{"report_id":"163ee368-e6cd-458d-aed5-56eb437a975c","version":6,"status":"done","tags":[],"date":"2026-03-24T01:47:36Z","url":{"schema":"http","addr":"zxgdvj.cn/zmyretff","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"172.67.179.190","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"title":"zxgdvj.cn/zmyretff/","dom":{"size":1358,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e9b7189b5a77bc9e165ffce13255efd6","sha1":"726a64720c7c6048270f9970c0eb92608b459f06","sha256":"507046b166ccfe1d92ddffdd0ae9079eaadeb6d9e21cf0ec85447f3656c44600","sha512":"58089ea940dc81854167e7e9ddc150c2244aa21228da6da05731949ea46cc16cdd426332b7125cb061083a9d53b737afe01769b3b0bee322ca521344a9511436","ssdeep":"","tlshash":"222185a3e9404c2df32287229cd6f50493a5f968c11e2c80f59e21ee89d5fc2c4d3a7d","dom_hash":"domhash2858bea39bb6fa11d7e6e77a3484eb26","first_seen":"2025-12-25T05:44:23.614991Z","last_seen":"2026-03-24T01:47:36.919204Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zxgdvj.cn/zmyretff","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"172.67.179.190","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T01:47:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"zxgdvj.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"zxgdvj.cn","ip":{"addr":"104.21.59.150","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-21","domain_rank":0,"first_seen":"2026-03-22T05:29:19.947145Z","last_seen":"2026-03-22T05:29:19.947145Z","alert_count":30,"request_count":10,"received_data":343581,"sent_data":4805,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/assets/js/CRKdQYY6.js","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8228e92aba54c134eb2389db38261fa","sha1":"11b38192b0e885fbc4c0d3e5e062ed0146da5378","sha256":"6984a1bbdb2a28cc2a40734ea08ef18ec6781e03535dae078dcc97f787ee9957","sha512":"4843e2ba4010a3d4f87cb46100588b2d250d9713022d875ddf3152d1ce3bb156216c801e7d2b372a9fcc7684adb9e36230d6cfee52a8e5426ba61aff8f3756a3","ssdeep":"768:YzJENSox0h6wlGVpUQJaFJCy+K7WE+0cGzksqfz1Bc7DxnywTM95JhKS6DSBiU2b:HePQ9c3wMv","tlshash":"f903fac8b261546683e2a1a380750203f33899557408865cbb2ceef7ad7eeca7173f75","size":41156,"data":"","first_seen":"2025-06-26T16:12:55.034925Z","last_seen":"2026-08-13T11:15:56.470835Z","times_seen":13385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-13T14:27:12.53899Z","times_seen":237651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-13T14:27:12.53899Z","times_seen":237651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-13T14:51:08.053048Z","times_seen":742838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-13T14:51:08.053048Z","times_seen":742838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/assets/js/CALi3VFO.js","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1391c567f721f8335d57d99a7ded631","sha1":"d9fa48334a9ccc0a046c7fc47a50bcb1978f288b","sha256":"ccaaf43afcd73d5df4d15d7035a85dadc599a4e2fc8bddfdead7c1bb9c44edc3","sha512":"17e3feca2551ab85730b1a2e8f0665eb13180e0974d6152a96760d109cc8ce74a4e89d00177da0b1b749fde36