{"report_id":"144a09bd-a1b8-464b-afcc-61bb23614751","version":6,"status":"done","tags":[],"date":"2026-02-01T15:38:41Z","url":{"schema":"https","addr":"dy-dormirpg.win/","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dy-dormirpg.win/","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"title":"WWW.DORMIRPG.COM da DYGRUPO: uma equipe profissional focada em jogos eletrônicos de alta qualidade","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:57:34.772395Z","times_seen":17845104,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dy-dormirpg.win/","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T15:38:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"dy-dormirpg.win","ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-01","domain_rank":0,"first_seen":"2026-02-01T04:47:26.079575Z","last_seen":"2026-02-01T04:47:26.079575Z","alert_count":42,"request_count":42,"received_data":5509066,"sent_data":19077,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ogprimrod.dormirpg.vip","ip":{"addr":"43.159.94.240","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":545066,"sent_data":3339,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"api2.bxapi.cc","ip":{"addr":"104.21.68.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":8,"received_data":149872,"sent_data":4096,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-28T12:24:09.896795Z","alert_count":0,"request_count":2,"received_data":1007,"sent_data":937,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-01-28T11:55:16.61056Z","alert_count":0,"request_count":1,"received_data":56829,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dy-dormirpg.win/","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8a158787957164ae1e8a8f267f9a357","sha1":"47ba743ebeb7776fe3171e2b642263ffd685498f","sha256":"a9e46f013358664a43570dd2c1c5747e0022aab86b44a059a857c98382ada816","sha512":"f0d752f1d52da18919e470de9d79e94cc81a24ca37a001309b3de10b7f000f534712a1bdb2d9df14038f3a92419f817a650a7615ba812031004d0dece8f8a95c","ssdeep":"","tlshash":"a0e0c0c360bf394c0220801a704ac1032bbe08b3efd248610c8c3ba5cff9e4bc46a859","size":357,"data":"","first_seen":"2023-03-07T12:10:50Z","last_seen":"2026-08-08T02:20:46.327488Z","times_seen":754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/index.656c9ff5.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a7b2b119e15cbce9aa9d51df1627b75","sha1":"70b93d97f22946970172466a9e642f8bf8c7b4f2","sha256":"835f3a12f93b739926f75814f676cca7a530eb64d4739791a493947a06be7b47","sha512":"1d0de34f808506d5bcf7f8935e952f7175ac8169a1f531a1c78b0d33f406cbaae0bb46e8dfd33b872137030d851150cbffadcc47b3854196a18354bceae66885","ssdeep":"12288:7cwjGABdiho34A6t79oKZaJDFVm84WwQsAoNGGRoswdYoI9YBcmA66lmtB/fzw7T:7cG+9ozDFVm8G6ohB","tlshash":"94257d3ab08a34aa5f27892451de3e08617dbd23a101d8ccf3d96d598fd678e5313f29","size":1028703,"data":"","first_seen":"2026-02-01T15:38:51.348013Z","last_seen":"2026-02-01T15:38:51.348013Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/2085.23f2b6e0.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d633ccc9fbef5d7decd3a5e9d0e6107","sha1":"40487539cbc0fdad925a8b064f082aa222ad3843","sha256":"f17aa83d4aa587f64d82fa82ba10343f8219d9f2ebdd23c2ef3393729618dfbd","sha512":"a8cc5ae3acbb035fc2731da1883ceb6eee0970a775c776cc3fec12425a1af00bad0daf3e4cb7bca03fe304235a319ad359f0183d52f3eb34a590d05d7c0c5677","ssdeep":"192:mR00m4JNXLzlNxV2OV/mfA+J5Vqu2psisWZBjRCiTUlAEPmak+Qkg:mxLzlNxV2OV/mfBzVqu2VZBjREPmPkg","tlshash":"e852d81eb0cfba070bd34824459b4045716b390d4838e7a4f777aabd4afb68a0729f5c","size":13876,"data":"","first_seen":"2025-12-22T12:27:44.953176Z","last_seen":"2026-03-15T19:21:04.89382Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/index.656c9ff5.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a7b2b119e15cbce9aa9d51df1627b75","sha1":"70b93d97f22946970172466a9e642f8bf8c7b4f2","sha256":"835f3a12f93b739926f75814f676cca7a530eb64d4739791a493947a06be7b47","sha512":"1d0de34f808506d5bcf7f8935e952f7175ac8169a1f531a1c78b0d33f406cbaae0bb46e8dfd33b872137030d851150cbffadcc47b3854196a18354bceae66885","ssdeep":"12288:7cwjGABdiho34A6t79oKZaJDFVm84WwQsAoNGGRoswdYoI9YBcmA66lmtB/fzw7T:7cG+9ozDFVm8G6ohB","tlshash":"94257d3ab08a34aa5f27892451de3e08617dbd23a101d8ccf3d96d598fd678e5313f29","size":1028703,"data":"","first_seen":"2026-02-01T15:38:51.348013Z","last_seen":"2026-02-01T15:38:51.348013Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/urlConfig.js?v=1.0.1","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9bcb9168ae89fe5cd5dd5611a2530d5","sha1":"f498ec5d355f300953c777ac7d4aa9d1dd676ceb","sha256":"468323889b195c854ed9ec0937c7125766a52a311ff0c1267d4d9f60471d9b43","sha512":"4e1a3e78656cdb47df34f9590f701938c5a99b32e023d5b29ffcc931ba96ba3c78bb4c030626aca0da333ccc5d47e4b0c9f9433a58851bc29b017c13dbb676f0","ssdeep":"","tlshash":"65e030f3474c9003d71105c54847aa1c919b56985fc4c226c888f0238c2e8ab64d7759","size":436,"data":"","first_seen":"2026-02-01T15:38:51.347101Z","last_seen":"2026-05-06T21:23:38.730687Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"26eb6dc9b0b58ef86771d385449fffe1","sha1":"ad8b39e75996f6096f716d15645c6ac2e239aebf","sha256":"e1e4fc67982e3d0b7e87f3eddce51251a49d8ba67e6a8c990da8d3a3229f74f8","sha512":"cce7fdebfe2c9f1ba69a1dcdff3d4e006842fc8b2291ca66bd3230f7e446f0513a03e4872368c16df87c1f450b511fe1acefa38b5612985d8a3a767110d33188","ssdeep":"","tlshash":"e821eba3972f2119d222341d2d7db28c787e8070a6121c667dfcad0da5c8a47023b7ae","size":1198,"data":"","first_seen":"2025-12-22T12:27:44.955045Z","last_seen":"2026-03-15T19:21:04.959483Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/chunk-vendors.34d6b234.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e8cb3e96a3f5744c255fd4159d4c85","sha1":"992c7319733e40ec6c415332ad2693c5d6052348","sha256":"d16088f9201a6156dec54d49fd729df0b6c039abba8478d924ae8a6fe65f6d73","sha512":"d00c68c533cf245ae8725970c23d449889b68e27b9b32b590f3a20ac8d21606d5c71b7cddee55a94c37112f32c766cc749bfc266bda59e6494a8d810248e1dcf","ssdeep":"6144:iQYZLefzJ0vUWu7xo3JFmYqvQGEyPPOAsdjIbvg:mkzJ0MWuIFuYGEk9sd5","tlshash":"63e41a8db292b0b60be760b1103f120bb23b6958780a9498f675e4e46d7cd8e5177f7c","size":675581,"data":"","first_seen":"2025-11-21T19:21:14.102956Z","last_seen":"2026-05-04T17:33:35.282533Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/pages-jogos-index.391be8b6.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e46aa0ab211215c370e8ca76e59fa4db","sha1":"34a7053a59fc162143c01264071a61198484ac5f","sha256":"de91d0eb3a06f746853ebb5a8430c1af1669faf7ba61c3cd689f55986913a865","sha512":"e3d23816ce7715b30a7d2f53958c24fc61bcfbb060ac8e0bbec42f33b5cc2319e6125a3d5ce8d644f6b68f7baa0a6c5c49947df5e2489710001ec4cfa97fbcf5","ssdeep":"768:+LXu2o135SOpVvRBGZuGqqj6PJW0zm7vBG1WtjLkSLggL4FZB2mLqB2CqoF01kD2:7S+VXteACLF7ssPRC0Ra/aqauN","tlshash":"c6631839a987f41e8d73d421206b1d2848247e23e061d58df7b9dce48ce969e273b79c","size":72074,"data":"","first_seen":"2026-02-01T15:38:51.338205Z","last_seen":"2026-02-01T15:38:51.338205Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/urlConfig.js?v=1.0.1","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9bcb9168ae89fe5cd5dd5611a2530d5","sha1":"f498ec5d355f300953c777ac7d4aa9d1dd676ceb","sha256":"468323889b195c854ed9ec0937c7125766a52a311ff0c1267d4d9f60471d9b43","sha512":"4e1a3e78656cdb47df34f9590f701938c5a99b32e023d5b29ffcc931ba96ba3c78bb4c030626aca0da333ccc5d47e4b0c9f9433a58851bc29b017c13dbb676f0","ssdeep":"","tlshash":"65e030f3474c9003d71105c54847aa1c919b56985fc4c226c888f0238c2e8ab64d7759","size":436,"data":"","first_seen":"2026-02-01T15:38:51.347101Z","last_seen":"2026-05-06T21:23:38.730687Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/chunk-vendors.34d6b234.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e8cb3e96a3f5744c255fd4159d4c85","sha1":"992c7319733e40ec6c415332ad2693c5d6052348","sha256":"d16088f9201a6156dec54d49fd729df0b6c039abba8478d924ae8a6fe65f6d73","sha512":"d00c68c533cf245ae8725970c23d449889b68e27b9b32b590f3a20ac8d21606d5c71b7cddee55a94c37112f32c766cc749bfc266bda59e6494a8d810248e1dcf","ssdeep":"6144:iQYZLefzJ0vUWu7xo3JFmYqvQGEyPPOAsdjIbvg:mkzJ0MWuIFuYGEk9sd5","tlshash":"63e41a8db292b0b60be760b1103f120bb23b6958780a9498f675e4e46d7cd8e5177f7c","size":675581,"data":"","first_seen":"2025-11-21T19:21:14.102956Z","last_seen":"2026-05-04T17:33:35.282533Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"da8510e7860fe429fe56e136e8f78b7b","sha1":"a23e317f3b0acca754efc4eb4c3dbd26b479ccc4","sha256":"19b2f2c70d933a7d96aced3e0526c38cc9e280add073c9fb7227eb2f7eebcfe9","sha512":"2eaf62ae7b22e8b5f7f37602f4b3bac2725c23c377900f0c9780b50fe692a27d9b9490a8ff9be1508b80954cc035bc386fe1fc3a9462e449dc6a7aad57853334","ssdeep":"","tlshash":"fbe0cd7301132014de33f6542d789a4dc497d495c34e51396adf355fc1ce14114f63e2","size":304,"data":"","first_seen":"2025-12-22T12:27:44.956433Z","last_seen":"2026-03-15T19:21:04.962327Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/pages-jogos-index.391be8b6.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:24.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/js/pages-jogos-index.391be8b6.js HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-119fe\"\r\nexpires: Mon, 02 Feb 2026 03:38:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=By19fqGbIFAOxUksuRa0CiUfSQjyPBHjK6O1%2FDYFpZZco0lzHMUPdCCKffsIXNWDAUllOCm8KzGW2zYtP%2FESNmupT7m7dFqQJ%2FyxDNVMRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72891ff83e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72190,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65019), with no line terminators","md5":"e46aa0ab211215c370e8ca76e59fa4db","sha1":"34a7053a59fc162143c01264071a61198484ac5f","sha256":"de91d0eb3a06f746853ebb5a8430c1af1669faf7ba61c3cd689f55986913a865","sha512":"e3d23816ce7715b30a7d2f53958c24fc61bcfbb060ac8e0bbec42f33b5cc2319e6125a3d5ce8d644f6b68f7baa0a6c5c49947df5e2489710001ec4cfa97fbcf5","ssdeep":"768:+LXu2o135SOpVvRBGZuGqqj6PJW0zm7vBG1WtjLkSLggL4FZB2mLqB2CqoF01kD2:7S+VXteACLF7ssPRC0Ra/aqauN","tlshash":"c6631839a987f41e8d73d421206b1d2848247e23e061d58df7b9dce48ce969e273b79c","first_seen":"2026-02-01T15:38:51.338205Z","last_seen":"2026-02-01T15:38:51.338205Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1492,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1488,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/invite.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/invite.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-34e8d\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vOHW0bhdwBg0bE79PibO1lOOHkfWDBqEpmLKOz2l1nPmykgx9QdawbkNIPXsGGWr4QzsiWMgjPkCEp9XTV%2FjAAZGgXKmVN4%2BJeO0%2F8%2BxYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cda78783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 935 x 309, 8-bit/color RGBA, non-interlaced","md5":"cfa662c2e8e56ff9b26c9608ff2907d9","sha1":"8c2bbbfffbac4c833f0a3e39b489469093d99532","sha256":"599f4d8ba057451971b21f88ded24d0db5534167eaa3964ade0c64f6b9314283","sha512":"2debbf30dc52f6629beb90bca0f07e7de8368bb480f5b52dd5effbee1062a72ba92fd02e35b3abfa6103f59aff204e3e2a15941054d82c36efc6b6fc6afb6883","ssdeep":"6144:SRJxzPzzgG4Mb0148MISYkH3IGUG56rSHXVfGuH00xan:iJxjzz/0148cYkH3IGUG56rUXBG1v","tlshash":"8124122a56b237159bc30b31da36a9cad5d4e124a9ff4ec21112ad1d3ed3bcd4372329","first_seen":"2025-11-16T04:42:15.30519Z","last_seen":"2026-03-15T19:21:04.920462Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1475,"receive":2627,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/theme0201/logo.