONFIG_NOCACHE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":56,"dns":25,"connect":8,"send":0,"wait":33,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.clarity.ms/collect","fqdn":"b.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"4.153.129.168","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.clarity.ms","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 22 Sep 2025 11:47:39 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2F:AB:D5:00:D8:CA:A1:68:80:2A:8F:B1:B8:AB:7D:53:51:17:B8:E7","sha256":"0D:97:E9:2D:71:3C:37:42:39:CA:7C:7D:94:7C:09:4B:F2:66:B1:07:28:4A:D3:BC:6A:8C:DF:E6:8A:28:E2:71"}}},"request":{"raw":"POST /collect HTTP/1.1\r\nHost: b.clarity.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1185\r\nOrigin: https://zooog.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nDate: Tue, 14 Oct 2025 19:27:56 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://zooog.info\r\nVary: Origin\r\nRequest-Context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":708,"timings":{"blocked":301,"dns":2,"connect":99,"send":0,"wait":103,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/pl.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/pl.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 194\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhNo7NKGRQQcWC7%2FlpOQvNs3xVws1KI8HBS%2BHRGEfzkoiK91BhjiXelPMGwswTBqpyjUqTW6IbKNxEkjAzbRB3jSz5plGXHb%2F%2FA%3D\"}]}\r\netag: \"6645f620-c2\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a109896dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"89959bb5a1ec3058559ed2f7d02b1850","sha1":"9dc7ad0349dd3afedabb62a763960eae56168c14","sha256":"0b8e6a0503148db0c445d26d7aef6a8de1d31b68a30f212ab47b6d4e7400f6bb","sha512":"a1631d2b3f673f18465fa516aeb0251621d148a8c5a8698cb4dfa72437bb257685971c6e4b159dbcedeb30fc9e187c86a31381d1d5db8400913f2837906cde5c","ssdeep":"","tlshash":"5bc022a3a2702d38d81641bb7908934cd85028209e2af14a890684fa9826514d8e8283","first_seen":"2023-07-06T09:52:10Z","last_seen":"2026-06-03T03:49:21.683502Z","times_seen":216,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2020/07/footer_bg_elements_img-1.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2020/07/footer_bg_elements_img-1.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/wp-content/uploads/elementor/css/post-64251.css?ver=1760448896\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 21856\r\nlast-modified: Tue, 01 Feb 2022 15:04:43 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyzrczJhFghZaiz2HK1Ps82SDCt7p0t5DNyv79CgWstMbadFeNgi9De2xdfoUTXqhu%2B7co8ZWB4R9bxT9JM2VLMyKAuBMDegCYQ%3D\"}]}\r\netag: \"61f94c0b-5560\"\r\nexpires: Sun, 11 Jan 2026 19:30:33 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a14f97fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 505, 4-bit colormap, non-interlaced","md5":"af8d4380c001c0e16c9c83d69d81b70c","sha1":"01481cb48b34e6998715d7f11f88834d0d766020","sha256":"c43d7ca96d119d01af754a8b34a72abcf01877cacfcad47148cac56f7aaf449b","sha512":"f006665dc4d126e6981b86aa4bc7e1277bcbdeca2754da7eb336a28a737fefed5aebd670de96708941c931ba6b55ebd87cf8387407589396f5e047abebd88a54","ssdeep":"384:RBgaQHu1OwBBhvkp0P2dfgrwUn1oE+/hCr8iac2zBv8D3wbYHij+Q8ta0GBnKp:/PQaOwPhvkhIrwaqE+JCgtPBTbSir8z9","tlshash":"c4a2e0a27c243105cb21e57e4879b6bbc6c424f4b9185214eb22f24d47ab42854bbb7d","first_seen":"2025-10-13T19:31:14.636928Z","last_seen":"2025-12-29T09:05:26.115199Z","times_seen":37,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2024/08/main-for-windows_1.webp","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/main-for-windows_1.webp HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 309792\r\nlast-modified: Fri, 30 Aug 2024 07:21:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HX7xdGFT0JbEWNiQQ5o0Ckj5wAZhWaf4BGuiUR26RRvFIMxk9ibr%2BBktyZpFNWqehoElX%2FR30grdt4ZP7alTth7ttjMksLF000%3D\"}]}\r\netag: \"66d172fd-4ba20\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a10686ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d3b430b399e19cd64b2b947b9933dc4","sha1":"8d06c05b83475d55a299986c707a7538a73e29f6","sha256":"cea2704c7259ae9c00f4e0d634b00e7454e0837726e88ff182201663f8891b5b","sha512":"21b571339f3184e352bb5b41db33766edfcc9b6cda697fad366abe111755e4ee00f83b6abba9b831e674a35979492a3956353508f632f3e4e525edd3ef5ab162","ssdeep":"6144:1/pCIXX40tu9jwJgyozo0OyErFIIa5aEGN7:1/PXX3M9wGyozoxFUux","tlshash":"a26422114dd05cccdb1b6afa7a0496d0c6fabf638e0c984da68797604ef02d6e40f9d8","first_seen":"2025-10-13T19:31:13.938614Z","last_seen":"2025-12-19T05:41:03.624189Z","times_seen":30,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ua.png","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ua.png HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 252\r\nlast-modified: Thu, 16 May 2024 12:03:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dw%2FmKPh3pipplW3k4vXBFvNy0gwmaRSMJK6tFaETYiA0RWcJtqMhXeZewDWmuXCzyQPZVvA%2Brm1cG0Q4ENju0QGyUHBZetGwHU4%3D\"}]}\r\netag: \"6645f620-fc\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\naccept-ranges: bytes\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a108884dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"a3bff9339c6b701d4f4e1ccc45247bb8","sha1":"aa35baaf89471d006589706fe0b848e89a4ddb2e","sha256":"42c88d61050399e0f93184e6e6fe946329df48ef9c7bc23b521ebdd28e10e563","sha512":"78c1a4ca2b231838d2338623899610080cf85640c97dbd5adcabbe36b59763d7e4b2a416e1b4585b30ffad0631ecffa40914f8b894f9b8b1926fd029d91cd5fd","ssdeep":"","tlshash":"a4d095d772e13df4e19bc6370284c451d06913234adb1cae71d646311b5126370645c0","first_seen":"2023-07-12T10:20:27Z","last_seen":"2026-05-28T03:55:05.091999Z","times_seen":129,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/dvpn-core/assets/js/dvpn-frontend.js?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/dvpn-core/assets/js/dvpn-frontend.js?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Jul 2025 13:09:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8d032RbW6H7zVNafzuv9Ppdz6X4okgyYgT%2Bv5y9Pi45DVrrgCb19bh4vk%2BAesGnYkvL6EwG8dlA2won%2BSzJBnt6o6F6frMNL6PE%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"686fbb7e-6729\"\r\nexpires: Mon, 12 Jan 2026 19:27:43 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 11\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10f8c8dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26409,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c16e779b6f1445da6c0e9750e5f3ecdf","sha1":"ee4c97f01b187a034b9883cb1fb7df2e0dc7eed9","sha256":"47c83b753185d7110748c5f127632f4f9342d2314f4ef9da8d6f4baacfe4cc4b","sha512":"00f0ea39303ccb0ddbe22b477b6f04e9eb1202e807d6e58a7ed3efb02294568893352a94eca1ffa133683a2a386e91bd336ac256343054aeee8aa339d909ecc3","ssdeep":"384:pJ2eV1J2URhIXfCxyQSBBOlCQSUSNIQEcHn:X2Ab2URhIvKpSBBOlCpUaIXWn","tlshash":"02c25169bb4b681d70b7b359453f8004ed3de82bd58056a479ee44193bf0b06b28eb9c","first_seen":"2023-06-18T19:53:19Z","last_seen":"2026-05-28T03:55:05.051713Z","times_seen":80,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq; pll_language=zh-cn; gclid=null; utm_source=adsterra; utm_medium=popunder; utm_campaign=cn_windows_registration_zooog; utm_term=none; utm_content=none; referrer_params_1=?