{"report_id":"253ea8af-6606-482b-9de3-05706395c3bb","version":6,"status":"done","tags":[],"date":"2026-05-24T19:21:41Z","url":{"schema":"http","addr":"ng02.cc/","fqdn":"ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":0,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.ng02.cc/","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"title":"最新上线台湾冒险国剧超清免费高清观看每日更新-成年电影网站","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ng02.cc/","fqdn":"ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":0,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-28T19:21:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.ng02.cc","ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"domain_registered":"2024-06-21","domain_rank":0,"first_seen":"2026-05-24T19:21:41.367275Z","last_seen":"2026-05-24T19:21:41.367275Z","alert_count":34,"request_count":17,"received_data":881420,"sent_data":7354,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ng02.cc","ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":339367,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.ng02.cc/","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":80,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e17999bba7477cca8570dbc79fca0477","sha1":"d54319ddfb90b36ebcd337b33a9997d493bfe996","sha256":"e103a24dd630453e2eeb7057bb2205812ee3b0a71f64ac729f6cba9a1ed739b2","sha512":"58aedb205fcc494e8b5b2f130ee9ee54e63d122977004269d296845ec40411206306397de6992748693b938b4baa889be21de2f522c020e9c3f25351a6dc3aca","ssdeep":"","tlshash":"77d0a76d1f270068c197008fa6fad7b06469560b33238c57778e880e0f10ec450f1f19","size":238,"data":"","first_seen":"2026-05-24T19:21:45.38159Z","last_seen":"2026-05-24T19:21:45.38159Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":80,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5ab0491528c49d8878ed58cd7bdc183","sha1":"49a7813af7bce9ba4d712c6816dd39ee2d2918d6","sha256":"2555033a2c6e83884f63a884c660baf70c86338e42775964853da40dcc91fa14","sha512":"ce8f781f9c904cc7bfb15de0ee5dcf67ffac8cdce24090eefd733f8ca820dead96337c49c69b284b8cf727797e7c9792606bead1a9fb20b56302863a35e8e41a","ssdeep":"","tlshash":"a5d05e6ea054703a1c6b56b7829b638ba632214eaa810105786c14891fb646a1785db4","size":261,"data":"","first_seen":"2026-03-06T12:32:06.818798Z","last_seen":"2026-05-24T19:21:45.382547Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":80,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8e271042ba830c6d51d7f15c661cf96","sha1":"c8f1def5e9b137febffe24d60f3debaf09f2b449","sha256":"47dd44eb9290e7f21c25ac16a2cdaaead983390b8ebc12b9670d20bdd427771c","sha512":"3a6bd3f8a92f51917c21b1f0617e8dfc2891900d716ba5aae31bdab4e6a0f3a403281b3fea3f3b554ee4f7b5eb104ee5845971308e722824fc014b5536b962a4","ssdeep":"96:acZynMMIQIXpafFGyMiICwZlIJX2kWALpzKcnWhas508OZaE:zyrFFFGy1ICwZaQkWu453E","tlshash":"b4b185abb6f3117144b3363c5bef82443472901b588ecd113e5c95591fd098aab7a7dc","size":5146,"data":"","first_seen":"2026-05-24T19:21:45.383343Z","last_seen":"2026-05-24T19:21:45.383343Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.ng02.cc/ng02/f32070be51df5fdd79eead54af4c58f2530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/f32070be51df5fdd79eead54af4c58f2530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11796\r\nlast-modified: Wed, 18 Feb 2026 14:00:50 GMT\r\netag: \"6995c612-2e14\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11796,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 