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/theme0201/logo.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-8738\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LfoPlqpNL9oic5qt3KNlg5hk%2Bb4DhXbyD2iybQ5giI304hl29kzwNLBhbTy%2BUEO45UzaxbndTLFKjU6W%2BLzc1CHMaEF6lG9BoVdJoqwINg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cfa8b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34616,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 100, 8-bit/color RGBA, non-interlaced","md5":"9966c5d6501a1c81dd5c89e4095a95f7","sha1":"227da2c4af6189cb18b1cb68f88e9aae6e4d6c39","sha256":"2515424def930dde5585c08106b139e57aec5d0c0499ec23bf6b8bbb4fa0badc","sha512":"1daf1264984091e957331814da7a928357a14aea525bc57b0872afa050fd39f478e78d2db02e1bfbc713eb0cc510b55911786e012e588d45d450555c651a5d6b","ssdeep":"768:u0kag4xDbvBpvDkchpg/ZkFrje5S9O8Z8Ag3:usg4tbJZThpuZ0jFvxg3","tlshash":"d0f2f13b57692cbb724d157f81640830cbcaae8b083f2614da78d449df7cb99429aa47","first_seen":"2026-02-01T15:38:51.340124Z","last_seen":"2026-02-01T15:38:51.340124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogprimrod.dormirpg.vip/siteadmin/upload/img/2009105907583733761.avif","fqdn":"ogprimrod.dormirpg.vip","domain":"dormirpg.vip","tld":"vip"},"ip":{"addr":"43.159.94.240","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogprimrod.dormirpg.vip","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:58:62:B7:74:89:26:C0:92:DD:91:0C:95:1C:9F:04:B8:50:7D:50","sha256":"ED:24:AC:27:5D:3A:33:5A:9C:60:88:51:D3:E3:0C:96:7F:05:16:69:03:B1:D9:31:58:95:EF:4A:EB:6B:E4:5C"}}},"request":{"raw":"GET /siteadmin/upload/img/2009105907583733761.avif HTTP/1.1\r\nHost: ogprimrod.dormirpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 08 Jan 2026 03:32:38 GMT\r\netag: \"c262a93ca6b2eb87f2a3fa7080fa8e1d\"\r\nx-amz-id-2: B9HnhQQvhZXneDWCLscvwaoKB+vsR9PWi4MB4ItKlKJJS7S1vCRXlqgx+AF4uXAK6yScJduLgmY=\r\nx-amz-request-id: H4ME3SP59R697J7D\r\nx-amz-server-side-encryption: AES256\r\ncontent-type: image/avif\r\nserver: AmazonS3\r\ncache-control: public, immutable, max-age=86400, stale-while-revalidate=86400\r\ncontent-length: 78018\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains;preload\r\ndate: Sun, 01 Feb 2026 15:38:26 GMT\r\nage: 58470\r\neo-log-uuid: 12904700523663007092\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":78018,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c262a93ca6b2eb87f2a3fa7080fa8e1d","sha1":"bff087a3c3178fea03f7baf8b42fedb76c2c9664","sha256":"e063cd7a46911f96178906d5c42f83be1e4a03c1bc617f273e62be8323aed207","sha512":"81985c4974ea73dde148a3e9433ba2e2ac8908c069fa1fc6f8b57d3ab05f98060313642ae501b3cd8e5a704fc35678f861e054b4b7190388e5c5891dc9aa491d","ssdeep":"1536:34KwTbs2IClTUSUrqSbIzcWOhLvRhVWM+0bzNudeg+dtDRsrUnbstwO74:34KwvsLTSU7ElsvgrI0dCdlRFC74","tlshash":"2f731291c4ebc37ee41e192ef93e41e53b6386b70389d52816d872190f6c8fb2b31645","first_seen":"2026-02-01T15:38:51.341102Z","last_seen":"2026-02-01T15:38:51.341102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":99,"dns":43,"connect":21,"send":0,"wait":73,"receive":9,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/img/1.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/img/1.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-35d4\"\r\nexpires: Tue, 03 Mar 2026 15:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ieDwDlzcaTopiQh8kTvZGs7aJxkerF3ocypZ6fTKP4DRIKy7P3U0EKrED9Ji8cFwYzajOsharLzS8vYhjAcBcoIFcfZixc%2FeNLZ5ja12dw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892aba16783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 110, 8-bit/color RGBA, non-interlaced","md5":"1314aaed187d61ff9c8efd39f909656b","sha1":"dca1596499df47c979523bfcc71daf10de0d5338","sha256":"7b3acfc68571c1d31152c1dc196b83b2fa261471aa26b89b8f91e78d332e99f3","sha512":"a8e75ef2fe5ce4bde0170f7faddf0f9617092dc2410fd8bfef67d832fa9b884dff765346c18192c74767d3d83e3743c022e04c4ac2b1c14b458a5dfe8ceb135b","ssdeep":"384:T0wDU16IDDsNSeGOCoB8XU0nbqECpjmi2CMb+d:TUrDofnVYU0+k+","tlshash":"3b52c0cc15c621440128922d2def9537c835e90d698e9e48d62fd16d8f71bb138faa9a","first_seen":"2025-09-30T05:56:39.879744Z","last_seen":"2026-07-04T06:45:01.580604Z","times_seen":11,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:21.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:24 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=436uBhQf%2F5Uo4EVSuV8zmW8VZZQpyB0nj6wNiEQ7dl6YQztZU7GCHXBdaI8rzQOgBizb8Y%2F6sJ95UEf79hXgiMlugQlWRiPbIpEcSZyeMQ%3D%3D\"}]}\r\ncf-ray: 9c72890bcd11783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5327,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3453)","md5":"0b8e29c477ea5849707a4357b59c9e72","sha1":"04652bf24f00e9abe4bba917f6f5e19339559189","sha256":"edb52af131936c4510778923570493dd9fa55d1ad6f818cf90e583fce740b087","sha512":"2c5740b55b04153b4d217b4fcccf18052d0f9ce413e36a50d01f07e986dea596f5ba4bcd935491ecf0c9c070c254b0cbe7b69ea6d5995e07425c5e81d1837507","ssdeep":"96:zGAJAm2y4H2y4G2y4dWwW3WCduIf6b+9xjE7Ju:6AJz8xu9Qrf6bixgJu","tlshash":"63b173d24b985d0d8232517327a7e4078f3c50b674158c81fce83a9e62ddfcda572765","first_seen":"2026-02-01T15:38:51.343197Z","last_seen":"2026-02-01T15:38:51.343197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2740,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2740,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/chunk-vendors.34d6b234.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:24.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/js/chunk-vendors.34d6b234.js HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-a4efd\"\r\nexpires: Mon, 02 Feb 2026 03:38:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0o%2Ba6NklzuI%2BiCgsdty7EvbEa%2B87zAqWGQoaP9lp8WnOl%2B4mXkSHFQlhHrrkU5zGXJU5%2FbAF0B8Siu7d03RWl3Uj0ZIXhNKJ1yrd4ibY9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72891cffc7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":675581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"25e8cb3e96a3f5744c255fd4159d4c85","sha1":"992c7319733e40ec6c415332ad2693c5d6052348","sha256":"d16088f9201a6156dec54d49fd729df0b6c039abba8478d924ae8a6fe65f6d73","sha512":"d00c68c533cf245ae8725970c23d449889b68e27b9b32b590f3a20ac8d21606d5c71b7cddee55a94c37112f32c766cc749bfc266bda59e6494a8d810248e1dcf","ssdeep":"6144:iQYZLefzJ0vUWu7xo3JFmYqvQGEyPPOAsdjIbvg:mkzJ0MWuIFuYGEk9sd5","tlshash":"63e41a8db292b0b60be760b1103f120bb23b6958780a9498f675e4e46d7cd8e5177f7c","first_seen":"2025-11-21T19:21:14.102956Z","last_seen":"2026-05-04T17:33:35.282533Z","times_seen":45,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/img/4.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/img/4.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-4684\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xiyoEcdWRtT1GLBvBnWrJnSzVQq7tJ9%2FyJpPeaYst7a4Lziq230K4YhtDA9hnpSiFnBazeNsBimuenENITJpALd1zOW57sNu0qDDeSdmPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892aca1d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 110, 8-bit/color RGBA, non-interlaced","md5":"dfdee72ef7590bce2aaf635ef872fe11","sha1":"eb1de1bea9a889b618a5a4e35a5eedb40fd1774c","sha256":"684e9a0da97445a41982a3667dfd8a5c1cf3a348aacfed250c966b7d5635ea83","sha512":"0fc9a7a541d077debed0c216a49dddf1e6a00e4a71552db6ba6d92e066f24bc1904987a1fc93acb33ece012f848390afba6e6a1c4a112a473f44cccea805da28","ssdeep":"384:T0wDTilQrRfzXslhVPMjdROO1OvKUuqbHAwzBHiLl3PhgB/0P+ud:T8lQ9fzGfMjdTQKURAEiLl3P6Bc7","tlshash":"9982e104a9528f57624a2bf74f53fa02621f9f6b5b222578b791c0e5e13c8c0b4f6cd2","first_seen":"2025-09-30T05:56:39.859103Z","last_seen":"2026-07-04T06:45:01.532504Z","times_seen":11,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":954,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/theme0201/img_game_tj1_1.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:29.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/theme0201/img_game_tj1_1.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-1b64\"\r\nexpires: Tue, 03 Mar 2026 15:38:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLXN3TvAAr%2FKYcHGg8ic1cuaYKD3tQH8J%2FC%2B7JwLJgtUOLmQIjv%2Fljgu%2BXkIYVF%2FXY70owNvkrTr4nvgnTTOWXx41Y%2FNi%2FxZngw1Fjf7ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72893fedff783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7012,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 143 x 116, 8-bit/color RGBA, non-interlaced","md5":"08b8d4538666dc36dd49fbb73c7b32d5","sha1":"46f43ed248931cbf2509e029ff2469ba8334e3dc","sha256":"eacbdf46009b24684a89d48be92890aff72c19380ab1c89f549674c7ba26ac1a","sha512":"fdae82c8a538a07905f5302b5241c692c5d50a60713047fb7f8b04f3872f00038eda2a6aa770d58433beaafdd24c27642b36f18418761299b724e592a15cb2f8","ssdeep":"96:KSnZscGeCPTEpwMqJM8/aYO9nkJ3IjslN2NDuANUidiS6RkGGJbYZcSURHtsODzK:R2cnOTE6Mq2YOyLviN4kzJYZcjNuODzK","tlshash":"59e1aea64d6b0917c65ff334cac8a6a70def3c04214dce3d969cffaa80a505a8172053","first_seen":"2026-02-01T15:38:51.346107Z","last_seen":"2026-05-08T12:25:31.961998Z","times_seen":3,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/urlConfig.js?v=1.0.1","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:24.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/urlConfig.js?v=1.0.1 HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:24 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 03:38:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 4\r\ncf-cache-status: HIT\r\netag: W/\"697ec985-1b4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0mR4mQ8qN%2BwFF5z6%2Fl%2FkvtzNz3cOyKdR9qNAA%2FkzIDD28ynzJvb%2Brm%2Flfogy30ju4CQ63lQz%2FdGl6SW9gzXVtFa6S96HUzox0MD%2FyItdKg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c72891cffc4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":436,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (436), with no line terminators","md5":"d9bcb9168ae89fe5cd5dd5611a2530d5","sha1":"f498ec5d355f300953c777ac7d4aa9d1dd676ceb","sha256":"468323889b195c854ed9ec0937c7125766a52a311ff0c1267d4d9f60471d9b43","sha512":"4e1a3e78656cdb47df34f9590f701938c5a99b32e023d5b29ffcc931ba96ba3c78bb4c030626aca0da333ccc5d47e4b0c9f9433a58851bc29b017c13dbb676f0","ssdeep":"","tlshash":"65e030f3474c9003d71105c54847aa1c919b56985fc4c226c888f0238c2e8ab64d7759","first_seen":"2026-02-01T15:38:51.347101Z","last_seen":"2026-05-06T21:23:38.730687Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/index.656c9ff5.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:24.