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog; PAPVisitorId=i8pXBSMPJaEnzRzMeIjIFDhLy1asVf69; _fbp=fb.1.1760470076229.665650788757767916; _clck=1kqlz9p%5E2%5Eg05%5E0%5E2113\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKf%2Fs8r5PbaDnBWx8lZS9ZRWKXkS8DMliZjGi2wxLKEW14TcXOmm4Ik1o677nhZ0rSgnWy%2B8LEU8MozbIxQu7qVvMSp3QrPgLsc%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68dd5f08-570\"\r\nexpires: Sun, 11 Jan 2026 19:30:34 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a19ca66dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1352)","md5":"56bd5c3018b31a6af414a01095d099c8","sha1":"944dfb965626ccf974dc791e6faaeb2cc8b2f09b","sha256":"24a85e325239df655f7854194a7a20ccefbbc47e6a47f1599b3499145e876c1f","sha512":"7deb269a4de279b349e24667e9f6d57091b076650dddbaa9b1412d5ea8d772c68a56544f40f4112abacc16b4e4f0c10e296c57b9fe8e6f3d6288bed5477c9f8c","ssdeep":"","tlshash":"812103f370a398ed48cf148a35622d16f1570d5ca885a01ef5aa08db3472e853362234","first_seen":"2025-09-29T14:16:27.410168Z","last_seen":"2026-06-03T10:23:26.002832Z","times_seen":4292,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.helpcrunch.com/sdk-code.js","fqdn":"embed.helpcrunch.com","domain":"helpcrunch.com","tld":"com"},"ip":{"addr":"104.26.1.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embed.helpcrunch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 23:21:14 GMT","end":"Tue, 25 Nov 2025 00:21:09 GMT"},"fingerprint":{"sha1":"DA:FE:C3:0D:E6:5D:28:73:3E:F7:AE:0D:30:82:A3:CB:D5:14:16:54","sha256":"F3:CD:AB:0E:64:DD:F9:D3:80:F0:4C:F3:0F:1D:DB:8F:E7:97:97:F6:B5:45:82:8A:89:55:4E:D7:F6:A2:89:7A"}}},"request":{"raw":"GET /sdk-code.js HTTP/1.1\r\nHost: embed.helpcrunch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iS2s2azXuk8XOCokV8YTUKdkc7pRQyi9zui2K3zEw%2FcfetvoUnrEReTCgfOTdkQ%2FfqDUiNuQ%2FR691S7XknMzI%2B205oeLNKiFxvssKyot5WkeB515KMtm9cXWc5vgTvyA\"}]}\r\netag: W/\"808232522ac727d73ca16502db471877\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98e97a1c4c79120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1585000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"131beecd53f1058ed1528a9d6d5e2c30","sha1":"2323b3205510548655d1921cb336147a728544ac","sha256":"3616f7f652ae2f761cfdcdbc7051a38d89bda658dd954cbb801d1e249c6664e1","sha512":"7bfa2e941bd494c6295b10becd30ca4321565f22607802e94d195db94437bbb3fa08328ee40e8a0ce705d695e91a853ed530e17f88090d75bb503c06db28f9eb","ssdeep":"12288:XKgPDGpoc0lfi2rG8lk0eYYkWBGy5Xmv902IsyJzR:KGrG85eYY1BGAXmv7ItR","tlshash":"4d351a1e11016d7cd9d9a797a193da8da3b4b023d2440e7c39f5c8a9c7c9bbd3202e79","first_seen":"2025-09-26T05:50:36.615959Z","last_seen":"2025-10-21T08:39:55.017666Z","times_seen":31,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/uploads/2023/03/logo.webp","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/logo.webp HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1514\r\nlast-modified: Thu, 30 Mar 2023 09:25:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGAsQkEcB4icRdfHhTaJR8sdt4Wby1NEPD8cjFyH6kgsvsZ9FAXD0vNTZHVUMwcS1Z8Qg3%2F9UWwCXWn7Uz4hu0xr%2FBK6FKrJtPg%3D\"}]}\r\netag: \"64255578-5ea\"\r\naccept-ranges: bytes\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98e97a107878dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53e3bcd7b6b79d914caca597fbb27881","sha1":"2d37dda4d5d141f36a9fd5677ea72941660d1673","sha256":"4b5d7efd7fde4bacea73d187539f59d58f2cf3f561e2827856a1c66c4ae80482","sha512":"ec484179fff041cb9007f272b502118c54f88a4765113a4d43de68e818f5a2c6586692872a7b35cbb857ff21818b85c31e475762f2f724648c13b346f69c5a26","ssdeep":"","tlshash":"9331d7d79e45553c62468cd1d4b1caef1e2d8ea2061ab125827d4a11f0e1b8d25840ee","first_seen":"2025-03-17T07:40:24.774201Z","last_seen":"2026-05-28T03:55:05.127356Z","times_seen":47,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iDiEK9sg1SwA1yYEdtwFgSRX3l4DGfs2HJmEPM%2B4zh5lAgQULyk7xLnk3e6JOFm36gnZqm%2BVh%2F1fQ210cAArTcjN0WHIKqWNSxQ%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"68dd5f08-4057\"\r\ncontent-encoding: gzip\r\nage: 11\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a10384fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-06-03T17:54:34.536497Z","times_seen":123813,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/dataforseo-marketing/js/website-marketing.js?ver=6.8.3","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/dataforseo-marketing/js/website-marketing.js?ver=6.8.3 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 07 Aug 2025 18:36:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LTpJ%2B69%2BILi025iohV4cc0oivhCZILVBAm5K08OMAJqF7itBntxf4SGCXQLS%2BvnxE0Zl5uxPVUZOsgdw8jk3v%2BxgFmRaq0SeuHY%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6894f232-278b\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86241\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98e97a10586adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10123,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"d75b4163a6d8962a16642a7f36af2e1c","sha1":"8f72ba325b8cad9244b4d92b509b758a8eef6293","sha256":"3e59aa52dd2ccf17f6a0e0d32793482189f4d409cad05640bfd32499a84b0fdb","sha512":"9aca81c1ec954d88201e6d1e8a4d751f672dd7111d8797ba7476257adb16ed666311578f0efb3b3ee3a9f075b48d5ac856dadacf94433297a0209ad0c5633506","ssdeep":"96:ae4jcTe4j6GZxnOFlrGVxOfzKask7UDzIckkP1foO3Pb8hZaub:ae4jcTe4j6GyzSNzIckklnPc","tlshash":"f122bc66710a432813e12369b53b7646f32adef64840b15989e1b520d1aaf0fc3fddde","first_seen":"2025-10-13T19:31:14.860591Z","last_seen":"2026-05-28T03:55:05.177295Z","times_seen":33,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/themes/dvpn/assets/js/scripts.js?ver=1.0","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:55.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/themes/dvpn/assets/js/scripts.js?ver=1.0 HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 15 Aug 2025 12:12:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BdXbgnVyarHu%2BAGuTjny%2F81i6BvQhqY2rrnIqDG6aWLf3%2FujvtuUSg9Ppv%2B4t7lINfpSPu3MZwXnZKmAnidk4k4b%2B2P1NCvkmsw%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"689f2416-4dc8\"\r\nexpires: Sun, 11 Jan 2026 19:30:32 