bf8117316e52af80426312a56f0822a4a232f97","ssdeep":"6144:Wwk6g0pvNJetDSD9a7XTpmq1BUuh++f3AfSB:Wwk6gsvN4tDW9QHUu0+f3Afw","tlshash":"43344ac97296b06253b328f2013f200bf23a296a7449d498f15dd9ca3db9649c17bf7d","size":245844,"data":"","first_seen":"2025-12-24T13:14:15.562826Z","last_seen":"2026-04-13T04:36:57.263961Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"zxgdvj.cn/zmyretff/","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T01:47:15.263Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /zmyretff/ HTTP/1.1\r\nHost: zxgdvj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Tue, 24 Mar 2026 01:47:15 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://zxgdvj.cn/zmyretff/\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FC1YTbfGNKEJBAQbGrK%2BMKC71RnpqhReK5WAjsnyIpcwvpKqXLBvLQZhrJh4FJCdjp43Zb4pf07e4RCLJjdw72U0o1ph3jXXA%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9e1201bc6e2d32fa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1819,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T14:51:47.486746Z","times_seen":17872751,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"zxgdvj.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T01:47:15.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zxgdvj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 11:37:37 GMT","end":"Tue, 26 May 2026 12:36:06 GMT"},"fingerprint":{"sha1":"E7:DB:E4:6A:D6:A0:12:A1:DE:C5:31:36:8A:65:36:27:41:D9:AE:CE","sha256":"E1:B1:7C:6A:05:94:B2:6F:30:F7:35:B3:B7:F8:1C:D4:AB:04:70:B3:8F:02:C7:1F:C2:95:18:14:BC:20:BB:20"}}},"request":{"raw":"GET /zmyretff/ HTTP/1.1\r\nHost: zxgdvj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 01:47:15 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 14 Dec 2025 11:56:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2CHMsVlFbwSbGhRk0%2F%2Fkx4Ko%2BVfGCOB1DMEma9GFAvWvulbyVfW8ZMSko%2BAcp2lpKCQGakncn9l2ED3iExzvo%2FzZI3dI5DMig%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9e1201bca8d98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1819,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"510b6f140f427c37571f349cbf8091cc","sha1":"3c3c531d6c691656c7c6b70c4c0358af1413fc95","sha256":"0a166f43c23ef933346aeba95ce587dbedf6d50fba60cc8386d6da296186cd2e","sha512":"697ea5d555db7d5884ee644bd188369f4ab8b5d6eeb177dd3a4d28c18678c434f675081d46f73acd2545699550bb0cccc64287a65ef71a7502ca2c768ce23043","ssdeep":"","tlshash":"a431ff93fd008d5ee2268772acd2f00442b2f618810d1c80f5ae61be4dc5fe6d9d762d","first_seen":"2025-12-24T13:14:15.556338Z","last_seen":"2026-04-13T04:36:57.263055Z","times_seen":31,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"zxgdvj.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/favicon.ico","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zxgdvj.cn/zmyretff/","date":"2026-03-24T01:47:16.