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/js/index.656c9ff5.js HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-fb25f\"\r\nexpires: Mon, 02 Feb 2026 03:38:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hR1StdP5Xqz6VqGjJEpe9xYt7JA3zM2IH6oWHgbMKyyHHz4FAvoRs%2Fr2oGhDG7k58mWBnRW3WeEbqhjtyGLgA%2FQbKlqrVV5cieabX6aJKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72891cffc8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1028703,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65016), with no line terminators","md5":"8a7b2b119e15cbce9aa9d51df1627b75","sha1":"70b93d97f22946970172466a9e642f8bf8c7b4f2","sha256":"835f3a12f93b739926f75814f676cca7a530eb64d4739791a493947a06be7b47","sha512":"1d0de34f808506d5bcf7f8935e952f7175ac8169a1f531a1c78b0d33f406cbaae0bb46e8dfd33b872137030d851150cbffadcc47b3854196a18354bceae66885","ssdeep":"12288:7cwjGABdiho34A6t79oKZaJDFVm84WwQsAoNGGRoswdYoI9YBcmA66lmtB/fzw7T:7cG+9ozDFVm8G6ohB","tlshash":"94257d3ab08a34aa5f27892451de3e08617dbd23a101d8ccf3d96d598fd678e5313f29","first_seen":"2026-02-01T15:38:51.348013Z","last_seen":"2026-02-01T15:38:51.348013Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/theme0201/bg_pattern_tile.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/theme0201/bg_pattern_tile.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 861\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\netag: \"697ec985-35d\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyYGMfmK%2BxyC7upeK63JGAhrhEzzaOjDnWokSWkmKTvTq8F5gCzWLs2LmBlED%2BQ5eDXAVog9b0yCc2uUHISU7yirXQv6tMlYtrO6nwdZdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c72892cda75783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":861,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"dbbc7b57906b454d3330c9fb7940d3a3","sha1":"ff67982f240565af232fc0efcae303a5df3b6136","sha256":"21ce948a52bc322850af6db91df262d16ab3f9bb31899df554da6ef382cc2123","sha512":"adf234e30f144212df54282c1f05a0674a6b35cc1a939dfe3b27f16277fd86146dd338122d7e9054eeccf5a7a0f2f43c6edcf1d7135c3905487293fa2f643830","ssdeep":"","tlshash":"3d115248139e8ffecbb1180fa9ea18f2fe647a686468135ff45d549e4b94dc316701c0","first_seen":"2025-11-16T04:42:15.278384Z","last_seen":"2026-07-08T03:58:54.872148Z","times_seen":6,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/2085.23f2b6e0.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:24.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/js/2085.23f2b6e0.js HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-3634\"\r\nexpires: Mon, 02 Feb 2026 03:38:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Uxq9obyEz4uIAWcylVdTmuMdejr7rvKexmBKizrh1Jjh%2Fn3kg%2BAV01fUF8gru2C5zIOCtBuuGTekn615mejbDLL6WsAPEdLnSV0vvMkMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72891ff83a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13876,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13440), with no line terminators","md5":"9d633ccc9fbef5d7decd3a5e9d0e6107","sha1":"40487539cbc0fdad925a8b064f082aa222ad3843","sha256":"f17aa83d4aa587f64d82fa82ba10343f8219d9f2ebdd23c2ef3393729618dfbd","sha512":"a8cc5ae3acbb035fc2731da1883ceb6eee0970a775c776cc3fec12425a1af00bad0daf3e4cb7bca03fe304235a319ad359f0183d52f3eb34a590d05d7c0c5677","ssdeep":"192:mR00m4JNXLzlNxV2OV/mfA+J5Vqu2psisWZBjRCiTUlAEPmak+Qkg:mxLzlNxV2OV/mfBzVqu2VZBjREPmPkg","tlshash":"e852d81eb0cfba070bd34824459b4045716b390d4838e7a4f777aabd4afb68a0729f5c","first_seen":"2025-12-22T12:27:44.953176Z","last_seen":"2026-03-15T19:21:04.89382Z","times_seen":4,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T15:38:18.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:38:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1P37%2FowaV%2Bm9H1%2BbxxIdJpURma4sw3tsv56QfrxxUNz3Ijc17%2Ft3KT7WrZkpNWse3Bv%2BTTU01Ctj5BzZZ55nkKaWdu%2Bf3wAZex%2BsiGw%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c7288f9a9f5b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5327,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3453)","md5":"0b8e29c477ea5849707a4357b59c9e72","sha1":"04652bf24f00e9abe4bba917f6f5e19339559189","sha256":"edb52af131936c4510778923570493dd9fa55d1ad6f818cf90e583fce740b087","sha512":"2c5740b55b04153b4d217b4fcccf18052d0f9ce413e36a50d01f07e986dea596f5ba4bcd935491ecf0c9c070c254b0cbe7b69ea6d5995e07425c5e81d1837507","ssdeep":"96:zGAJAm2y4H2y4G2y4dWwW3WCduIf6b+9xjE7Ju:6AJz8xu9Qrf6bixgJu","tlshash":"63b173d24b985d0d8232517327a7e4078f3c50b674158c81fce83a9e62ddfcda572765","first_seen":"2026-02-01T15:38:51.343197Z","last_seen":"2026-02-01T15:38:51.343197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":702,"timings":{"blocked":40,"dns":27,"connect":1,"send":0,"wait":617,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/theme0625/icon_dt_1xx_wd.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/theme0625/icon_dt_1xx_wd.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-f47\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQi8qnti8%2BFnzzH%2FMCFRZ7Lyvr0tIo4%2BLdUFbsbWjLKjHeLSvWzFMq8pyoZyFUwoq2kihyZvddy7YMU0GI8hvVkL%2FVKY6no7J7TtxHurKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cea7a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 70, 8-bit/color RGBA, non-interlaced","md5":"ea2b4ae1b28ca3212ea4b24c60a6743f","sha1":"03fb4667a3163d1561158be2be50c7bc33b79ca2","sha256":"2556fd964725a4136e8580ec0787c931a5306c539542071177ad99c4eef6696d","sha512":"f271ebacf6a5674f0f327725cbbaa0ea0d52a22e319732241c69e5d9634ef594071db4b6a93e8d456f48252245dae21c1189eded1f5a17e58d9f9d021990f9c3","ssdeep":"","tlshash":"c9817d6821547ec8a9f095830fb93908d892048f185373592cecf3f7ddbd69c05251fa","first_seen":"2025-11-16T04:42:15.331252Z","last_seen":"2026-03-15T19:21:04.95333Z","times_seen":5,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/theme0527/icon_btm_zc.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/theme0527/icon_btm_zc.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-13d0\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3XvgC3nP3v%2F3Erbc1cKJca3EZmW7hbuqgf%2F09zS4xr81HUdQVMwO8m40YQlQjmxp%2FwjUQTEGRbSYGPvsCm18oL4EROkLrG3kFfboBeXKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cfa8a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5072,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"dc8f0910f6766fe5e59c1443c2ecf897","sha1":"3f8287d1bdd87584229e3d866c6361f41dd32c11","sha256":"5f0b0c520263d073b3360305e75da3ad604ab0daa403f6224a70612d9749c451","sha512":"8b5026bb882f06856d50f76959dbb3e68961d3baad8cd3c022e9ea1146c8c9d5c528643642c95bad7d6226fda2daa9971c20e8d0e99d775ab49bec6c295c4205","ssdeep":"96:kPfEKrLcriahekHiEBvSGpYkdVatR159TKJ4FeNZY5aZ1bdEY9xNdFI:kPfqhnvx/aHZTm4FKDZ/xQ","tlshash":"21a18cd2ade77cbd306ca06b621a82b694bfc0981379f61c6cae7411b2909ae403d705","first_seen":"2025-11-16T04:42:15.294136Z","last_seen":"2026-03-15T19:21:04.926272Z","times_seen":5,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/theme0201/top-2.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:30.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/theme0201/top-2.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-370b1\"\r\nexpires: Tue, 03 Mar 2026 15:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RocqUVwunXu%2F9p2kLbKKKlSX5mAA%2FaBSpEe91j5nrlW3VC7y4MqmjOG3qcS5ijYK3q9Wfhl4p5CV1lMmEjkS8iGFN5tW%2B%2Bmfz%2Bq7vSM%2F9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c728944fead783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225457,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"c79033cf08fbe038b34ac9c47813ac39","sha1":"f85329a345b0b37c97b23506d2905c9996d899c7","sha256":"446a0aabbababfc2f1ca542d025b108483ed8ec22c9736c0556c56386876ab42","sha512":"184ea2a2dbfa4a948bfdcede31a0183b6f0bbc52e1573fbe571e16ea171dea4168cd87304bf738f9f4937198bc91a001658259fb4b4e392dbc5a60e66c56c65d","ssdeep":"6144:q+JsTX0ecek13n3WFgD9wKU36oedyqQH5g9CINSLnjlYN:q+8XLggM91ndy9ZGSnjyN","tlshash":"5024237ad2dd04e68723a63867a8bc3ac51c3a9109356381e5b177d1d97d28b0c36ff2","first_seen":"2026-02-01T15:38:51.353002Z","last_seen":"2026-02-01T15:38:51.353002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6027,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4560,"receive":1467,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api2.bxapi.cc/api/index/huishoumoney","fqdn":"api2.bxapi.cc","domain":"bxapi.cc","tld":"cc"},"ip":{"addr":"104.21.68.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bxapi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:55:16 GMT","end":"Mon, 27 Apr 2026 13:52:58 GMT"},"fingerprint":{"sha1":"3E:80:65:39:91:61:55:EA:54:52:BF:BE:41:98:72:46:46:EA:2E:4C","sha256":"43:C6:BA:33:37:19:FC:35:2E:CD:04:17:C8:67:71:46:98:75:29:9D:C0:74:01:D3:5B:62:06:CA:79:4F:4D:49"}}},"request":{"raw":"OPTIONS /api/index/huishoumoney HTTP/1.1\r\nHost: api2.bxapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dy-dormirpg.win/\r\nOrigin: https://dy-dormirpg.win\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://dy-dormirpg.win\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k3vPChDfdHEWvfXKyCp06h63c3g5INS4uYVBYeVtlUY%2FQn4lBuY3%2FkoBfIvhqJZRaDaGO%2BPye1a1qL3Nza%2BLgI5FRvJUfvaHebmRhrU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c72892a0ffb32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:57:34.772395Z","times_seen":17845104,"resource_available":true,"data":null}},"time_used":1529,"timings":{"blocked":60,"dns":15,"connect":5,"send":0,"wait":1406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogprimrod.dormirpg.vip/siteadmin/upload/img/2009107074038075394.avif","fqdn":"ogprimrod.dormirpg.vip","domain":"dormirpg.vip","tld":"vip"},"ip":{"addr":"43.159.94.240","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogprimrod.dormirpg.vip","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:58:62:B7:74:89:26:C0:92:DD:91:0C:95:1C:9F:04:B8:50:7D:50","sha256":"ED:24:AC:27:5D:3A:33:5A:9C:60:88:51:D3:E3:0C:96:7F:05:16:69:03:B1:D9:31:58:95:EF:4A:EB:6B:E4:5C"}}},"request":{"raw":"GET /siteadmin/upload/img/2009107074038075394.avif HTTP/1.1\r\nHost: ogprimrod.dormirpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 08 Jan 2026 03:37:13 GMT\r\netag: \"62aaa70f6b9667091adf3ddd41ec5064\"\r\nx-amz-id-2: 8rwJVvfaj+AVw8XthMLU5C3YoqhIc8l3hJOtggxuKMfvA3U+0NB25I7kRm+wgJzP4YfD5M3w5rQ=\r\nx-amz-request-id: 1XKKDSFEFDK1G6HC\r\nx-amz-server-side-encryption: AES256\r\ncontent-type: image/avif\r\nserver: AmazonS3\r\ncache-control: public, immutable, max-age=86400, stale-while-revalidate=86400\r\ncontent-length: 95339\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains;preload\r\ndate: Sun, 01 Feb 2026 15:38:26 GMT\r\nage: 59385\r\neo-log-uuid: 