{"report_id":"2ad8d95b-53c4-401d-bce4-8ba59329f7c6","version":6,"status":"done","tags":[],"date":"2026-04-11T04:26:18Z","url":{"schema":"http","addr":"gouzi.cyou","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"172.67.134.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"title":"Gazprom","dom":{"size":249197,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50222)","md5":"e493d9ec2fad668a9701698bde48afeb","sha1":"0a42c05dc3271f77a0cba8375ece845efcf3f65b","sha256":"e1e94ffb0e3b26e2151681c90b12711d0b6807e498d00a23203887dbc9e89fd8","sha512":"abb6fbc94288d725dc421296fb6bdd94025da68b049583809440faf4c0b9b54d9116c201c06a41036ccb767395a935971ce01e14afc1d92627711101efbb19a9","ssdeep":"3072:Fr25RM+EnZlIlCmIkH3I0g8IcVHIsO7IiTaImsLImByIp7uA3JTIJkY:Z7uA3JTIJkY","tlshash":"56348565718819e1481bcfd4ecf4fdae70e6ab6b990ad016b5ae15608fd3c7cb80e490","dom_hash":"domhashb4f1e816a838b85a788a36110afed253","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gouzi.cyou","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"172.67.134.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-16T04:26:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.kaoya88.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.gouzi.cyou","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-08","domain_rank":0,"first_seen":"2026-04-11T01:17:34.782873Z","last_seen":"2026-04-11T01:17:34.782873Z","alert_count":34,"request_count":17,"received_data":1063783,"sent_data":9779,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gouzi.cyou","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":305,"request_count":61,"received_data":5506090,"sent_data":29911,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.kaoya88.top","ip":{"addr":"172.67.134.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-29","domain_rank":0,"first_seen":"2026-04-11T04:25:15.419159Z","last_seen":"2026-04-11T04:25:22.207435Z","alert_count":9,"request_count":9,"received_data":235391,"sent_data":4032,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-04-08T16:50:56.499582Z","alert_count":0,"request_count":1,"received_data":116674,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":3142,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2026-04-08T23:21:14.331382Z","alert_count":0,"request_count":1,"received_data":59178,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gouzi.cyou/assets/useArticle-416a6424.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"491aaaeee15c649ec5d6341a8748fed8","sha1":"f5bdbe223347f6240dcc7f60783b311e36442104","sha256":"9d905cf74f9b9ef49b13869a5228ca4c257f69e4fbee6c8bd8bebbd1acea0170","sha512":"64440ffa07b48b2a69f98749d15e8b76c72d40dead14d0906c6a464cb900a08be23088979ee9b7b370bf7da596fbf5119c03b4b0c525273120a1ca993d9cfb2d","ssdeep":"","tlshash":"bef00c7470689bb89372bcb08cbe314c02612b00fa0260c4270eaf9c19f669693a1f5c","size":616,"data":"","first_seen":"2026-04-11T01:17:14.171309Z","last_seen":"2026-04-11T08:05:57.751606Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/product-1f4a3203.