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zxgdvj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 11:37:37 GMT","end":"Tue, 26 May 2026 12:36:06 GMT"},"fingerprint":{"sha1":"E7:DB:E4:6A:D6:A0:12:A1:DE:C5:31:36:8A:65:36:27:41:D9:AE:CE","sha256":"E1:B1:7C:6A:05:94:B2:6F:30:F7:35:B3:B7:F8:1C:D4:AB:04:70:B3:8F:02:C7:1F:C2:95:18:14:BC:20:BB:20"}}},"request":{"raw":"GET /zmyretff/favicon.ico HTTP/1.1\r\nHost: zxgdvj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxgdvj.cn/zmyretff/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 01:47:16 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zh6SuHyWh7YRb0GbScOhJvbonzCsOqf%2FVAA3uBzW50N7hqYGqSyw%2B3a45ET57yy5XMZJXHSLBT7Qu3x6d0Xe0x9LXTM3l2DeGw%3D%3D\"}]}\r\nlast-modified: Sun, 02 Nov 2025 11:47:18 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 23 Apr 2026 00:09:07 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\nage: 5888\r\ncf-cache-status: HIT\r\netag: W/\"690744c6-576e\"\r\ncf-ray: 9e1201c1e9448deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22382,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"891e510219786f543ca998282ed99f45","sha1":"19fe2ff6a2418bcb44b02308b998cef84199ee08","sha256":"e4bdf72e2f803f7e19907c12f407ac7f7cd5f1f94bfd730b9be24b0d49191b48","sha512":"e6729e7e1ed1909297317e249adb7af6c230b2a7082ea792c7776fa5037c8ed8aaf02bcc4015334b6c439732f965ce19291ffe863126d0c20bed9a0c89c4a95b","ssdeep":"48:sSY37LOM5M80I15CEARV/acnFNOpaF/vXE:sSw7LOekI1EE+fPOpaF30","tlshash":"4ea290bf6358f8d5d25d4ee0c91d82fc16196e20f8e0858f2a303e7d76b9ee28401617","first_seen":"2023-04-12T07:52:52Z","last_seen":"2026-08-13T12:26:46.780402Z","times_seen":15148,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"zxgdvj.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/uzo7g1c3m0m.png","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://zxgdvj.cn/zmyretff/","date":"2026-03-24T01:47:16.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zxgdvj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 11:37:37 GMT","end":"Tue, 26 May 2026 12:36:06 GMT"},"fingerprint":{"sha1":"E7:DB:E4:6A:D6:A0:12:A1:DE:C5:31:36:8A:65:36:27:41:D9:AE:CE","sha256":"E1:B1:7C:6A:05:94:B2:6F:30:F7:35:B3:B7:F8:1C:D4:AB:04:70:B3:8F:02:C7:1F:C2:95:18:14:BC:20:BB:20"}}},"request":{"raw":"GET /uzo7g1c3m0m.png HTTP/1.1\r\nHost: zxgdvj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxgdvj.cn/zmyretff/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 01:47:16 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uno7nZJv4MizjoI8LlFbvyGzac7nSrr%2BRRSBdmteF4jHCj4nxDwaH%2B4%2FNeudO9gLANbj29vCs4OJOkdmX1QBAvUiYIvrwZLgeQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1201c1f9458deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"aad3bd278f678e0130de8270d76d8685","sha1":"3df1e1de8d09f143b3a86820cccba2ede497ed87","sha256":"1b99284bfc6859dc384b7c81a29eda1eb815005952a1a78f6d7b21ab30726286","sha512":"48f2c31f2e20812e8f9e9e516851bf6fc478bff4dcd0fef5f03a1a4ec4178fe4c2aefdf860da23ae064775a4dcb409bb0aad822bbf42835b7f94761a8085a740","ssdeep":"","tlshash":"6ec02b2d39137c4cc5a3317422c37880c0ca83376cba41128400800331cf2998ac3397","first_seen":"2026-02-09T01:33:08.879169Z","last_seen":"2026-08-11T01:31:31.346712Z","times_seen":4083,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"zxgdvj.