3403590054058969103\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":95339,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"62aaa70f6b9667091adf3ddd41ec5064","sha1":"39e6593d8e0fd2b4bed146a0af5a839e96add4d9","sha256":"2df3541ec89d7f88dcb3e347c0c8fc48c8db1fab62d5294c0093b8f818d7d013","sha512":"0a77966bd0bb1cde5d2e0c26ed310bc8599a958e81ba24ef5163cc6764706f541ffd09015c78792c7cbd7154ec0d4d6026064d7a3c7fb14de118b7522f00d03e","ssdeep":"1536:/DiH1rYpjjFFhbQPCVATWR6MgJ/1L047Hdep9jq5d4t4zAm6UGnzLvJA691pgIKU:c5YpjBFV6TW4rJt047g9jq5YmTGnzGu1","tlshash":"fa93128f95bd0fb6407f6d37383c046672a7bc866a0ada21ff5789003c2190969975b3","first_seen":"2026-02-01T15:38:51.354324Z","last_seen":"2026-02-01T15:38:51.354324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":93,"dns":47,"connect":19,"send":0,"wait":66,"receive":10,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogprimrod.dormirpg.vip/siteadmin/upload/img/2009105480834183170.avif","fqdn":"ogprimrod.dormirpg.vip","domain":"dormirpg.vip","tld":"vip"},"ip":{"addr":"43.159.94.240","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogprimrod.dormirpg.vip","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:58:62:B7:74:89:26:C0:92:DD:91:0C:95:1C:9F:04:B8:50:7D:50","sha256":"ED:24:AC:27:5D:3A:33:5A:9C:60:88:51:D3:E3:0C:96:7F:05:16:69:03:B1:D9:31:58:95:EF:4A:EB:6B:E4:5C"}}},"request":{"raw":"GET /siteadmin/upload/img/2009105480834183170.avif HTTP/1.1\r\nHost: ogprimrod.dormirpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 08 Jan 2026 03:30:57 GMT\r\netag: \"6587b5b4269a882e13a30d3116d5d34f\"\r\nx-amz-id-2: SgZ9WLE1oOG2zepmHpHn9bwtEWiObCWOeplLULVeSiJ2ih4A8MErj+QSY8HjcdXRlq/V9/maV2orUmkyfJPXBMe9Ib+Cljo6\r\nx-amz-request-id: RCPBSKRJPVPZE9KT\r\nx-amz-server-side-encryption: AES256\r\ncontent-type: image/avif\r\nserver: AmazonS3\r\ncache-control: public, immutable, max-age=86400, stale-while-revalidate=86400\r\ncontent-length: 69953\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains;preload\r\ndate: Sun, 01 Feb 2026 15:38:26 GMT\r\nage: 55037\r\neo-log-uuid: 2834735777219947409\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":69953,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6587b5b4269a882e13a30d3116d5d34f","sha1":"63d546ec2dcc47a6cf4048a1d4373a6ffd5d1b07","sha256":"c6dc182ed8ea928df70a9cc78d783b64cd3bfe4c8bc90c9b48733fec5ccfdc27","sha512":"63cb7562219e65245fc4bfc2684095e86b8cfee3482d9d3821e35751e90b8b022e2ae8b43de8463d6cfaec8ddd013bceb89d0d6d122db05ca4923e67f7963489","ssdeep":"1536:q0R9EBptpKxa8hLW8Cix61Trz7UAuEy1HbqdO5:LSClWZixWnzAFWdO5","tlshash":"346302b866f41c05c2d1e1f4a953bb129baa87268ff5d43122b354246dd385e4ec0bf7","first_seen":"2026-02-01T15:38:51.355174Z","last_seen":"2026-02-01T15:38:51.355174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":96,"dns":40,"connect":22,"send":0,"wait":82,"receive":4,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/img/5.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/img/5.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-3d07\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECEMrOZna2HEymUsYgDFJBBOQS7mOauEWIGaJQszfD0qzpBm0hlIPz1iUXjvsG0GePCx4af2azdl2f7719X3Uy7JGoX1fxAAHv6iZ00dmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892aca1e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 110, 8-bit/color RGBA, non-interlaced","md5":"448a712101c18b3bb763f546cdfb6e10","sha1":"cb2ddfeb9a6dd116174e5393ad424b4c1b0f796a","sha256":"b37a889c62ff37225c66ddd066180f7b7e71e4ddbbebea13509e98ee989114b1","sha512":"42b7f12c69bd4a015f1186ebe101daecb1be6a19cb4e47fe1fd002cc6ccb9a881fa30603dab259d7140f91b976bf79b33d0d616beade6569bb4de6bb2ee55364","ssdeep":"384:T0wDLiNAMLiMRXgnhFOsAqngm1BqLO85o+7M:TViNAMLJRXUF1xHPR+Y","tlshash":"2c62d1c0549243e521ca235f79a9dd892477429f1e8c2d0eec68860cbb30a9e2dd5bb3","first_seen":"2025-09-30T05:56:39.92817Z","last_seen":"2026-07-04T06:45:01.561625Z","times_seen":11,"resource_available":false,"data":null}},"time_used":951,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":951,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/img/6.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/img/6.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-41ff\"\r\nexpires: Tue, 03 Mar 2026 15:38:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDF%2BzYWSIfDARQ%2BQjANG7tfeNP3tkHU%2BvTfsDolIIFgWvyMjkkiOhmF6odUBS9%2BR2hdNA1XrOsMxBkNvtHs4gIYNyF%2BD2N2UlP85SdVFog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892ada21783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 110, 8-bit/color RGBA, non-interlaced","md5":"d34387e6633bde38d23e0a9d9099e741","sha1":"b9ad86cdade5607b015aa6d1e91b46609fb75b24","sha256":"a23637a6ec0fbbc0db44ac4172fd95fcaafb1ffbf558e405402085e427d45894","sha512":"b875f67b492d5e8d82f45e0201d44f34a9140603cd2456dd596c0b29e4bf2abdeb6c6d132ae00cb3cf6fe492fabb0a41bb7d3dff9101f4df4efc4ff0e4f9ca6a","ssdeep":"384:T0wDBZdmLAKPnwJFfVyYKrzjrAfF9b33xCz93U3M7ujHI7:T7ZdI1wrN3Kr3k/Rk93kMqHI7","tlshash":"5872d0ffc253200d282953bf2c1de9045a855fc589aa0b0cedbe617d562c9a12737bda","first_seen":"2025-09-30T05:56:40.001114Z","last_seen":"2026-07-04T06:45:01.52461Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/notice-bg.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/notice-bg.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-228c\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VV1cEuDkL%2F1M2eZvv2DxFiyF0i5C0vjVH6b8F74Ihz7tag09i4bx1IiAF2P%2B3LlgWYdTPPMDQreXuqrsXcxKeM5P01TjCoh7u3eAXxZHrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cda77783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1020 x 55, 8-bit/color RGBA, non-interlaced","md5":"f5a6292169ff9a663ac5568871ae2090","sha1":"d48f2cfbde486b996f6a6d1226794200b3d79674","sha256":"efa22c4659cb184ebf54cd4cf386676cc02f0434689c75a025ae8f366ffa115c","sha512":"f1055ec3ee97915d63ff6f8c2bc7d7bf4afa43da99c83e5780d44f4f725b484ae3d25991f5a7844472dd162a7659bd86f8bc726a0f48399f50a326077594005a","ssdeep":"192:6aZQIpO+IX2sv4REj63aRjaNVztDsYsnCaOlGlSz02cHPMdJEO+3W:zpO+82sv4REOksVztolCaOQLxvMdeO+G","tlshash":"b4029f272a9bfa1d51238535028df7e8f33c24f325babb0b946c250064aec15cd58764","first_seen":"2025-11-16T04:42:15.323022Z","last_seen":"2026-03-15T19:21:04.944455Z","times_seen":5,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api2.bxapi.cc/api/index/conts","fqdn":"api2.bxapi.cc","domain":"bxapi.cc","tld":"cc"},"ip":{"addr":"104.21.68.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:27.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bxapi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:55:16 GMT","end":"Mon, 27 Apr 2026 13:52:58 GMT"},"fingerprint":{"sha1":"3E:80:65:39:91:61:55:EA:54:52:BF:BE:41:98:72:46:46:EA:2E:4C","sha256":"43:C6:BA:33:37:19:FC:35:2E:CD:04:17:C8:67:71:46:98:75:29:9D:C0:74:01:D3:5B:62:06:CA:79:4F:4D:49"}}},"request":{"raw":"POST /api/index/conts HTTP/1.1\r\nHost: api2.bxapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 0\r\nOrigin: https://dy-dormirpg.win\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Content-Type, token, Authorization\r\naccess-control-allow-origin: https://dy-dormirpg.win\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Wee%2FDFecZdlt3D%2Bq%2FU0LNDaA34FwlT8zCWuhweH%2BZdKtmjwuX3Iu69I8zwGxZFiZ5dZOEbYzECsmg1Al5GEdXiarapEfEkqPGMPf4Q%3D\"}]}\r\ncf-ray: 9c7289333c1e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"936b8ec6d15295ecedf4f6a6b3d223b1","sha1":"a65c5e59a5f9aa03584f8cefb8c0723b391c6979","sha256":"002034b28c8b8478d92a4df71724bbf7a1717ec4e5a53879ba531c7ebfeaa90d","sha512":"3a164ed2fa06959bc151e1b8c2e559c72c5cb8be38639ace427a41498a26edd43fa837331b951c565cb7554e8c78652d97e082874752046450104fde61f7420f","ssdeep":"","tlshash":"d3b012351c491c0e1e1184c5470a80c4474538020102471084cd6778410c1a82140c36","first_seen":"2026-02-01T15:38:51.360017Z","last_seen":"2026-02-01T15:38:51.360017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:23.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 15:38:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 01 Feb 2026 16:08:24 GMT\r\ncache-control: max-age=1800\r\nset-cookie: __uni__uid=rBEQg2l/c3BpPbhDA4eIAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-11T21:09:27.876791Z","times_seen":20200,"resource_available":false,"data":null}},"time_used":2393,"timings":{"blocked":1046,"dns":1,"connect":551,"send":0,"wait":300,"receive":0,"ssl":492},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/tabbar/app-footer-bg1.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/tabbar/app-footer-bg1.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-2cc0\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yC2rVm7UEElwXfL4CGS1OoVEGclwsK4Z17YHb8Inu4iaoleDBF1MB7kTVgKlufi8PNDq%2FHUn4xwrqw5O4SDPqxmox4oEMqDEOAX0%2FPlMtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cda79783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11456,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"06d5d02a1ed9db2736e1135984254546","sha1":"10321d8d2d3bd47e76cd55cd8b078d0397cf389c","sha256":"9eaacbb83c0260b60c9aa5f6f7833b1e6edf439b31b966bbefe5261dd0a0c03b","sha512":"26a8ad418d97c5b19c1b699c4abb7000d390167bb7f8e152298fb3e4f980a7b7646f5c6ed2be3c154ad6bc72abae9d969c40912078ab63115870568b2d820969","ssdeep":"192:U40RTrR8lNLYm9DrY3V3XW2ormoxGfoRRubwvmR3UZCDbAANJUdfS:UvRn4qmrY3VnWl3cQRRqgcbRPU5S","tlshash":"1d32d023c7b843860f548d35e598352b6365ba5e13cfb2acf850f980f74152b3959f88","first_seen":"2025-11-16T04:42:15.271502Z","last_seen":"2026-03-15T19:21:04.88623Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/favoritos.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/favoritos.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-6538\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9%2FVqdj1XQFLTtkZkDSS%2BJLLH%2BOaE0iSpkL1JKf3q52zCcKrxHfxPw7r8Ua%2BXvP99s4LUHsCpIr4AMozgDbxIOY2swHdreGiCmdkr2JQEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cea86783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 490, 8-bit/color RGBA, non-interlaced","md5":"9cff029b5fc24d80303c527b1fee51cc","sha1":"604803d8938ae920114869b8b1c169499ae28ba2","sha256":"60e1aef838e0b9188ff834ac200adb9090b07b363e42b2cb23beac0aca247962","sha512":"29cbf3523ca2d470211878beb4ab8575c12c0b4620fc2ed3118423dc5f91d2b88682fbecf2711400594bf9c44260ea58f38c67c20714fa8caa13570ca15ec62d","ssdeep":"384:L/dDvZ7r11OXhddqdKVwfw1xvFxM4wbz+JIoh6WNJoSjjrr5ngzRDRK1:zdrZ7p1SnqyImxhZbfoSjreRDE","tlshash":"d2c2d004d60ff634a79b0d3d58670131ed4181089afbbab7cc531a7d0bae6123e1b19b","first_seen":"2025-11-16T04:42:15.275376Z","last_seen":"2026-03-15T19:21:04.92232Z","times_seen":5,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/nav_10001.png.webp","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/nav_10001.png.webp HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1440\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\netag: \"697ec985-5a0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xbZPH9vRDrma8hHXoKc1%2B5p%2FX1lEIue1sBh%2FidKP7Gt4DjNrX05V%2Fj8WrfIXPYurv8FXq7Mc2cRSuPV0j6yfl2ej3fxb2Bgj0xN1HdClw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c72892cea7e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1440,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e8d13f1d5ff7e8863ecc90e58977f32","sha1":"10942555f682682b525b2980f7148c433326cf77","sha256":"05ec749411d639025dbccc2c15aa378980fc77ffdf8ede4fa83675c37b392975","sha512":"a79b7304336727b7648c989d33e5b0f7579733b079e9431794e51850461014d73c0f30e191bdcd48e843841d3d60a26bc5d9b79c4394033ccfe13588a4499825","ssdeep":"","tlshash":"e3210b3ef67112e1f45402818d350d3fc50a62a5324b50429ad334e3c68d32767b49ef","first_seen":"2025-09-22T09:13:26.244496Z","last_seen":"2026-04-26T23:59:05.87536Z","times_seen":8,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api2.bxapi.cc/api/index/conts","fqdn":"api2.bxapi.cc","domain":"bxapi.cc","tld":"cc"},"ip":{"addr":"104.21.68.