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a10b8aedfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"33d05ae25bfc3b7dfca0633cf3f987e0","sha1":"98ea63c6752f36239d07bfbe02fa3865c8f5bfc0","sha256":"e3623ed926856e43454b85ae9cda91a3cf7808fb5d606d9cb7e1dadc11bdc2fa","sha512":"bb0985c6355df99b5779454e20a904946ae8ddd89135465614ffb52a7912ea166b44db131507ba902172e675a53c765c9dc9d0450b0971a38d2702b3b3149b0a","ssdeep":"192:ZYxJ7JQJsldFmLhGumZXqabvceY+dlWwqlGnkryKEfN+7hC9D9DZzdAU+1oXNqlK:ZYxZbdY+fMKkrXeGhq9L07wycrM+9g4","tlshash":"85929618b6f300560037b0395befa254b67640174649ce08be5c4ba17f8973daeea7de","first_seen":"2025-10-13T19:31:14.987178Z","last_seen":"2025-11-06T19:58:37.925685Z","times_seen":29,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooog.info/wp-content/plugins/elementor/assets/js/accordion.28788e18d1d35c23f450.bundle.min.js","fqdn":"zooog.info","domain":"zooog.info","tld":"info"},"ip":{"addr":"172.67.222.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog","date":"2025-10-14T19:27:56.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooog.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:05:20 GMT","end":"Sat, 10 Jan 2026 13:01:18 GMT"},"fingerprint":{"sha1":"94:18:D5:22:33:01:FF:2D:03:B1:65:36:62:0B:A7:D5:67:6A:6B:EB","sha256":"76:5D:90:63:CC:50:A9:B1:4F:BF:9C:3E:4A:07:C5:CB:23:F0:8B:BF:CB:CB:D5:E2:D2:49:87:9A:F9:19:E8:EC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/accordion.28788e18d1d35c23f450.bundle.min.js HTTP/1.1\r\nHost: zooog.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zooog.info/zh-cn/vpn-for-windows-in-china-registration/?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog\r\nCookie: vl-cid=wqbqfn8h30p0jbed3in57ubq; pll_language=zh-cn; gclid=null; utm_source=adsterra; utm_medium=popunder; utm_campaign=cn_windows_registration_zooog; utm_term=none; utm_content=none; referrer_params_1=?voluum_id=wqbqfn8h30p0jbed3in57ubq\u0026utm_source=adsterra\u0026utm_medium=popunder\u0026utm_campaign=cn_windows_registration_zooog; PAPVisitorId=i8pXBSMPJaEnzRzMeIjIFDhLy1asVf69; _fbp=fb.1.1760470076229.665650788757767916; _clck=1kqlz9p%5E2%5Eg05%5E0%5E2113\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:27:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Oct 2025 17:04:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KURonbb3eZMaXx8PSDPuVVPVNy5xZTUMhM3XnKOm6EfoLxSTfNi%2B1K4xOwaBl%2B8bJX4fy5IezJWZTBaeo6qQ61iMnev8Amk3GGQ%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68dd5f08-ecf\"\r\nexpires: Sun, 11 Jan 2026 19:30:34 GMT\r\ncache-control: public, max-age=7776000, no-transform\r\ncontent-encoding: gzip\r\nage: 86242\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 98e97a1a6a7fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3791,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3751)","md5":"c3f9b634c6b97de5f69eefdeb626e581","sha1":"af714f5d0e04666e63b0fa12d06d45f049333de3","sha256":"a44fb76f2ec0992ddbd398854d0af9fdb21ef08097a03cbf235b59f1605aea04","sha512":"38ceedabbae1e016984fb5db05dc4eb20425c78e27f66001928f5585e97df0856cf08c8dbb8dcffffd57f17f18e8f7a3e324ddbab1cbc185ad1e1f9c465f43fe","ssdeep":"","tlshash":"6a71b5523285a93d0ccf61b6b10b562a97033ae9b411ae8c34584df37561fc4a77c37b","first_seen":"2025-09-29T20:53:25.75433Z","last_seen":"2026-05-15T06:52:29.479363Z","times_seen":145,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"zooog.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}