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d7101c2cb93ef1335b0030068030e0bb","sha1":"d057d1f244704cd1132a8f4386afa64b43c6ab28","sha256":"37cf0c9a7cfa1825eb3621a0d0f9031eb80b08f865ef12f6496980768d913352","sha512":"ee418f291884517256b397d30555959f794671b2d1f1fad0cbc4484bd1d4f3945c38eec4eb2961299f2891e021a9af2fe4b84d8a83a0770010943aa9f7c85fe7","ssdeep":"","tlshash":"29017b4f6c6ff3c94117e9b09020ce058f19ac20fa0c47f83f547b1176c218a6289b34","size":685,"data":"","first_seen":"2026-04-11T01:17:14.176146Z","last_seen":"2026-04-11T08:05:57.752155Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"17b4a1ac99cbefe23d1f621823aaf892","sha1":"a92639e84296ffaabce1e35477837ec6ce985889","sha256":"b8854c105a17a34f70428344d249a47f7ca6b149ec58d8aec9fc3e5cfa474a32","sha512":"664b74692e5cc59b8d268ec77c5f5e4b1e631043792608866128787fcfaaea60c5da57e5ca83fd278022937aecde9fa849476ad5bac30d4cfccd2dfe97c0ba90","ssdeep":"","tlshash":"ebc080c4a0d62d101511541014bf24d890244026744c57029dd4d8482d934f44133e98","size":149,"data":"","first_seen":"2023-11-01T14:09:04Z","last_seen":"2026-04-19T22:22:01.991375Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/InvestCard-538387ad.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"714c2eec71c8a8f51abca31cd9063b67","sha1":"ba935ae6e003213ac2d85f337d58f887ecddf2b3","sha256":"79fa6ceff40bf588483f92ae824cb5984bd5d252a4a60e274d3b23af76ccd1a7","sha512":"de9b0a58e339f6432c442480f9389af0d9f1f132ec79dfead9097a204d96a3a278ecdb7c1451735f92af460fa97ffad0dd68e8f755d27d4426e085dd98adbe83","ssdeep":"384:SzJ58J5ydYHj96Ra4xJu1LJtf+EVRuwbg/imzi1/X5/Xq/Xt:SP8ydYp6Ra4+1dcEVRuwLM","tlshash":"6cb29461d032c939e5fb78a0108c814476192feed2a18476b0fceb465b87c7c575e7ae","size":23401,"data":"","first_seen":"2026-04-11T01:17:14.191627Z","last_seen":"2026-04-11T08:05:57.744471Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/route-block-83d24a4e.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","size":27,"data":"","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-04-19T23:46:53.555892Z","times_seen":632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10568b780a0d314b06f4ae6be4a339f7","sha1":"2c0ba855511dbe4d8ce3bf061282976a34fd375f","sha256":"97611d5571f8e91da4b84e7fed039c19126ed0d05a358286b229ee99b23e61d4","sha512":"f1d5ba897fc7e7481668825a9b1fc036114a015a88759f3df8a3f52521648c16dcf66dd17116a513a7ccbc3f4d62eff48fde1b11b4905917762aec42d1009705","ssdeep":"96:nfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHs:nfkdoq1aBIBksXZhu8M0k9X+T60YDs","tlshash":"beb1991b69e56468a703b0ba8c3fa406b521042f099cbd407e0cd7769f8953daab4edd","size":5554,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-04-21T13:48:47.907104Z","times_seen":408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-04-22T10:16:26.687557Z","times_seen":449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7d4fbff71549398ceffe8189db57c5b","sha1":"9ddc56ef19489e0d21f74eebc29c92b469ae6fd4","sha256":"ca663f53ed1b54e1f40c4b17ba2257f76179690249527bf88d268d9d178995a3","sha512":"bb5e60f5eec27743c6cfb79705632ad071bd6cdfffb44d8f0ce4e2c884c1bb531e06e6aa80bee647986c34bb4bad620495cd48c61e8d30441914687444b03b1b","ssdeep":"","tlshash":"e3f09e1b1886b07e53d760b6593bad5b322a11472c5119077d4c80242fe083d7ef5fde","size":623,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-04-21T13:48:47.907832Z","times_seen":408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/index-a546125e.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"726bbee4b0072ca9ed640173907ac1ea","sha1":"b5a4c423fd02a02cdc5e82843df13fc8124e0f01","sha256":"7323ea3f37b87130e068ad84f933c2215e9743c418453ea76c985359f87ff532","sha512":"f93791c74714bba6e2758620569506916d046a5a788dccf09aabb93c1752e7b9b33ba62600973801328dcf46dd891eef14488dd10f2978d7041f0014f6b76137","ssdeep":"12288:pV12QAvRIIDgZ4L50nlWqZ6MMee7pVo2ydUWJRYL:pWIQzLEJwMReydc","tlshash":"e665d1286a2bf354e518c0d7fa3b3c84c59de58aa00764d14f754bb31ba1792ebacd13","size":1421874,"data":"","first_seen":"2026-04-11T01:17:14.215691Z","last_seen":"2026-04-11T08:05:57.777296Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/BaseLogo.vue_vue_type_script_setup_true_lang-b71dde3c.