508x675, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6d8bbc819ee7bf705c796ca705074ade","sha1":"5d2df88a5e11a6315cd57768ae2fe5440b0cc91e","sha256":"e69d7e068581db07c4a0c3c62c14b9a5993a02cebec754456451c89ae4bbd615","sha512":"2e308bb02eb202c8debb9934413808b10bc93f4aa9295bf53fa5125cce821edffc0580dc7ea92e143e029913b678f705282d8ed908f85f2aea64f05754e923a0","ssdeep":"192:BGKmK+yjEMTQ637zpxrrupww/mo7yUKcaofwClbdwHpdqwbcbS6MS+Ni0UxiBacy:BDmDyLJ3vf4t58ctwC5dwqCcby7NixjX","tlshash":"c432cf67a7f67953351af74ec4d01abdbe5c18b8aa2842120aaf8f1063fcd094d58c8d","first_seen":"2026-05-24T19:21:45.358596Z","last_seen":"2026-05-24T19:21:45.358596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/da2b523d0d0ef37743339d1dfd6ce1d7530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/da2b523d0d0ef37743339d1dfd6ce1d7530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12670\r\nlast-modified: Tue, 05 May 2026 03:09:09 GMT\r\netag: \"69f95f55-317e\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 573x947, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e896912530334c26ce4c9b282367939f","sha1":"e97b1afbc5c07d585f83779338daa201cf905ce1","sha256":"f18a4700deb0bf97f572d57ed789f7a722293da767d6c0b4bcda422ec36e49a9","sha512":"ae246028d7c0711d0564b912c6a039131115d072cdf55cc58136c1a5bc950ac2043161b84b417b46040c879180c0f06fb3f5e3b5a9d7f03e42f4762a0b46504d","ssdeep":"384:jXp4X896AY6b33OOi5agCrEzyEGP83V62AQ2le:jXw89RYULiID4zyhP4Vmre","tlshash":"5342cff1f076a9c1532e29e04256cca47ede28f2e4c75734078a09ae1ecf51d547ea30","first_seen":"2026-05-24T19:21:45.360919Z","last_seen":"2026-05-24T19:21:45.360919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/08de8c207be39f4088f210521cc6a770530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/08de8c207be39f4088f210521cc6a770530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6092\r\nlast-modified: Wed, 06 May 2026 00:50:24 GMT\r\netag: \"69fa9050-17cc\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 474x680, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7c2fb73e326a97e3ec055a7bfd2e3333","sha1":"253651a7c762f8ba17c42d94754185181083eb3c","sha256":"cee62a0033846d368a8b2e552a95c678f77b43af214f8c2995258f5c354bcb01","sha512":"872233178dc4784f63ea94c3209d9572a7231d3cab18979f44175ee694f3d074984926fedc5ca96b1ed9ade2008314b5ac446b017629301d6fed44e909ddad7b","ssdeep":"96:3BFNcTQpnAPrSqZZnaQffpNQpqE3MvEJv7un0qlk/6Wa8WX63NtnwFehQABA+j:x80pbqnnspdRVSLzX8WYNtTjBAu","tlshash":"82c19f4801dbba8af678e18acc7867a5974e9953b49170ac03c05c40dcbdcbd833b5e5","first_seen":"2026-05-24T19:21:45.362311Z","last_seen":"2026-05-24T19:21:45.362311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/01e89184f7c9db8159d912262c07d338530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/01e89184f7c9db8159d912262c07d338530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21066\r\nlast-modified: Fri, 06 Feb 2026 23:26:05 GMT\r\netag: \"6986788d-524a\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x1120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"716a00401588a81911a66016c4bff046","sha1":"5e1e90845d4b4f46cc875f0cb8eb4d23b791b456","sha256":"88771000eccbf1433697addf9ed9f88b1c74d03954ba044a56d51c5e8db0736a","sha512":"ae97c479145da978e211c1e645c2be5f9dce94ef7e09a157be9401c43da5e75ed264f6c694e8298540a79dfede5355f1dab1677c6c650cdee91d93c478575606","ssdeep":"384:jzFiTb249SHdShT+PDwWjJ00NOpl2sPsFUa6XSJDpHVqz2LpnB:jRiCHYT+s/0MplkGBMDpk2FB","tlshash":"7d92d08b0b44bef5e89938a4fb6e3e0f54194019382492b51d4b3ca915f9b7f6f04b74","first_seen":"2026-05-24T19:21:45.363678Z","last_seen":"2026-05-24T19:21:45.363678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/7aa49945eb648741a37cf928faa71873530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/7aa49945eb648741a37cf928faa71873530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15532\r\nlast-modified: Sun, 26 Apr 2026 00:14:23 GMT\r\netag: \"69ed58df-3cac\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15532,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba4ea3e66474890f3ba3740d34313bbc","sha1":"5c6e27cbde4a836414d59d38359d564c968ed6d0","sha256":"aed9367a632e41127a57013022a015b55944fc022fe4b12889a8e18bca3598f0","sha512":"48a0b04e590b061e7e287d165006bd780b848b7caba7db239631b73acc38ba3e68e89df83b2a6ebd0c4a0a330c23899a739c32d6d17dfd7544f1473159bbe2dd","ssdeep":"384:pUecwQnzQs+ia9Vr1oc5/CGXua3cIBmIAj2YhHHYZm0:ieczzQT1L5/Oa3cCk2YhHHYs0","tlshash":"2762d01947912540d095db88ce7acbef69f394efbec4896758ec05f429938b500f293e","first_seen":"2026-05-24T19:21:45.366814Z","last_seen":"2026-05-24T19:21:45.366814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/favicon.ico","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ng02.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\nexpires: Tue, 23 Jun 2026 19:21:21 GMT\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0d412be6425638ab38747443efdaf17","sha1":"db1cd7dab923448a8ded494297c2b06c8f3cc293","sha256":"e73fd0fd1d4c631f0e965ae65e804dc001f36d44cc560cae3ea30717822fd487","sha512":"dac228345e72afd26a5de18e54027244bfe0c4db492091075151b7f56639a307b7e490b4b0faf387305b01c216e093127ea8877a46f398f1e44494473a801f1d","ssdeep":"","tlshash":"82d02ba1919ca708c90c8f0967113436334dd5ca888a4a68f9810827608acd7695834c","first_seen":"2026-05-24T19:21:45.368326Z","last_seen":"2026-05-24T19:21:45.368326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/style-2186ab.css?v=v22","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /style-2186ab.css?v=v22 HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ng02.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\nexpires: Sun, 31 May 2026 19:21:20 GMT\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44964,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (479)","md5":"715f68af6fcc5b744406cc8c71eac954","sha1":"e350df853b2762bf63a2f2705bd2b06263c43254","sha256":"0a800abacb149bd890b770ddc563c4e2147e8a2adfb7e928e6cc9fc2cd867852","sha512":"11013e5a5674d297467826887a552c02a1f9500b3fc79996ea93af5db0d720707f15352662998a0b3dc52afef64016e2e611400f2ae10d50f55e75735405dc11","ssdeep":"768:7LYXt4FK9RnwHhClHxJZB6KWW8QGJ9lD/djNBKZWi1emWktrbir+Kq:7EXt4FK9RnwHhClRJZB6KWW8QGJ9lD/2","tlshash":"c5133013e7805160b522e38424e3dfbe763b9089f20b8db8abf835a8c7cd4d6d46d565","first_seen":"2026-05-24T19:21:45.36933Z","last_seen":"2026-05-24T19:21:45.36933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/59940e9cce3668b70071119b4807d8d2530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/59940e9cce3668b70071119b4807d8d2530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5508\r\nlast-modified: Wed, 18 Feb 2026 13:32:57 GMT\r\netag: \"6995bf89-1584\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x337, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ebea47cb1ee458acb11752cc678538f5","sha1":"6407c81f95c271b32f7e8fcd31c8178bfe3503e6","sha256":"7057c7bb2af4e4aca4ebb39db631f6c3b4ef9dee1eb9c07a582caecc66e4d82d","sha512":"f99fe6a8efecf9d446bb48cba59c7259dcdf67490ec33b3cd9507c12254c22dab6b0f860f18596ca672b6c84c121aa08797f42c3281cb47d42e24b77cfbfe23d","ssdeep":"96:KY/cfwiY/45o5oYRVpgqa373Qo7PPGf0MguEtb0TNZMLZuK5gCUmmXFOXMjt8BjW:Zkh5ZYZi3DzzPG+tijSQK5mZXAXUUW","tlshash":"11b18e7383469d091ea6bc46a8a66df87815f4563373de3e5b24d19b04308a9f02658a","first_seen":"2026-05-05T00:50:00.760803Z","last_seen":"2026-05-24T19:21:45.370951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/a43d40a3cc160457bd07d2d1389d7514530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/a43d40a3cc160457bd07d2d1389d7514530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18306\r\nlast-modified: Wed, 18 Feb 2026 14:03:44 GMT\r\netag: \"6995c6c0-4782\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18306,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 522x750, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bca464bc84e6f784e0dca0caf1db53c2","sha1":"37b5c51e3980535edc674d5c63b1a2f2722802bc","sha256":"918437535012cf07819b5731dad486947d7fe92276ecdc5b376ebffeacdcbaed","sha512":"29d7f3bd6f0f4c56ae3cb5c1ed5bf0712dd360d07e6d0bd6c17423af34ecaef13ec2d9fa4b18753eb259fda25a480a461f3640625d44aa0d8534aeba5fdf1b68","ssdeep":"384:tjXTkB8ygTgGnWfx4IySk/z39UoL3gsNisBww8/iPViRw89Mn:ta8ygAxr1wz3uocJsqgcU","tlshash":"b582d0db79dc92e2d3af3a3e436115759e29a17e18f8745628d0b43be8133e312101be","first_seen":"2026-05-24T19:21:45.372918Z","last_seen":"2026-05-24T19:21:45.372918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/cea59bb991fbee2be989a7560188732d530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/cea59bb991fbee2be989a7560188732d530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4532\r\nlast-modified: Wed, 18 Feb 2026 13:32:38 GMT\r\netag: \"6995bf76-11b4\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4532,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x337, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f6fbc0f06480ec0a66a2185e6c19b68e","sha1":"201629819bcc1477734f92e182d3947158bac921","sha256":"4408d50bef9c3bfa385c08038e17eedb76c9cf4aedb99ac70a8f963aef03c99d","sha512":"b639c250a56d7965a4579204d35ab449ed7389cfb4ad117bddbdf1b5fd1f9ba4f1db78311bd8499cf9d358deb1f291271483b4b43c1a957a0dd068222f64a328","ssdeep":"96:mfLIp+0TF6B7FTwe6+V0pjVdrhsKZ0IHTLWKaP5CuEpJ8:8LIp+0TFQFTlP0xiW7TLHaP5cp6","tlshash":"c4918d611e6064815d8eec7042c4587041e53c39a398bb51cfafc2c7f7a0eb5963b588","first_seen":"2026-05-24T19:21:45.374307Z","last_seen":"2026-05-24T19:21:45.374307Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/33038d1a0dddf0b1959b9ebab3e509b6530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/33038d1a0dddf0b1959b9ebab3e509b6530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3944\r\nlast-modified: Wed, 18 Feb 2026 12:45:51 GMT\r\netag: \"6995b47f-f68\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3944,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 183x275, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"199237ddabf327852875d88c2ef8b4fe","sha1":"f9a6df9e9b9abbe8a68e7339b25d5a12b010381b","sha256":"6c3f931a77be47b6592873080a2904378156a22089c992ffa6add6cf2afe4c4d","sha512":"5199f68339bcc9b7c2fe61c84fd885f0c78580ec4d8f3a678ea1eacfc786e3569517fe4a5e4ffd4f963ec400bfdad117e2ffe175c5b8430d77b66327e6454ebd","ssdeep":"","tlshash":"c9816d50866748e9a502e2cdc75bcb26b0c5dcc2118329bfea1b6dac3c0971a63f11c1","first_seen":"2026-05-24T19:21:45.375535Z","last_seen":"2026-05-24T19:21:45.375535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/a2cbd6524a01921323d4f133039f94ca530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/a2cbd6524a01921323d4f133039f94ca530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3994\r\nlast-modified: Wed, 18 Feb 2026 13:32:58 GMT\r\netag: \"6995bf8a-f9a\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3994,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x375, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca3d836c3ac30759698a714b5164c1e0","sha1":"49a3b29a8ee8130d6e850476d1ceebd87d77b0bd","sha256":"9e2d97f6a21208edeaebf26ba42bff7a75d9c32a981ca143f8b9ed56237421a2","sha512":"94bcd41a06367db34c5c2243816eb7dbbc2bcb717e9697f3d76a7130153aaa81c9c2063d5197a69ff7ffa34998ab68014ffcad23304ed9b7b38526d18cd3c42e","ssdeep":"","tlshash":"1d817d8f83e94379753af23824587435eda40baa8f9e924869f901c0917a205f26b7e4","first_seen":"2026-05-24T19:21:45.376615Z","last_seen":"2026-05-24T19:21:45.376615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/4148df3a7ef05516a024a9e788aad816530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/4148df3a7ef05516a024a9e788aad816530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14450\r\nlast-modified: Fri, 08 May 2026 03:54:27 GMT\r\netag: \"69fd5e73-3872\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 679x942, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d5c7708d248536ce045efed256ef14a","sha1":"ae47b63e1768ad06dd57c0ee7224f8ff3b8fd2b7","sha256":"57a5e17d684c06286cb4457cc75d2c3ea102238ffeea32f5aa1f39a28672c6ac","sha512":"c6bc6a2e8d323726d70e9caeefaa48ee08a364babd2b1c3a6a530366094078aead86e846f8b4bd0cd7e7b78d0c130d9641fee10c9f0c67d3319224e7fcd6569b","ssdeep":"384:E+66Nhw4xMdWZUR7fTFJSCdBmIxYC1Ub4vkFIws:E5mz8xfTF/HxYSUb4vh","tlshash":"0852bea1fc75bfa9bc961c913321e7c753d68778e0eeb2ae1a354a03e105385e2c2d15","first_seen":"2026-05-24T19:21:45.377641Z","last_seen":"2026-05-24T19:21:45.377641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/e52a66faad8d87ecd987b77d17d9ab11530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/e52a66faad8d87ecd987b77d17d9ab11530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29042\r\nlast-modified: Fri, 06 Feb 2026 23:45:48 GMT\r\netag: \"69867d2c-7172\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29042,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f0fc8fce183d112ddf475d05a16e2da4","sha1":"86809c10877f4e6b42c70655cf33b9d82a2a41a5","sha256":"b87ba9eaafa7bb2f6975401a062410d393dc7cb8bacd2fad7c77663f7250cd9b","sha512":"1734819f0604c049b8da57c4362373b1822749471597fb2a016c1ef49d9dee7a8bd53a4e1ac4427fefec36d0ed70e7a6f4b7689844731db9ad9de503a1921324","ssdeep":"384:MvsymJ/YM6Bl1Tp3khcs3grBUEvm6a2JpYaMzF6cmRIijEg7d5t/zpNMYH:hYVNZA7KpOFXh6cmaib7dD/zpNMYH","tlshash":"46d2e14376a56cbc6e86cb37fbe6c50d4608695f193104afa11aec8f825e47f1072ed8","first_seen":"2026-05-24T19:21:45.378732Z","last_seen":"2026-05-24T19:21:45.378732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ng02.cc/","fqdn":"ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-24T19:21:17.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 00:45:24 GMT","end":"Sun, 21 Jun 2026 00:45:23 GMT"},"fingerprint":{"sha1":"A7:5D:11:0A:FC:D1:47:CD:1B:44:7E:D4:A7:A1:54:85:9C:4B:6D:0C","sha256":"B3:F3:8F:8A:B9:B1:F0:89:1B:B6:F0:9F:63:B0:EF:08:3E:6B:4A:ED:8E:A2:9C:52:54:77:14:88:76:25:65:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:17 GMT\r\ncontent-length: 0\r\nlocation: http://www.ng02.cc/\r\nretry-after: 3\r\nx-cache-status: MISS, HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":339170,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":318,"dns":1,"connect":156,"send":0,"wait":157,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ng02.cc/","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":80,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-24T19:21:17.935Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Sun, 24 May 2026 19:21:18 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: https://www.ng02.cc/\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":339170,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":245,"dns":88,"connect":156,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-24T19:21:18.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: public, s-maxage=300, max-age=60\r\nvary: Accept-Encoding, User-Agent\r\nx-device: desktop\r\ncontent-encoding: gzip\r\nretry-after: 3\r\nx-cache-status: MISS, MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":339170,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7680)","md5":"a003e2d8a848e2a2c8ee1d25c43b52a8","sha1":"1a731e7744d2d9fb60d16107c2c5d80007f7ac87","sha256":"55521fd721a648337dd9254a74cdee253afad51c0080194a10f3959043f0f9f3","sha512":"dd2736708eadd31dc16366e8e016048acb467da24d551a9d1b597d1e278bc35ae92230079a53c8e225efeed5241e8e3564a0f7a0c5c4360e6073b2122d1d8046","ssdeep":"768:h+SoRk08xyaL0IUtWYdzxVRVCFuBNwymWcNVhHwF1mP7Gu4NerfeuEiUiG4yobXL:hFMaL0IUtWg5CIwym/vhHCmCAy8XZyY","tlshash":"62744461cb52045a5537d6eca0a29e9bb120465be73b8a44b7ac5233ffce4737b112cc","first_seen":"2026-05-24T19:21:45.380368Z","last_seen":"2026-05-24T19:21:45.380368Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1732,"timings":{"blocked":325,"dns":1,"connect":155,"send":0,"wait":1082,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ng02.cc/ng02/988650d919414eadca54159eb31c67ab530.webp","fqdn":"www.ng02.cc","domain":"ng02.cc","tld":"cc"},"ip":{"addr":"38.48.226.182","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.ng02.cc/","date":"2026-05-24T19:21:20.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ng02.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 20:17:32 GMT","end":"Sat, 20 Jun 2026 20:17:31 GMT"},"fingerprint":{"sha1":"91:B5:25:BC:60:E5:44:DC:D2:72:E4:4A:6C:89:A3:6F:99:38:49:D8","sha256":"6D:B5:E7:48:76:86:1F:DB:29:10:E5:1B:D6:D4:28:1D:61:B5:6B:57:86:39:45:04:D8:45:10:D8:30:EF:C1:4D"}}},"request":{"raw":"GET /ng02/988650d919414eadca54159eb31c67ab530.webp HTTP/1.1\r\nHost: www.ng02.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 19:21:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5508\r\nlast-modified: Wed, 18 Feb 2026 12:29:59 GMT\r\netag: \"6995b0c7-1584\"\r\nexpires: Tue, 23 Jun 2026 19:21:20 GMT\r\ncache-control: max-age=2592000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x337, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ebea47cb1ee458acb11752cc678538f5","sha1":"6407c81f95c271b32f7e8fcd31c8178bfe3503e6","sha256":"7057c7bb2af4e4aca4ebb39db631f6c3b4ef9dee1eb9c07a582caecc66e4d82d","sha512":"f99fe6a8efecf9d446bb48cba59c7259dcdf67490ec33b3cd9507c12254c22dab6b0f860f18596ca672b6c84c121aa08797f42c3281cb47d42e24b77cfbfe23d","ssdeep":"96:KY/cfwiY/45o5oYRVpgqa373Qo7PPGf0MguEtb0TNZMLZuK5gCUmmXFOXMjt8BjW:Zkh5ZYZi3DzzPG+tijSQK5mZXAXUUW","tlshash":"11b18e7383469d091ea6bc46a8a66df87815f4563373de3e5b24d19b04308a9f02658a","first_seen":"2026-05-05T00:50:00.760803Z","last_seen":"2026-05-24T19:21:45.370951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"www.ng02.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}