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bxapi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:55:16 GMT","end":"Mon, 27 Apr 2026 13:52:58 GMT"},"fingerprint":{"sha1":"3E:80:65:39:91:61:55:EA:54:52:BF:BE:41:98:72:46:46:EA:2E:4C","sha256":"43:C6:BA:33:37:19:FC:35:2E:CD:04:17:C8:67:71:46:98:75:29:9D:C0:74:01:D3:5B:62:06:CA:79:4F:4D:49"}}},"request":{"raw":"OPTIONS /api/index/conts HTTP/1.1\r\nHost: api2.bxapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dy-dormirpg.win/\r\nOrigin: https://dy-dormirpg.win\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://dy-dormirpg.win\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMuJld6%2BDE9bBbCja9ixLGO6g9DCpcflxNxY%2BSSeNxgrV%2Ft10olLKvScrlKKYS9N2RyD5giJoKpVHq1OURQHNpdXq3TvjDC19Qqb4BE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c72892a080032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:57:34.772395Z","times_seen":17845104,"resource_available":true,"data":null}},"time_used":1604,"timings":{"blocked":63,"dns":23,"connect":1,"send":0,"wait":1468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/recent.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/recent.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-5da7\"\r\nexpires: Tue, 03 Mar 2026 15:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tJTumtHbuB06Mf5llzQklsfuuL2%2BrE6fuOEH0EayfIdBSZO4MfQy26hC%2FTQ568M07axWm8uvKvNxZx7S7ydmP1bH7TyQBW2Js9wSSo1qQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cea85783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8819893a5cfc6ee3ddba12af7d7e4ab8","sha1":"47ded54da9c9e9f1ccaabbc75ea54658e548160e","sha256":"7d7eee476e22d8657b85f34221302510e137c8b4b9e231081fdfc7bbb6693270","sha512":"45d4780efa11d0e958e90638f3dba7a8eb2d1ea75d5db1bcc9b616f59f9b4d18c7e1ad496d5dd2dc0447d8f9894d59984c9b945fefb1cc8120a1324d96727950","ssdeep":"384:HQHqb7JePI0O8EaAsYve5vY9/q3qhf+9kTnljnM5SfQkJWX55qsa15jVJwv1Zfky:wHqb7JvNzw9Syq1bnljQSfrWp5qGbB","tlshash":"91b2d0c1a046f52e1917ed7d4a8c7f55fea3c484a4c143a8ce00279bf68fd2a3e57985","first_seen":"2025-11-16T04:42:15.292875Z","last_seen":"2026-03-15T19:21:04.910654Z","times_seen":5,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/icon_dt_1ss.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/icon_dt_1ss.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-fa5\"\r\nexpires: Tue, 03 Mar 2026 15:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGI%2B59zz2Ezj3WpINY9ZUlfI9gfLq2SjxFIUVADHd4QpeAYLpBfrj68HX5TeYonTuRjwqqdiNpN1zJKc2xMjrsMh8fjX7rQbhIZZ4gNtYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cea87783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 70, 8-bit/color RGBA, non-interlaced","md5":"a76db168ef9434034bf653bac470030d","sha1":"1d59be38178eedc93fe7057a52011db25beabee6","sha256":"246f1a18c26717d3ded4afc5b4d01ca09a025df3924575cb068ef7bace352aec","sha512":"b8c7a2a867c9e21491f653888135f918e1286cd851d4607bb88021c925e50a73fc5f149abee01ca5310c2a73b36fcadcf2cc49bc6a3041ab246c24b190f94dae","ssdeep":"","tlshash":"72817d896f03f1305fe37b5313128d8708f4badc34f57795808a49e37eb65529a2d16a","first_seen":"2025-11-16T04:42:15.311858Z","last_seen":"2026-03-15T19:21:04.904901Z","times_seen":5,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/theme0201/footer.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/theme0201/footer.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-1eafb\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cpQrgoZwU9tz4uO8pI5cLIWfpfgmpALjIbS1SliC%2FOGJss5nOKiLFOqcfy2y90%2Fp6cPr3COBF%2BNCPyw0FEl%2Fksin8nHLhcEvLwgrjXbq3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cea88783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1170 x 711, 8-bit/color RGBA, non-interlaced","md5":"3e6b6bbe217d84cde3c88e36d3329e90","sha1":"dfb8b6e58ef614c6ccb7b67cc6c7e1aa7f7a7b9d","sha256":"dcb226c863df7f36abac57612f5bc6de707659b13738549399450d44c4a31ec0","sha512":"643109e40b1f88457a24720529a5654d350c0cc53ae1ac406570b049d823ffe55cfeabc061e22a0447c3aae17a38ef9728ef19b6e5e5973e28940b603061c97a","ssdeep":"3072:s2XVKpPAsuM5Ga3vORhl8Tw7DmMqxrSWxu2NoYT9Lv:s2oVAk2Rhuw+SWxHpZv","tlshash":"57c3f1e65773e5c89e6f22f55dd22f23a16b148e02d12434a83ca4eed22af3d9c5035d","first_seen":"2026-02-01T15:38:51.367456Z","last_seen":"2026-02-01T15:38:51.367456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1289,"receive":400,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:27.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nCookie: __uni__uid=rBEQg2l/c3BpPbhDA4eIAg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 01 Feb 2026 16:08:27 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-11T21:09:27.876791Z","times_seen":20200,"resource_available":false,"data":null}},"time_used":1299,"timings":{"blocked":528,"dns":31,"connect":244,"send":0,"wait":244,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogprimrod.dormirpg.vip/siteadmin/upload/img/2009104680601890817.avif","fqdn":"ogprimrod.dormirpg.vip","domain":"dormirpg.vip","tld":"vip"},"ip":{"addr":"43.159.94.240","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogprimrod.dormirpg.vip","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:58:62:B7:74:89:26:C0:92:DD:91:0C:95:1C:9F:04:B8:50:7D:50","sha256":"ED:24:AC:27:5D:3A:33:5A:9C:60:88:51:D3:E3:0C:96:7F:05:16:69:03:B1:D9:31:58:95:EF:4A:EB:6B:E4:5C"}}},"request":{"raw":"GET /siteadmin/upload/img/2009104680601890817.avif HTTP/1.1\r\nHost: ogprimrod.dormirpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 08 Jan 2026 03:27:46 GMT\r\netag: \"ef48a8095b05b0a4cbb402c09f427ffc\"\r\nx-amz-id-2: PB6LVxU4avDy9fmsacrsUzCoVcXfbaHAQDMejs2mslhWqW91LqEWDkmBelnHZ8r+57repiPlMsbtw2XDRRwhDdaiR0tWEwWN\r\nx-amz-request-id: 5B8TS72VHZVMEPH2\r\nx-amz-server-side-encryption: AES256\r\ncontent-type: image/avif\r\nserver: AmazonS3\r\ncache-control: public, immutable, max-age=86400, stale-while-revalidate=86400\r\ncontent-length: 75753\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains;preload\r\ndate: Sun, 01 Feb 2026 15:38:26 GMT\r\nage: 57514\r\neo-log-uuid: 5057390284674189294\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":75753,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ef48a8095b05b0a4cbb402c09f427ffc","sha1":"8a1230173f2ea0169af9ba240d65c203b83d08cd","sha256":"9074bde11d86b3d96b9e16d4d33d5f885ac662cfc8fd60cde91a42244bb4d642","sha512":"8a53e5eb619e1ff4bb742ea04343499e14428357c2a0bb3581418cef6ee073f256f5970bf8e779dabaa68b066c283be1e96440d2a0ef9ddb006db08a7a53cf34","ssdeep":"1536:22pmR4Kj8EY557TeigJXvXlGosFUCKQeCflX76XzFRmmOcXoe3Fs:A4A8EYf6vlfsOQeCflXA5RA/Ss","tlshash":"1d73124c50d97a09c8025c38e8fba72751b9e2f1a1bb32c47c05d5ca9d11de76a7e22b","first_seen":"2026-02-01T15:38:51.368539Z","last_seen":"2026-02-01T15:38:51.368539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":100,"dns":37,"connect":22,"send":0,"wait":81,"receive":3,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/img/7.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/img/7.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-3d09\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=usdS66DdT5niASnYQNVsj7dgIaS%2FW%2FRyuTuuXj6MoCX9uNkixQTRbBKt7bcDa%2F8xoeSIr8VcidQ9fVHCQUprodX1BBHbOJrcVIaLlw27ew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892ada22783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15625,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 110, 8-bit/color RGBA, non-interlaced","md5":"f9748de55fe895351e7a40813c1c3177","sha1":"de76b5afe96fe55a1bd981b5258bef64c23b08a7","sha256":"4ecc6286b1754c7b3d69c1e1a90bfb1f18be48316052a4596a168978b48b70aa","sha512":"bcabb43958216f0cb1254fbcc413b92b23bfc4aa71b48a44f069c4b06ee6276ac63a2530f411446ddcc6adfc8a4d541b9ed86fd0d66c84495927479994252ac0","ssdeep":"384:T0wDsJG9yj/hNoLuC9zRUCQzFoN8apUrs+JmsJwLms:TGOytNoLu4zRWBo4s+peKs","tlshash":"ea62d0c666d75aa715824eb1525ae618c73ee48c036b3f309cdb534ba925e903c8836b","first_seen":"2025-09-30T05:56:39.894424Z","last_seen":"2026-07-04T06:45:01.526699Z","times_seen":11,"resource_available":false,"data":null}},"time_used":943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":943,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api2.bxapi.cc/api/index/huishoumoney","fqdn":"api2.bxapi.cc","domain":"bxapi.cc","tld":"cc"},"ip":{"addr":"104.21.68.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:27.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bxapi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:55:16 GMT","end":"Mon, 27 Apr 2026 13:52:58 GMT"},"fingerprint":{"sha1":"3E:80:65:39:91:61:55:EA:54:52:BF:BE:41:98:72:46:46:EA:2E:4C","sha256":"43:C6:BA:33:37:19:FC:35:2E:CD:04:17:C8:67:71:46:98:75:29:9D:C0:74:01:D3:5B:62:06:CA:79:4F:4D:49"}}},"request":{"raw":"POST /api/index/huishoumoney HTTP/1.1\r\nHost: api2.bxapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 0\r\nOrigin: https://dy-dormirpg.win\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Content-Type, token, Authorization\r\naccess-control-allow-origin: https://dy-dormirpg.win\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6lL6FkLlqDupVxBqnMLKmd%2BeuVi7nCjOpwsTEGNQNFFlnSwV8UdcrxCZkokdVn64Jn0%2BtmWm%2FTRjqYzxFh9Ch%2B493kvSRqTy8aNiVTA%3D\"}]}\r\ncf-ray: 9c728932daf632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"03d6148d9ef7338640343b2a7d8db1d6","sha1":"2e551348fbc458345a854285ccb54932f7a6fd0e","sha256":"7ecb077dde442cf27b57ceb96ba1fca7285d1cdf38ea671a6a6e613516a2ca41","sha512":"adbc4de9f95b4eeaff6095a1ac2b5fb6d066cba7e3748a745dffc88b1ad02490ee46614e4ca03b70bbef866a2a58617c9868b87b6ee0fb2702fe5ab23e2e6819","ssdeep":"","tlshash":"85a02228ac280e0b32028a8a030a83cbc38b3802883a83200caa3f28020c028000083f","first_seen":"2026-02-01T15:38:51.375449Z","last_seen":"2026-02-01T15:38:51.375449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/favicon.ico","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:21.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3N6nKrnXNUpAxOt1VGDnPU%2B5UDcg8Pyfx5hZHqtkMM%2BxtTX0ZOkGg3%2BUW7wkCC4IuEQFq2jQF6bgnX5uO2o2quQGPhpusLeuCYOsxFEow%3D%3D\"}]}\r\ncf-ray: 9c72890bbd0d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5327,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3453)","md5":"0b8e29c477ea5849707a4357b59c9e72","sha1":"04652bf24f00e9abe4bba917f6f5e19339559189","sha256":"edb52af131936c4510778923570493dd9fa55d1ad6f818cf90e583fce740b087","sha512":"2c5740b55b04153b4d217b4fcccf18052d0f9ce413e36a50d01f07e986dea596f5ba4bcd935491ecf0c9c070c254b0cbe7b69ea6d5995e07425c5e81d1837507","ssdeep":"96:zGAJAm2y4H2y4G2y4dWwW3WCduIf6b+9xjE7Ju:6AJz8xu9Qrf6bixgJu","tlshash":"63b173d24b985d0d8232517327a7e4078f3c50b674158c81fce83a9e62ddfcda572765","first_seen":"2026-02-01T15:38:51.343197Z","last_seen":"2026-02-01T15:38:51.343197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":683,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/index.883130ca.css","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:24.