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/open/?apiName=aya3wEs4eCvUUTJFSOPfRezbDebr2XLRnykuVAJCPMMWi7sK5kgFEwVA0cYIn5Iw","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zxgdvj.cn/zmyretff/","date":"2026-03-24T01:47:16.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zxgdvj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 11:37:37 GMT","end":"Tue, 26 May 2026 12:36:06 GMT"},"fingerprint":{"sha1":"E7:DB:E4:6A:D6:A0:12:A1:DE:C5:31:36:8A:65:36:27:41:D9:AE:CE","sha256":"E1:B1:7C:6A:05:94:B2:6F:30:F7:35:B3:B7:F8:1C:D4:AB:04:70:B3:8F:02:C7:1F:C2:95:18:14:BC:20:BB:20"}}},"request":{"raw":"POST /open/?apiName=aya3wEs4eCvUUTJFSOPfRezbDebr2XLRnykuVAJCPMMWi7sK5kgFEwVA0cYIn5Iw HTTP/1.1\r\nHost: zxgdvj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 3625\r\nOrigin: https://zxgdvj.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxgdvj.cn/zmyretff/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3625,"data":"{\"data\":\"Vou5EEULrqVNvrPsbWHuPuYSMoftnXv%2FeO33olh0Hp9RNf3ByAGySedSDdmiZaB0ouvla0dIRt1tBGkY2iarjrZnws6g5wLvjlZBrm0tkyKGPA2sUm6Q9liwbTtNr9cjH9GpEQwusOszkDZmofiqBKiGA%2FTvrtN0E6iVEFNoVJOFP5y17fYYcwFGKi3MC8uTYGaHswkFyauuSu9U%2BveOZubsTs9Mv4y5%2Fp3IWDy0AZApYLefbtVwtsa%2BGg7nU4f5dS%2BimqqdvfimTjjhZW0jWO2tTXtRZfQOdNNU%2Ff0OJrvgfUMBFcjwyW6CPZKV0lPAMMOt9bgv3w538AkxwsSx93lEm9vkAgoXx2%2FcbSBUVqezAEY344DoL1OJUQSrcjPIMgyw1tbH%2FJEPtzNswQ6R8L8jt3jF3aeS1DBDn77N7T%2Fn9Skcd6woBiDBayKdv7mccLyZUg7FRF8ZJQoPpVSLdtRYuMdofQcNvu4SYPr5nUjVFWSC792NmOIIPObxH2jzWic9mIQh0r8M9vXPfEyucz27C05UjO%2FVgeWkpeCiEp7gls12z6PBnLOHB7Sex1xvQAM4xW7WnZZj9WUfq6Oc20M2YhkIMOBbUA3t0j14rkSiHOFHkElbyfz8HEQofH5DjhH3GVwWjJtkHXDgZW1NZj1xWPU5aSuDKSi0umgUYq94wD%2FKmQsshqPz%2B8ddRggWIjbkxVZfUtJR%2Fygc1XdsNTiprcbMlKHR%2BgBUWu%2Bk6zsBqTdYc1yGGolFmZ%2B78ttlG1yMWzLE3sztgPOH4NxMZVCr3IZJN4bne%2FXztqmQGla%2BqROwWe73M9vpWffiDws8Vz0Cf43USszt5%2BxA4AAX8rg4YFyoBS7AR%2Fgt8sN8WQDaztXgkUwdVg068QNlzfkAQpKXh1GQythnJGZ4VVHtureUOgV%2FqNfa1aaW5n1Wrc9nhRwpwn9LSebUIgydjtHhrsD2o227FHSVTmY0J082kt0hn2J%2FNytTmUfgBzcB3%2FH20Nvc17XwePqyqD%2FSdvMMM7J2ewFpE%2FTR9d4hyfaGBQsUk2TZwlc0k4JmwOUy7bJjWuFsLhe1Elo4KxqQOjQ0LVpAnL4xuGW3f4cwYlT36orBHEhCSp6NMhXOsZdplKJXP7j1DAGzk4GcEMY3A9vvzd2gPpYmxoaF%2FNm2vHz4tbvD62vkOq9RHJtJHQ3tdLIyhRQFC1TKGQtWEWjfy9b%2FyhSHYxixvFlcZl1GCMrXK0KtD08SxjhzHjesz2G8TJscCxJnxt7pXl%2B306alYGVhlW7joXXFGHCXJLA5yurCKtxGa%2B%2BrrCohckE3ort8UIQP6xtbYNfatdLhPHXFOXmUPzgPoLG61v2zGHiywGDHhUvKZQlPbK7hEOaSyskvmin47lPybdYf9VaXFouq3kLsvoIhlVqOgV4V5C4l1Rw%2FkpGxZtTrD1tWnO0RUOOWF3i%2FBJXAyNvRLG%2FC%2FHmh2cELTgtdgwZx55XGsX6laLl9zcA0XE0usqs8HTFdLb5r7Amw8uTKpS12l20TTelfN8c%2FOOIRj6vA61XrSytGwNLeCCOnlQh5jmfeyq3Dqh7NjqUrTVaZXiC0oB%2BbXazYbwAcihY3%2FlxlSYeS1wYwvDSduEP2Eayh59EzgRaEgk8MBebuf8ef3dfaZrlktk2MBS%2B70iIDwstrJLZq9dXu%2BJhjQ1EPQr5cLLRCEionqww%2BIoxMUY19TpXtPrU9jaDS78hH4qO0Oc042K2HS%2FqGizCQY5ojdg1toK%2BxbTJw7bWFcHQfPe%2BJ38uBk3HnxLXdSr9J%2B3iQRR48G%2BwdCrWq9%2B0fl27lCDensvOaRViUVqCsWJu%2FpKbGvwYTEAXoz6t6yth0vB7n7HHsVUVaBe7uO67q%2F%2BXe%2Bhyiqk9IwldT3