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/index.883130ca.css HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 14:53:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b7458-1793e\"\r\nexpires: Sun, 01 Feb 2026 16:47:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 39083\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLCq4vIS1NRe76ZJhIgRw2FTa6WoH3JMht%2BDvVibt3cmsRl895LJp9be4pvsmEnvFhjL4LKZxMm23Fmly%2BLyum2VAjnSB%2FgS8jAzxn%2FMzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72891cffc5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2de2f2d3943b4b382a28a439daff5939","sha1":"70d04e1c3567cb4f248b29046b98386f215a4d38","sha256":"8a35934d019c2b120a31ae6c51c75b2327f22637824b2a2c2faf4ce17ae9d4d8","sha512":"eba9271e30d6e4b21954078e3ccd839a55e1dcc8212fa375c18dce42104d19a92655c2f289401525b0c9565971a31573b928666515a3ca89b1801bbd48c1de95","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:VApuK7hmVrS1Wu3iG41nrPI","tlshash":"f393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-07-20T12:48:29.443135Z","last_seen":"2026-08-11T21:09:27.879931Z","times_seen":5218,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogprimrod.dormirpg.vip/siteadmin/upload/img/2009106195964260353.avif","fqdn":"ogprimrod.dormirpg.vip","domain":"dormirpg.vip","tld":"vip"},"ip":{"addr":"43.159.94.240","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogprimrod.dormirpg.vip","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:58:62:B7:74:89:26:C0:92:DD:91:0C:95:1C:9F:04:B8:50:7D:50","sha256":"ED:24:AC:27:5D:3A:33:5A:9C:60:88:51:D3:E3:0C:96:7F:05:16:69:03:B1:D9:31:58:95:EF:4A:EB:6B:E4:5C"}}},"request":{"raw":"GET /siteadmin/upload/img/2009106195964260353.avif HTTP/1.1\r\nHost: ogprimrod.dormirpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 08 Jan 2026 03:33:47 GMT\r\netag: \"a3222fe3588e4e7d2c5ce7e65887f139\"\r\nx-amz-id-2: XCtIMj3EvW5FRLywfCoULcGqmiNBas2xlKbNZLpOKBnwZTUYdOI0R/TWzNusY+XvNsBcinstKVRpOnt/8Js6fdvMovEZJH5S\r\nx-amz-request-id: 1XKMM4KJQV1VYSNF\r\nx-amz-server-side-encryption: AES256\r\ncontent-type: image/avif\r\nserver: AmazonS3\r\ncache-control: public, immutable, max-age=86400, stale-while-revalidate=86400\r\ncontent-length: 81211\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains;preload\r\ndate: Sun, 01 Feb 2026 15:38:26 GMT\r\nage: 59091\r\neo-log-uuid: 7429240983021301729\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":81211,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a3222fe3588e4e7d2c5ce7e65887f139","sha1":"92f345925f50bdfd35f5ce0f0054ffc1dfb967c9","sha256":"39017ce9bebb28cc954168888c24dc480c792f22a6697a9111903268bb15585b","sha512":"41c1db12028e1d18053fb5ea1efad01a5c2aac485885b522d39aadb3f541bdb9910d6b69ec320d674d4867558de866a98e61b7018e1b6424beefee1c63b7f009","ssdeep":"1536:eHZ3ZejxqdqlSyil8IlMo+UvYfWIqjTuFwk/CSH2aLwA4EK3S:eHZ3wUbycxMJaYOfT672aLwBS","tlshash":"ea83128f49cae556e6d9747e3adaf1fc325089b21e8e4f04a0c07fae55f0b0e0611396","first_seen":"2026-02-01T15:38:51.377147Z","last_seen":"2026-02-01T15:38:51.377147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":93,"dns":45,"connect":19,"send":0,"wait":73,"receive":9,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api2.bxapi.cc/api/index/game_index","fqdn":"api2.bxapi.cc","domain":"bxapi.cc","tld":"cc"},"ip":{"addr":"104.21.68.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bxapi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:55:16 GMT","end":"Mon, 27 Apr 2026 13:52:58 GMT"},"fingerprint":{"sha1":"3E:80:65:39:91:61:55:EA:54:52:BF:BE:41:98:72:46:46:EA:2E:4C","sha256":"43:C6:BA:33:37:19:FC:35:2E:CD:04:17:C8:67:71:46:98:75:29:9D:C0:74:01:D3:5B:62:06:CA:79:4F:4D:49"}}},"request":{"raw":"POST /api/index/game_index HTTP/1.1\r\nHost: api2.bxapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 12\r\nOrigin: https://dy-dormirpg.win\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"{\"status\":3}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Content-Type, token, Authorization\r\naccess-control-allow-origin: https://dy-dormirpg.win\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tj7KIcc%2FKI0HjEsUqzOeC%2B6sgcOvISVOayaHRcu2gUyrvCyU4rcVXXN29DW0aprI9mvPPaKQ5Vu62XtEplL6x%2B2e3oiedv%2Ff0ixbtpw%3D\"}]}\r\ncf-ray: 9c72892e3cd532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143854,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"714bb58cb4ef2f77d67e234664008f5a","sha1":"2ae6637bc39127086b1e112101557fd235332f1a","sha256":"59ee3a3f1b10cb8dd236566b12190019733f9ff5610d9472a1a3914bdf4b8da0","sha512":"cf0db06f64318a2cef5d38579aa7fffddb52664bfd8395ce2f1dc7306bc74db8ebf5be7528b726f58a306199519fbb90da8a183f374d0c2c9a0ec2eabef19403","ssdeep":"1536:YWpm1Y0jQ9KyP7f0M2L+Z2Y9C0XG1Ph/EG:YW5IyP7f0MqY9C0ch/EG","tlshash":"22e3134a2bedac675a3ab9b18c8f34f571ec591fb881ff58b2706c1c4cae3191253146","first_seen":"2026-02-01T15:38:51.378124Z","last_seen":"2026-02-01T15:38:51.378124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":960,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":960,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogprimrod.dormirpg.vip/siteadmin/upload/img/2015307234792329217.avif","fqdn":"ogprimrod.dormirpg.vip","domain":"dormirpg.vip","tld":"vip"},"ip":{"addr":"43.159.94.240","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogprimrod.dormirpg.vip","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:58:62:B7:74:89:26:C0:92:DD:91:0C:95:1C:9F:04:B8:50:7D:50","sha256":"ED:24:AC:27:5D:3A:33:5A:9C:60:88:51:D3:E3:0C:96:7F:05:16:69:03:B1:D9:31:58:95:EF:4A:EB:6B:E4:5C"}}},"request":{"raw":"GET /siteadmin/upload/img/2015307234792329217.avif HTTP/1.1\r\nHost: ogprimrod.dormirpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 25 Jan 2026 06:14:28 GMT\r\netag: \"c53ffe73dbe82aa3e1bca7b43f075edc\"\r\nx-amz-id-2: v8TUkpsbw28nTdP5qE+liyNnv4sJBjmnE9mJGMQcGBlKySoCsgks1FexHfQKvhP2pbZn+y7xI2sIRSPaay6/C8pGVBamdHot\r\nx-amz-request-id: 3MG9NP7Q9DMSA0M3\r\nx-amz-server-side-encryption: AES256\r\ncontent-type: image/avif\r\nserver: AmazonS3\r\ncache-control: public, immutable, max-age=86400, stale-while-revalidate=86400\r\ncontent-length: 68484\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains;preload\r\ndate: Sun, 01 Feb 2026 15:38:26 GMT\r\nage: 59003\r\neo-log-uuid: 15807066409896813874\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68484,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c53ffe73dbe82aa3e1bca7b43f075edc","sha1":"f4034f57c5706cdecd0a99ec234c480f8a3920ff","sha256":"2071332a499a2e35919f01d8deeedcb4f7e8c59f5b712b745b0022c950b6b873","sha512":"7d2a372ce87e0c760727ba27d5316f9b268c036f4c4f1bdcaf4849457ee98113bf4a9d018d2e7e477a798c929534783616738dd6894cfddeca835fedff69b7d2","ssdeep":"1536:/jojlohsOAx4tTyr82G3pWObmHAI73Q5+CO3dgsqRY:belpdx4TbygI7TNg5i","tlshash":"3f6302c16ea4ebb386bb4f3a70ddf86e50b2930404771615fd7e467a490a5b4ce86ac0","first_seen":"2026-02-01T15:38:51.379022Z","last_seen":"2026-02-01T15:38:51.379022Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":98,"dns":52,"connect":19,"send":0,"wait":25,"receive":40,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/img/3.png?","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/img/3.png? HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-3b1b\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BkXQXsWpC%2FyMltim5ph3F3K7Q2R0uwVipdq3I8DK7wlbyHxhphm1a1i34F9BLAUzBThZylrXC%2F%2FeVysJUkKF4Z0mOR6HPUeW0VfrvUi%2Fzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892aca19783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 110, 8-bit/color RGBA, non-interlaced","md5":"8f5e0c16104b7641beb1c255741bf70a","sha1":"7ac8f32e9dd5b32fc1d803b3e8db6c531cad16e4","sha256":"dcfaf6b4767b5f345585aad390f272e793c7be65f717fc42fab7989dc604f8a5","sha512":"ba04e1194c073d7fba8401d222adee3b44ecbc87e1c821902f09630c6a45a8f26a264d4067edb754d56bdcafb914739ef1b9b9dd07d24123fbfd9ede6f55c368","ssdeep":"384:T0wD5GNeAKniief3wMu+snv8DX+hg8e8u+Hm3cioa:TyNeEJPg+9mgqecDa","tlshash":"f562d04c161704be0d4d565a37d276e0efe798c1c4cc1c057ea627eede1b23a2530a57","first_seen":"2025-09-30T05:56:39.949094Z","last_seen":"2026-07-04T06:45:01.555414Z","times_seen":11,"resource_available":false,"data":null}},"time_used":942,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":942,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api2.bxapi.cc/api/index/get_c","fqdn":"api2.bxapi.cc","domain":"bxapi.cc","tld":"cc"},"ip":{"addr":"104.21.68.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bxapi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:55:16 GMT","end":"Mon, 27 Apr 2026 13:52:58 GMT"},"fingerprint":{"sha1":"3E:80:65:39:91:61:55:EA:54:52:BF:BE:41:98:72:46:46:EA:2E:4C","sha256":"43:C6:BA:33:37:19:FC:35:2E:CD:04:17:C8:67:71:46:98:75:29:9D:C0:74:01:D3:5B:62:06:CA:79:4F:4D:49"}}},"request":{"raw":"GET /api/index/get_c HTTP/1.1\r\nHost: api2.bxapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dy-dormirpg.win\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:38:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Content-Type, token, Authorization\r\naccess-control-allow-origin: https://dy-dormirpg.win\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ri%2Br4zyoqhAwOGjDCcIrOqXMcCwJsTU%2FlqI2M6Ls%2B28yZJdGwuGrqYLVtgW6Y3jgn07cOnJC26cgxVmsPgYoiV8yC4vBM%2Bb%2FA7lK55M%3D\"}]}\r\ncf-ray: 9c72892b3bd632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d03cfcf9dbb792702eb0425db4be39cd","sha1":"1433723e03f4d7347faad0edac9d530f5d12a818","sha256":"71ba31643105740180a575a6e454aadbe56c4746e6ecc3b7eddd84799d2cbeb9","sha512":"93ba068cef81fd689b232bc84ab20f183a15c71632d5cc33746ffbaf54ba48af470ab49a34f982348453c5eb6c03dd952031ed63e769fdced0285fa8d0513249","ssdeep":"","tlshash":"2cb012b72bb98f05256382f5028d64cc927e250390e2833548ce2f3041ed0f44401c3e","first_seen":"2026-02-01T15:38:51.381154Z","last_seen":"2026-02-01T15:38:51.381154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1944,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1944,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/bigDefault.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:28.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/bigDefault.