n7dJmYqt%2F%2Fbew%2BF8te9ymmTaG06BUfg0p9a0jfNP2L%2ByfzAXuo0YWbzf55%2FHvTAFmNsSycmQdiSdyJVpgtvIlERN6UEvgoALGAAeyriJU3otT4xTCmKFnt3ykUl3m1lJ1y6fTzXwHXeIq8n4Kc6kV%2BWkf20%2F61qxyFkWOThCj%2BJUUE8Jj%2BbSlru7lYTp%2FfdIDir2NYxzO%2F8SlaRGbL%2Bj9euvoOony0jOxNmGLq9MBw16%2FkokDSqMoHQJwqbZz3yALx6%2FmPg%2B2Afu7jyFm%2BYhjFqxdx1p5f0xO02iPH%2BMKp51kEv%2FkFyzTPKiwN5hS5yaACJrFEAWiGzcyi9Cm7deNQfETKCXsrpihKy7N5YfEXWJ%2FhYxQ%2FdbG2wJ%2BN0Lt5Z4kwbUzXCWzuPpgkbOSXe15X9VWnLinHuKGL13MKG%2BKZG23VvYodgsomHjTNY2v6aj1okVmXD7exxv2nfXS3T9xdTAsVto%2BHpVzVyHGSliVT1YCL8imfhWSx3sCiFW5MJjScqGzxJUea%2FOSmTYDD73iZpKLx%2B%2FR%2BgRblQtCkuG%2FVP1b7U0we5VgF9dQb3S9nqQAvjx3I%2FrpelblnHmRw4IbdwX1xQGuYkQF4Q7Wx71IvXgZkrfIxjE0WrBx2%2BEVfaFWLiDERSeKOn7QF1Q32AhytQb%2FfJzn%2ByBz7Nzx2ykvUZ4zlTradv0LVNLu%2BXb2pdRlfw4xU1Z7W06z7xiZZowwOLODVs6aBdnFxeBC1Ug0h9ejk3aPD%2Fzw5v8mtWpqkdIdId0BzLghF8jHwnsb2PEgFC5EreK%2FMcWxzWjN88LHXyFF%2F3lE%2BRB%2FKdGdfi4pDrKOMixIO1U4d9SA3KhGeoH50X9RRPpqPfT8aCpMqmRJGKi31IiOYSHqDTW8uoWo5hNPherH7DZGAbjYoE4rUbOARTHWmXXvqTw%2BcDAnKSbglXTsyDot8CyuITtMRoxLWcKB09XNRTK6u2X%2Bs59QNJyWzdR0VtXpnLZOFka0JcbsvFBZzv%2F7JDOfDkVeGZ2OtFV8ekvTHjZO42Yu3vcbRTLVdQj6LCcY%2FeWbyw8UtWeTE4b5foEDV8ipZVFmrqWRahOrX3Th1hcGV95LDXggElfF1bbgevsK%2BI2oRXF3D%2FoXO0YQnjJ1AIKoxWhxdxhyYUYRHuoqz7X7A2BJljsv5XTZB0B5r1B4A219ZcOmrIrQXvgpG8D5CZUJjyhANTb3OIdc3qRHvYqBV1fZHCEL8MN7ZGUFllwrhOh4dCQph3XqAp8kUl%2FqPmTfgGulY8RPlzSaAWtdlSgXXtQ8hEv%2FvhwRL5FdYL3cmOC9bn4QKp%2FD0DMN6JY%2Fv%2BqOdlBxwhBtH5xtDUghtfCExO9%2F%2Fa1sDZox8jZ%2F1PiAmAZ305XzrqjNaU03t2V8Uxd4UYAgPIkg%2FKRpwJK6xTGpJ4JC32rFnRd7h55bq%2Fcs0MKnYhRaC82CIF8%2BwK%2BEg88rk%2FQ%2Fs27%2Bfhjr%2BdRmiLxoEy9L8Vs6S42HvmkgXu\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 01:47:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: https://zxgdvj.cn\r\nset-cookie: locale=en-us; path=/; max-age=31557600; expires=Wed, 24 Mar 2027 07:47:16 GMT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hJqkQ9F4sVVKGrfQtF8IsSvxy8KxEFDy0B%2F8Bj%2FbnkOPx7DvCBAm0xJa3hcLDxCZJM4fbqE2bJaHqMnqMDV5cfnHQPGMtZORg%3D%3D\"}]}\r\ncf-ray: 9e1201c4498b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e0a4a09f97c732edeabd8580d721e7c2","sha1":"f0e11c0e56128ba246d782c8678a2f88f4e2391b","sha256":"8bc55f760a8ad956e66394c3a32b26711b660c74d20d358b35ec1e3b2ba2c728","sha512":"1eca591203c21924c9b9582a162a01001acf4b5f1449f7842a0d171e99b265a34ca9bc7eb61d77ce4601e20e8d51748cc29b8d6df0072a6b9b91b6c6da0dc41c","ssdeep":"","tlshash":"9b800082020cace823233802320e2a8820e830a0c2802aaaac2c023c8f08c28e083220","first_seen":"2025-06-24T22:10:16.160171Z","last_seen":"2026-08-13T11:15:56.470264Z","times_seen":44396,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"zxgdvj.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/open/?apiName=iYvEhAQv9a5b7hswJKn8CL7QOKy6QanWJi%2BQzzWuRMk%2B%2B%2BKkAdRMtmoowxPO%2BnGQ","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zxgdvj.cn/zmyretff/","date":"2026-03-24T01:47:17.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zxgdvj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 11:37:37 GMT","end":"Tue, 26 May 2026 12:36:06 GMT"},"fingerprint":{"sha1":"E7:DB:E4:6A:D6:A0:12:A1:DE:C5:31:36:8A:65:36:27:41:D9:AE:CE","sha256":"E1:B1:7C:6A:05:94:B2:6F:30:F7:35:B3:B7:F8:1C:D4:AB:04:70:B3:8F:02:C7:1F:C2:95:18:14:BC:20:BB:20"}}},"request":{"raw":"POST /open/?apiName=iYvEhAQv9a5b7hswJKn8CL7QOKy6QanWJi%2BQzzWuRMk%2B%2B%2BKkAdRMtmoowxPO%2BnGQ HTTP/1.1\r\nHost: zxgdvj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 591\r\nOrigin: https://zxgdvj.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxgdvj.cn/zmyretff/\r\nCookie: locale=en-us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":591,"data":"{\"data\":\"dyoC6IOZr2WvYfC%2BojRQMi1Bnhd7XG3YcUwm510NdyxlNvXZVyp23WeYNh9O1GMj3KkUMFCozi1ppurJNk23hKBjKupfuFEJzqeO%2B7GHSREU%2FcvG7D3e70h9r%2F8K%2BaptXfjz2OWqTtaOda2H%2BIPPzi9THDtoE%2B1Cv6wLk6Kp2G1EEGkEbror%2Fu4j6aNpXeBa%2FdbOWizzXIZcbA8LMQiKuaKPbFpcMlb%2FCnHQtzE%2BOW0xBrDiMEmNROmzG5YoHhsqcL0dF%2BCXjJUve8QK%2FakF6GlGciozSLceLZ0Y4%2BaH%2FwaUJjAx9CfbaQoLwCv5xnJHAA%2FKZwzZ0yGR3N%2BxdvJH5VDT8oMTlqeZtkOWHZAern2DmgsLHI1KB32T%2FaQGOxlAMDhzEipAR5FZEywaPW93XB%2FA2Wr36SVY3u1wZBoMy8AuRKnnBYQLFCyqoWbGIqghG5yqGfimehVz3nalGBVFu8haCqdjyImJ8oSShVeulgdN%2BNfWDir8gOC25p7TKugVzPmr5ntcKSdNcalvBXvALA%3D%3D\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 01:47:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 9\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: https://zxgdvj.cn\r\nset-cookie: locale=en-us; path=/; max-age=31557600; expires=Wed, 24 Mar 2027 07:47:17 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmvA51sL9%2F5n6vWiMjHfWxfOrOs8dnUSdG14UUAadRYj7e0knX0UtFdCPCUxOaTd1Fu8Wzf0ecvo%2FcxKxnGcTKGB9EVsizwKzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e1201c949da8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-13T14:26:35.063464Z","times_seen":88976,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"zxgdvj.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T01:47:14.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zxgdvj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 11:37:37 GMT","end":"Tue, 26 May 2026 12:36:06 GMT"},"fingerprint":{"sha1":"E7:DB:E4:6A:D6:A0:12:A1:DE:C5:31:36:8A:65:36:27:41:D9:AE:CE","sha256":"E1:B1:7C:6A:05:94:B2:6F:30:F7:35:B3:B7:F8:1C:D4:AB:04:70:B3:8F:02:C7:1F:C2:95:18:14:BC:20:BB:20"}}},"request":{"raw":"GET /zmyretff HTTP/1.1\r\nHost: zxgdvj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 24 Mar 2026 01:47:15 GMT\r\ncontent-type: text/html\r\nlocation: http://zxgdvj.cn/zmyretff/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2IToT%2FjbOhypT6Vi%2FiStq%2FPzX72qWchQMDeFMqYMCkAmnijI4jSnhVTG4VHczc%2F%2F9wDKONE63hRKjsh9AibNahCFZ5boagaVDg%3D%3D\"}]}\r\ncf-ray: 9e1201b90d80c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1819,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T14:51:47.486746Z","times_seen":17872751,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":21,"dns":3,"connect":1,"send":0,"wait":539,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"zxgdvj.