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 29 Jan 2026 14:53:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b7458-28ea\"\r\nexpires: Tue, 03 Mar 2026 04:47:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 39083\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GigE4AP%2FoVjU%2BGIovhrj0Io2JKu%2BtWM6i%2BZJZ6VKXBlo3q0DuaXpP9imNlG5VcvNq3FWN6eIQrTuzCMzFfBerRjb09rcoT59HxNJZvoEDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c728935cc16783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10474,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 297, 8-bit/color RGBA, non-interlaced","md5":"e35af685790feb3224e3aa6ba7ad7e58","sha1":"175d70f3a4a4e2b40345544411c34e815b1000cf","sha256":"8a6bebb87cfab44b5f7e04c2f28a77411393427a0ee78e95050de28b54ae5c54","sha512":"bf52a3572711897f85f363a77f328ce536851e097293f0d2605a9e84dcc6505cc4b90f43aed5f99de68f612a69d233725eaa29bb79ca0f911bed75a3307ea8a5","ssdeep":"192:0VJhm487m444nLQyoLIfbbO6HK1I2jEwVEbxF+uRGLMBmC+8LWHWhDIIIIIIIII9:0R69LQyrbbO6q1yUI0hEDIIIIIIIIIIe","tlshash":"bf229e0fea9c6f863671718b605de1a3bb5db48d89a870e8e0637e1eb6729274f50404","first_seen":"2025-09-28T05:34:24.78346Z","last_seen":"2026-08-08T02:20:46.308035Z","times_seen":67,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogprimrod.dormirpg.vip/siteadmin/upload/img/2009101330631888897.avif","fqdn":"ogprimrod.dormirpg.vip","domain":"dormirpg.vip","tld":"vip"},"ip":{"addr":"43.159.94.240","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogprimrod.dormirpg.vip","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:58:62:B7:74:89:26:C0:92:DD:91:0C:95:1C:9F:04:B8:50:7D:50","sha256":"ED:24:AC:27:5D:3A:33:5A:9C:60:88:51:D3:E3:0C:96:7F:05:16:69:03:B1:D9:31:58:95:EF:4A:EB:6B:E4:5C"}}},"request":{"raw":"GET /siteadmin/upload/img/2009101330631888897.avif HTTP/1.1\r\nHost: ogprimrod.dormirpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 08 Jan 2026 03:14:26 GMT\r\netag: \"c3e562e2e62214c82f8ab024360834f3\"\r\nx-amz-id-2: z3Cc1ZxBO5zs4JqydtEnVcaqZH8/0r61Cc2psIWi0OXX+f87jn9z7V4d2tNpx7Z2eG6FqObRF1b/I9OvBNgXefwLla3RGMFD\r\nx-amz-request-id: 1XKKDD9XXA86X14J\r\nx-amz-server-side-encryption: AES256\r\ncontent-type: image/avif\r\nserver: AmazonS3\r\ncache-control: public, immutable, max-age=86400, stale-while-revalidate=86400\r\ncontent-length: 71775\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;includeSubDomains;preload\r\ndate: Sun, 01 Feb 2026 15:38:26 GMT\r\nage: 55054\r\neo-log-uuid: 8598885934303445043\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":71775,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c3e562e2e62214c82f8ab024360834f3","sha1":"6ae183af7f77af971343a0fe9f8ee0cbfec7022a","sha256":"96e8273501acb30eabd52349fa62a5facfd2e338854cffe1cba0ab8599cb3c1a","sha512":"4e4e9f2a855d72210034daacef269a7b49529457e730f1edf5c70e6343c41f1936e762ea2055de59374cae236e91ea1f966e55203fd49c7637267248a95fc0c9","ssdeep":"1536:4abLzclPpYyepEfGL4Yr0R/gJG1EiiC8QqarXMS59eNEvGZCrrCOCbTxVsR:v/CpYymcQ0/l8arXTOZCrrHIuR","tlshash":"4f63024b8d939b734e752f7f629b54242623182bec764a7fd02528c709a5c4243c3edb","first_seen":"2026-02-01T15:38:51.383141Z","last_seen":"2026-02-01T15:38:51.383141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":26,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2225171_8kdcwk4po24.ttf","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /t/font_2225171_8kdcwk4po24.ttf HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dy-dormirpg.win\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: application/octet-stream\r\ncontent-length: 55940\r\ndate: Sun, 01 Feb 2026 00:49:13 GMT\r\nx-oss-request-id: 697EA30941B82236363BC1B9\r\nvary: Origin\r\naccept-ranges: bytes\r\netag: \"B716002BF601F727176AE7901BDF4E4F\"\r\nlast-modified: Fri, 24 Dec 2021 20:51:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10201830100077572647\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=63072000\r\ncontent-md5: txYAK/YB9ycXaueQG99OTw==\r\nx-oss-server-time: 2\r\nvia: cache35.l2fr1[541,540,200-0,M], cache13.l2fr1[542,0], ens-cache8.se2[0,0,200-0,H], ens-cache20.se2[1,0]\r\nage: 53353\r\nali-swift-global-savetime: 1769906953\r\nx-cache: HIT TCP_HIT dirn:8:309430526\r\nx-swift-savetime: Sun, 01 Feb 2026 00:49:13 GMT\r\nx-swift-cachetime: 31104000\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff62ca817699603068078242e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":55940,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh,            ","md5":"b716002bf601f727176ae7901bdf4e4f","sha1":"e87c1130c27fa42d822c198f5ea8b633b5118b94","sha256":"4bc8cc97559c0a52ea4f5ce0563e1bf3a7f89d660f74792e662e76d49eae4707","sha512":"cd4d86bc27a8055bf4ba21730991acb71e32d1d8c3176b6aada3c8fcfbaacfabe3cf1c813665b4434b16c757587d38afb8fd61f3a84a440053a96b545187e672","ssdeep":"768:00Yo6KrRwXJDv2mjQ5PMWCUPQnNqcoocj9MNb5+kYfcUFO++wEMjQYVEh/gG+VeV:xY1dCpj8+kYfcUUXwjjQYV8/gBVE","tlshash":"3c437c2b835e4fb3d16a86f90c4f011b5fefd7206636f99664ca5c1e4402afd085cb9a","first_seen":"2023-04-09T15:26:02Z","last_seen":"2026-08-06T10:33:00.013233Z","times_seen":3715,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":79,"dns":37,"connect":21,"send":0,"wait":22,"receive":46,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/nav_10000-active.png.webp","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/nav_10000-active.png.webp HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1382\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\netag: \"697ec985-566\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBjXln9QZqtm1niV3bnQmJCIg20XLf2RP532V%2BkZ7t7Q4U1t4bStbKZ4tKPXtqSogUEjdcl%2FuopkL%2B2DxTPSIcs1%2F0s4aLvqwSMlc49Psw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c72892cea7b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"658947e04f3614e8fe9c216a480dc098","sha1":"c8a52a158f49d1f291e6eee65d666ee62f370e00","sha256":"22245cd3f236ab5fe98d22c1e5b27cb3625793e6ce59145a8585348202623d3b","sha512":"c46211060974cada29d991f62451933651709065b4745ed07df058a360dd3578ae2d0b3e5bf7cb889b866d27b00bd32b8a0cbb5f40a0a095640b0cf9041860b6","ssdeep":"","tlshash":"3b21d84dd56ae1198b7c70c6a7ab0618731e29d7f69f9305c8394906c2dc5413788c7a","first_seen":"2025-09-22T09:13:26.235044Z","last_seen":"2026-04-26T23:59:06.10122Z","times_seen":8,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/popular.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/popular.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-12fa\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cg8OG6DMnjHReYr7JjGioiClTMrq0qHoaiS1n5H9zuo4yqhjC8KGM3LePfzFV4oTqIvv3D5fSgeU7mrOtD539UB9zEqWSmvwUY64zEDtLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cea84783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"3950286948c210308f92ad0d96ec7112","sha1":"9a3156aeff52f6f666fa47af9723d818426f6d0d","sha256":"6619df09f8d240469a7b02c8137d195c8aaf83798dcc20739a670e0110dd3755","sha512":"beb755b2506ec70e75b3e68fb164b29d0defa4c596ceb37b91036ab4006f7dd6bf120a75635562f111205e45dbf0a7f30b44a4e4d39535e178e3680acd1f7d1c","ssdeep":"96:BIElyD6vLY1bJy/cEsf6gCPalpHvbQ0cB3c1/qlNcO8VufISvB2ujSoz:Zlyuvc1FySZyqHcLB3rHISvB2ujSoz","tlshash":"d0a15c96d10280587fb27f11f828684bdc06452fe0baa12e0bab1dbc1184ad25949b93","first_seen":"2025-11-16T04:42:15.298453Z","last_seen":"2026-03-15T19:21:04.915061Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/urlConfig.js?v=1.0.1","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:19.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/urlConfig.js?v=1.0.1 HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:19 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 03:38:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"697ec985-1b4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xq0JZ3kxOK23ia7fm6tmWedOSjqOFiSdBKUg1MpatbxO9CkcTsH753bsRoW%2BYZEUFH6ZRQLt0gk8Vt2TLYEP9ZBCdNR7xJbD8wbDnIAsxw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c7288fecaf9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":436,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (436), with no line terminators","md5":"d9bcb9168ae89fe5cd5dd5611a2530d5","sha1":"f498ec5d355f300953c777ac7d4aa9d1dd676ceb","sha256":"468323889b195c854ed9ec0937c7125766a52a311ff0c1267d4d9f60471d9b43","sha512":"4e1a3e78656cdb47df34f9590f701938c5a99b32e023d5b29ffcc931ba96ba3c78bb4c030626aca0da333ccc5d47e4b0c9f9433a58851bc29b017c13dbb676f0","ssdeep":"","tlshash":"65e030f3474c9003d71105c54847aa1c919b56985fc4c226c888f0238c2e8ab64d7759","first_seen":"2026-02-01T15:38:51.347101Z","last_seen":"2026-05-06T21:23:38.730687Z","times_seen":8,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/chunk-vendors.34d6b234.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:19.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/js/chunk-vendors.34d6b234.js HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-a4efd\"\r\nexpires: Mon, 02 Feb 2026 03:38:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMefKhs1%2BgMZOOWUaNoseqIBpbAsA76A3s9tzV5aGtgJjvasxOJDnNxLY9TzixMnHPleG3qV2Vv76P7ZAn4LFI3xlxtYVDx3FfXOWRDfeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7288fedafe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":675581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"25e8cb3e96a3f5744c255fd4159d4c85","sha1":"992c7319733e40ec6c415332ad2693c5d6052348","sha256":"d16088f9201a6156dec54d49fd729df0b6c039abba8478d924ae8a6fe65f6d73","sha512":"d00c68c533cf245ae8725970c23d449889b68e27b9b32b590f3a20ac8d21606d5c71b7cddee55a94c37112f32c766cc749bfc266bda59e6494a8d810248e1dcf","ssdeep":"6144:iQYZLefzJ0vUWu7xo3JFmYqvQGEyPPOAsdjIbvg:mkzJ0MWuIFuYGEk9sd5","tlshash":"63e41a8db292b0b60be760b1103f120bb23b6958780a9498f675e4e46d7cd8e5177f7c","first_seen":"2025-11-21T19:21:14.102956Z","last_seen":"2026-05-04T17:33:35.282533Z","times_seen":45,"resource_available":true,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/theme0201/1979793803450966017.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/theme0201/1979793803450966017.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-cfa9\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nmokYfNySEdt9jsMWKfw9e%2FFMNceu5rxMVNsgfqYdJf19qi432y0NObzpijbt3uzZ%2FVPipyGquUZnHqdUoRHEMH3UEO9quYe473Sxn8OBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cfa89783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 220, 8-bit/color RGBA, non-interlaced","md5":"a5bee16316e3111ea769de04c69e85e6","sha1":"bad7dceaef51dff1718df548ec5a92dc2c5ab8a5","sha256":"977a42fa1bbee0b24458a07c548efacf351e3c26f6e13a4f98b6e6f351c58b41","sha512":"324b30d627406dc4b16df4a030e6344c38f32faccefb02e3e97d4d742a06c64713d37c167f37b99dd369f734ed7b1c497fb2190a01ad28b20be1f6155f9c3e60","ssdeep":"1536:FWwjYxlbKxgs3UEomCviNbfrfD8cy5MBXoEvjLfpH:FWwkxtLqX1frfIcyWB9vRH","tlshash":"de3302d048444743a383cd9fb76ebd14f41e95d6a0c3cde9bb129128372ab66ce60b70","first_seen":"2026-02-01T15:38:51.38669Z","last_seen":"2026-02-01T15:38:51.38669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/js/index.656c9ff5.js","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:19.