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/assets/js/CALi3VFO.js","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zxgdvj.cn/zmyretff/","date":"2026-03-24T01:47:15.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zxgdvj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 11:37:37 GMT","end":"Tue, 26 May 2026 12:36:06 GMT"},"fingerprint":{"sha1":"E7:DB:E4:6A:D6:A0:12:A1:DE:C5:31:36:8A:65:36:27:41:D9:AE:CE","sha256":"E1:B1:7C:6A:05:94:B2:6F:30:F7:35:B3:B7:F8:1C:D4:AB:04:70:B3:8F:02:C7:1F:C2:95:18:14:BC:20:BB:20"}}},"request":{"raw":"GET /zmyretff/assets/js/CALi3VFO.js HTTP/1.1\r\nHost: zxgdvj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxgdvj.cn/zmyretff/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 01:47:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Dec 2025 11:56:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693ea5ec-3c054\"\r\nexpires: Thu, 23 Apr 2026 00:09:06 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 5889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYeF5zBnH4Phd4WNiHirLNJEo78pbyklowbNERklP4oh5yFOVGyiU1aJqQ7E4nZgChWvIKiVx7xrymgemZ6ugOA1LiZI7T3kYg%3D%3D\"}]}\r\ncf-ray: 9e1201bf59258deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245844,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26324)","md5":"d1391c567f721f8335d57d99a7ded631","sha1":"d9fa48334a9ccc0a046c7fc47a50bcb1978f288b","sha256":"ccaaf43afcd73d5df4d15d7035a85dadc599a4e2fc8bddfdead7c1bb9c44edc3","sha512":"17e3feca2551ab85730b1a2e8f0665eb13180e0974d6152a96760d109cc8ce74a4e89d00177da0b1b749fde36bf8117316e52af80426312a56f0822a4a232f97","ssdeep":"6144:Wwk6g0pvNJetDSD9a7XTpmq1BUuh++f3AfSB:Wwk6gsvN4tDW9QHUu0+f3Afw","tlshash":"43344ac97296b06253b328f2013f200bf23a296a7449d498f15dd9ca3db9649c17bf7d","first_seen":"2025-12-24T13:14:15.562826Z","last_seen":"2026-04-13T04:36:57.263961Z","times_seen":31,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"zxgdvj.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/assets/css/FYuOOwVc.css","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zxgdvj.cn/zmyretff/","date":"2026-03-24T01:47:15.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zxgdvj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 11:37:37 GMT","end":"Tue, 26 May 2026 12:36:06 GMT"},"fingerprint":{"sha1":"E7:DB:E4:6A:D6:A0:12:A1:DE:C5:31:36:8A:65:36:27:41:D9:AE:CE","sha256":"E1:B1:7C:6A:05:94:B2:6F:30:F7:35:B3:B7:F8:1C:D4:AB:04:70:B3:8F:02:C7:1F:C2:95:18:14:BC:20:BB:20"}}},"request":{"raw":"GET /zmyretff/assets/css/FYuOOwVc.css HTTP/1.1\r\nHost: zxgdvj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxgdvj.cn/zmyretff/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 01:47:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 14 Dec 2025 11:56:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693ea5ec-557f\"\r\nexpires: Thu, 23 Apr 2026 00:09:06 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 5889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkXKR0vjwHHNxzckl8tyufLTP4hjjZVK65hLmaAAlniuS9aOlGkpGWkQ%2FfCPUmT62P19qWRFE4PWllozit8uUPke5qbhSEbyiw%3D%3D\"}]}\r\ncf-ray: 