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/js/index.656c9ff5.js HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-fb25f\"\r\nexpires: Mon, 02 Feb 2026 03:38:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xaZXbKS0b1HN7b05oqf1Cb1uvOmTxytntkG7Esxan%2FuT0%2Bf4bJI%2BF1A6Sa6PJK9vKIS03z%2BXzYxJf1yk8gkEF0zXRd%2B%2BqUDwDCA84Q5nGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7288fedaff783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1028703,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65016), with no line terminators","md5":"005df6bbcb736f682159feff8716398a","sha1":"33e134b599c0d3d950c04afde771b14e501c835b","sha256":"bc6226e77b736718e6e2b8fa8edb386bed91a17adbd0a364a4f7973cfdbbb054","sha512":"55b760e47d85d4f85982bec76dc2eb97555ac02802587fe3bc9822156dde9e291a2a2884e4c596ce3f5f4c3d12c5170320cd48a64aeed6533a9a8dd21c6691fb","ssdeep":"12288:7cwjGABdiho34A6t79oKZaJDFVm84WwQsAoNGGRoswdYoI9YBcmA66lmtB/Q:7cG+9ozDFVm8G6oGQ","tlshash":"b7257c3ab08635aa5f93a524518e3f08627dbd23a001d8ccf3d9ad594fd678e5313f29","first_seen":"2026-02-01T15:38:51.387686Z","last_seen":"2026-02-01T15:38:51.387686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":869,"receive":827,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/index.883130ca.css","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:19.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/index.883130ca.css HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 14:53:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b7458-1793e\"\r\nexpires: Sun, 01 Feb 2026 16:47:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 39078\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEepUvhaTj1Fisdg9DeHayBY61vc4ZgfwgEkslXDtLmPV1wIqVQ1V97PEEBgqqvzHwsIA15yN%2BTCn6Bj8gJu%2Fk14Icn5aulEI33SmlgudA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7288fecafb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2de2f2d3943b4b382a28a439daff5939","sha1":"70d04e1c3567cb4f248b29046b98386f215a4d38","sha256":"8a35934d019c2b120a31ae6c51c75b2327f22637824b2a2c2faf4ce17ae9d4d8","sha512":"eba9271e30d6e4b21954078e3ccd839a55e1dcc8212fa375c18dce42104d19a92655c2f289401525b0c9565971a31573b928666515a3ca89b1801bbd48c1de95","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:VApuK7hmVrS1Wu3iG41nrPI","tlshash":"f393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-07-20T12:48:29.443135Z","last_seen":"2026-08-11T21:09:27.879931Z","times_seen":5218,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/img_db_dt_top.webp","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/img_db_dt_top.webp HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30626\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\netag: \"697ec985-77a2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Fv5JkIAJ1E%2F7XcAtyhClGYf2gvp3NLRY3mHgeeXpYiXvHsTJGZ8iAuhrc6hrBkCqrXFn%2B0mABL1aVHt27ifWhDcY4inajWWV5Vg1urriw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c72892cda76783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x140, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"80844b0b2d8b887b01b9d54e8fdd4e8a","sha1":"9786f42b410e18d08f0f6c063a71a421eee45a3f","sha256":"7b2527794aba942abcc104e3f55551db8994c71309954711523a98457fa376e5","sha512":"ab1210a6b65c064d4d926bc680c375fcc325b700cb21ee4ea81254f379346511e611ef52c702b4d8476b54e6e63b25f339e80d5e16212d7563b91e00b81500d0","ssdeep":"768:h7CVt0VoJalOUWGLVdEfUkiJxmAIM8RfponGBgCONGK4g3oq41L+G:nVoJIpdEfdiJrLqfp7uvD3D4X","tlshash":"5cd2e06736dd3a72bbf5678fe1c00925ae1a702b3719ff684b9281f0f667f901110186","first_seen":"2025-11-16T04:42:15.297402Z","last_seen":"2026-03-15T19:21:04.883298Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1183,"receive":3089,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/app-border.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:29.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/app-border.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-1b45\"\r\nexpires: Tue, 03 Mar 2026 15:38:30 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rq6hNKebzbg2oQZxtQGBDJ%2FDYKkPoQPvHyXmiU6PRTT0%2FDq80vHy%2FFF17nUii%2ByE%2BCmplJdSEt8B0gqFPXubkVwADqSJqID57TsN6ks72A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72893fddfe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 226, 8-bit/color RGBA, non-interlaced","md5":"892b0c12f2d61145b48bcd1a25096c05","sha1":"dc799eb954687d649e4c394a38423113116ee31e","sha256":"50b08731d901ee526ad9686ce9b70acfcc0a922875123c89696186cedfbc32d2","sha512":"66ec1810170a904fcc33237b9e3c9a2c7d707ad24b55f2773d8056cf1f1fb68be332c1c1118543f2df84c7739d4b5a6092cbabc4526dcd23e6cfca152760c385","ssdeep":"192:DTPpPkQWtAyVor9+pPBQUskEjJJd4qN3rMcqkCkZL+X2oqA:XPKlmh+pSjJJdNtMcjZLEP","tlshash":"fde1aef0c37a653cea9acff8b41e9a516cf6d1d6dd210938cd9481ef170f6211d91190","first_seen":"2025-11-16T04:42:15.312866Z","last_seen":"2026-03-15T19:21:04.927541Z","times_seen":5,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api2.bxapi.cc/api/set/getban","fqdn":"api2.bxapi.cc","domain":"bxapi.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bxapi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:55:16 GMT","end":"Mon, 27 Apr 2026 13:52:58 GMT"},"fingerprint":{"sha1":"3E:80:65:39:91:61:55:EA:54:52:BF:BE:41:98:72:46:46:EA:2E:4C","sha256":"43:C6:BA:33:37:19:FC:35:2E:CD:04:17:C8:67:71:46:98:75:29:9D:C0:74:01:D3:5B:62:06:CA:79:4F:4D:49"}}},"request":{"raw":"OPTIONS /api/set/getban HTTP/1.1\r\nHost: api2.bxapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dy-dormirpg.win/\r\nOrigin: https://dy-dormirpg.win\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:57:34.772395Z","times_seen":17845104,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":68,"dns":24,"connect":1,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/theme0201/welcome.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/theme0201/welcome.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-d2608\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLvz05D5StHGSbt%2BRlo%2B3Q1XXWvP3R2XY2lTruJl6hf6EICLkqXwPKLK0ndks3RJw8mlfF%2B2YMr3PpQRsIpssOQq23ufFB5zEdAxq%2F%2BtXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cda74783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":861704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"2706b5b83ac2b0205067ac6d2274db8e","sha1":"6eb32ef797e7ee7c78c32835cb81219deaa77191","sha256":"782b2e92fca37169e3732fd8103fa5671ce6840c76879620a4fc559e2017c876","sha512":"ee6795a4c812c349d738ad7a09c67e8ab7146759726fb9298cf5dae147201aba49a08929937fd79c7ef9d2aae79e794947317ff412aa59a423fe9e314742fb4d","ssdeep":"24576:UDZg/mQZiLfcY9VK2MCtzXL7pOKn694OAgvJs:MWmQZiLS2MCXXVgFhs","tlshash":"0205238dffe447b7ec3f6219cc9f92d5830544917a39ab138b7595c81a0340b9abaf42","first_seen":"2026-02-01T15:38:51.390562Z","last_seen":"2026-02-01T15:38:51.390562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1452,"receive":6142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api2.bxapi.cc/api/index/game_index","fqdn":"api2.bxapi.cc","domain":"bxapi.cc","tld":"cc"},"ip":{"addr":"104.21.68.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bxapi.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:55:16 GMT","end":"Mon, 27 Apr 2026 13:52:58 GMT"},"fingerprint":{"sha1":"3E:80:65:39:91:61:55:EA:54:52:BF:BE:41:98:72:46:46:EA:2E:4C","sha256":"43:C6:BA:33:37:19:FC:35:2E:CD:04:17:C8:67:71:46:98:75:29:9D:C0:74:01:D3:5B:62:06:CA:79:4F:4D:49"}}},"request":{"raw":"OPTIONS /api/index/game_index HTTP/1.1\r\nHost: api2.bxapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dy-dormirpg.win/\r\nOrigin: https://dy-dormirpg.win\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:38:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://dy-dormirpg.win\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=elhPDHXWdywKcqNnZ8dxJWhzxSlQdcqm%2B82PFmgK6i0wM3bvLY%2FLazkYkm1N1QVq7HgE75N%2F0PM%2FvvCsgyMCBHF%2BW6Z%2FKaBqb2B25Q4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c72892a080432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:57:34.772395Z","times_seen":17845104,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":68,"dns":26,"connect":1,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/img/2.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/img/2.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-f4c\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0hVHMZUuAt0p0wg%2B7ujJeT4Ce91PIW0l6dVP3jXmseAxB56vx6lm6FSFB5LLZtnksO0%2B48auJUu7UI2ZeYuSLv17O0YGw9G5ntgyJUuoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892aba18783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3916,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 110, 8-bit colormap, non-interlaced","md5":"e4bcdf0bb82039eff56f456a798004d4","sha1":"207853b072c0ee5caccfed5a72c2ee210728ffb1","sha256":"c4e9f312d49308d8a85ff756a86ce8b4f1071fcb864e7c4e30436193c922c22e","sha512":"4ce5163f77ebe7646209cfbcf968078815c87bbd1e5a47b5dad64e9f0fbda0743e9892ea5ee78c22d1a4bd010ec8ef16aa489d9613c7cab23851d926bc9568fd","ssdeep":"","tlshash":"9e818ed4f1e4cad1fe4d606f8464eb2345ae062e81bc218e31a7503254fe168c8e95d8","first_seen":"2023-12-27T16:33:40Z","last_seen":"2026-08-02T08:23:39.22651Z","times_seen":72,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-dormirpg.win/static/images/jogos/nav_10004.png","fqdn":"dy-dormirpg.win","domain":"dy-dormirpg.win","tld":"win"},"ip":{"addr":"172.67.183.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-dormirpg.win/","date":"2026-02-01T15:38:26.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-dormirpg.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:33:06 GMT","end":"Sat, 02 May 2026 00:30:21 GMT"},"fingerprint":{"sha1":"1A:6E:A5:CA:FD:64:BC:4C:03:62:33:23:EB:77:B2:2D:6C:DE:07:98","sha256":"37:87:77:EC:B9:43:CB:00:BC:48:2E:3C:77:CB:BA:6E:FC:6C:38:2B:F5:C2:FD:10:17:58:8D:8B:EF:F6:EB:8B"}}},"request":{"raw":"GET /static/images/jogos/nav_10004.png HTTP/1.1\r\nHost: dy-dormirpg.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dy-dormirpg.win/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:38:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 03:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ec985-24ae\"\r\nexpires: Tue, 03 Mar 2026 15:38:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oOLZYgiD5Lh2d1x8v4bPT51U3J3SdIVmWiXdg2%2B1yFbBnHgT%2FKAZklF0%2F%2F0xcwxbiW7FJVcWxQ5zitVuHbV4hOS6tnWDwObs2olgRptqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72892cea83783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9390,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 76, 8-bit/color RGBA, non-interlaced","md5":"9791690aa889fbd8d939f83271bff4c5","sha1":"f3c1ebdf338860533414829ea3ffe6937e289fde","sha256":"b588fc5ec12c8837db742786756e7856902ea7e181ace9ba3038ef550363a196","sha512":"30e7598578334601c983ec27237fe789652be01a8c4389da32044caaaf67eb263da035b786c8a444e998486d636067963839af0df2314ef4daa98fe78949c649","ssdeep":"192:6Jq1N337rJ8svbeHOunwc3bM6o053GXlD/aBRlesnJckOLYytT:8q1N/J8yeuunwSffGlanKhYytT","tlshash":"8a12bfd8b991084b1e43a0f1da2bd13ac72698cf7c3d83290f246936979b6d5f5ce294","first_seen":"2025-11-16T04:42:15.279606Z","last_seen":"2026-03-15T19:21:04.954989Z","times_seen":5,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"dy-dormirpg.win","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}