9e1201bf59268deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21887,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20457)","md5":"3298f58a42953270d8b6490b2ee929e5","sha1":"2dc61137e38455fc3ba586e3188b62a7cd20d53d","sha256":"8f0ef7655f1e166b6d852ee3337148d150c73751c94b55349359040312d3dd0f","sha512":"c36513cbc74e31eff3d25c1884bfb5befa6c4b63e0a9a00e2cd28077fc79c6467790bbfb0db4b70805d25da7409ced7a0b7dd7500393b5f7af909cfc58be6921","ssdeep":"192:bbxwOW9JyW9Jy499fNSpACNkNxrNyT+zAJu91X/T/HZNJJLb3IsLxqeXS:RwZNSpujhxz7X/T/HZNJbZC","tlshash":"bca2342d6f1405767c5380f6f5e5eb89b216b1c6ef26b7febd822500d7c63a61c82608","first_seen":"2025-12-24T13:14:15.573908Z","last_seen":"2026-04-13T04:36:57.266824Z","times_seen":31,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"zxgdvj.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zxgdvj.cn/zmyretff/assets/js/CRKdQYY6.js","fqdn":"zxgdvj.cn","domain":"zxgdvj.cn","tld":"cn"},"ip":{"addr":"104.21.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zxgdvj.cn/zmyretff/","date":"2026-03-24T01:47:17.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zxgdvj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 11:37:37 GMT","end":"Tue, 26 May 2026 12:36:06 GMT"},"fingerprint":{"sha1":"E7:DB:E4:6A:D6:A0:12:A1:DE:C5:31:36:8A:65:36:27:41:D9:AE:CE","sha256":"E1:B1:7C:6A:05:94:B2:6F:30:F7:35:B3:B7:F8:1C:D4:AB:04:70:B3:8F:02:C7:1F:C2:95:18:14:BC:20:BB:20"}}},"request":{"raw":"GET /zmyretff/assets/js/CRKdQYY6.js HTTP/1.1\r\nHost: zxgdvj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zxgdvj.cn/zmyretff/assets/js/CALi3VFO.js\r\nCookie: locale=en-us\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 01:47:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Dec 2025 11:56:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693ea5ec-a0c4\"\r\nexpires: Thu, 23 Apr 2026 00:09:08 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 5888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RQZRX2pTynyzN67QkTYL9Uy7IKHeaIwm7oXEXV9LlT3%2F1XTXJ%2BBiFVpgTrb15ES9fX%2BHWqVqmM3DPiAFTsiDNDTeRIq%2BC2C%2BKw%3D%3D\"}]}\r\ncf-ray: 9e1201c769bd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41156,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"c8228e92aba54c134eb2389db38261fa","sha1":"11b38192b0e885fbc4c0d3e5e062ed0146da5378","sha256":"6984a1bbdb2a28cc2a40734ea08ef18ec6781e03535dae078dcc97f787ee9957","sha512":"4843e2ba4010a3d4f87cb46100588b2d250d9713022d875ddf3152d1ce3bb156216c801e7d2b372a9fcc7684adb9e36230d6cfee52a8e5426ba61aff8f3756a3","ssdeep":"768:YzJENSox0h6wlGVpUQJaFJCy+K7WE+0cGzksqfz1Bc7DxnywTM95JhKS6DSBiU2b:HePQ9c3wMv","tlshash":"f903fac8b261546683e2a1a380750203f33899557408865cbb2ceef7ad7eeca7173f75","first_seen":"2025-06-26T16:12:55.034925Z","last_seen":"2026-08-13T11:15:56.470835Z","times_seen":13385,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"zxgdvj.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"zxgdvj.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}