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d4c3671fb2e7d141646a68c659571c98","sha1":"287beab403245adbfd1155ecba9c2ed1a00d90f4","sha256":"458ded89d1b0e00f836593f45a356097681bf15d37a0519854370279885264ae","sha512":"340ef136208c05b8834842a4fcb8ec4de0c704499a51fe7b80556f4663f8da069eabc40fd98e2d9ae05790fab8b53ab487ee663c791cbf8c5c964c0b6f4cfe37","ssdeep":"","tlshash":"bdf0c90f5c2a91ff80a659982b47204212085eadc6209a94f2e92374a2418aab01ea28","size":522,"data":"","first_seen":"2026-04-11T01:17:14.181747Z","last_seen":"2026-04-11T08:05:57.747662Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useHome-b180038d.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"180e5534d2ab3f14d143c3fd62836b1a","sha1":"f046ba937c89852b069d89726b6628d4d3adb7ff","sha256":"70d4461732f0c64eb7293a76225725bf96d485754a83d5053ef6a4def30fa425","sha512":"11015156b772218af5067b62443534622d7e6781fcc4e578f381635b282dda2388d7626e6d83fb08e87c0347a56eb39b0f33bb7823589ddcf616dacb0de770c1","ssdeep":"","tlshash":"fb61735873b38074c7b915b016ea0901603ed705dc5ae0cdb1a305555b7bfe6b8dcea6","size":3461,"data":"","first_seen":"2026-04-11T01:17:14.180948Z","last_seen":"2026-04-11T08:05:57.746452Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/BaseUserTab.vue_vue_type_style_index_0_lang-f8ccfa6f.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"92e431194a14ae5f6f8b7e9dd6ba2954","sha1":"3c10e40f980120ee9d3ccbacb6010a331a05d3e7","sha256":"538956b64409881e747c5b59a16abe5c109c36626d31689b03d0dfe45d0dfed5","sha512":"3e3c187130dd34d952b600688053b37ec4125d00d696ded645db47bfc4cd6954aa79cda0ff153fc479f211c521437000ab2796380017a3e00a88cec2282576ec","ssdeep":"","tlshash":"8e01c5dd58e5cbf9849306543e6b2050d0958f94db298d45b0ec1a22279b8b1b6de73c","size":724,"data":"","first_seen":"2026-04-11T01:17:14.180257Z","last_seen":"2026-04-11T08:05:57.739943Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/Rank.vue_vue_type_script_setup_true_lang-050d87ff.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"806bc948c2ac4d6cb3c5dcab74903013","sha1":"c4cd5b23f0f9c790ee41e678d92c6d34982a1185","sha256":"28b16189d4f1bbe83de70392ec94963d59142fa0e543ea70ecdcf50a93bbb668","sha512":"70dbf0cbd3a3bf1d57339ba3aef6f1a67d6cc657610a23c9f5eb8223de4585dd13999723c406bf148a83f3a8acdb473a24aaeb7dc9abbf52bea812bae6993d4f","ssdeep":"192:7SXYZeAjoF/647rsTBuXb76sVL5zrwhmQFMkklUIFn:7SDV6fZAh","tlshash":"4ed1f0416025cabce4f76125b98a9921b184bfc7c566c406f1fd28032feac75979cbac","size":6716,"data":"","first_seen":"2026-04-11T01:17:14.183715Z","last_seen":"2026-04-11T08:05:57.7451Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/danche-fcb091b6.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d3cc98ae6159473ca496a5ec0bcb6571","sha1":"7491d2357aa926474afa9f6c2c1a18552ecc27f6","sha256":"3362b73d436a56e5900cd1e4c5522754b43fc3ea6bd306577e8ba9dd06204d49","sha512":"d5b959c107cc0c665a9bedb96caf5fb2c6b86bc0d73fb02ea27930d847136870e07ce9346c9035a0958ec080d459a78ad01269094e95ecfeba36eb5a5a58b393","ssdeep":"","tlshash":"1511446f780362b0f6715c612aa7805323144b8acf1fd2d572fe4e0193a6d35bf15a35","size":980,"data":"","first_seen":"2026-04-11T01:17:14.1721Z","last_seen":"2026-04-11T08:05:57.756977Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a73c5cae5d436d920f302d21df9b9a3e","sha1":"01939d397680dfaeba4cbd149365b394fbfbed8e","sha256":"f3806633a8d5eee9cd085ac152f7e71f93620317ef183cddeaf47bc93aac6c5e","sha512":"8a16c190a1a2fadefa0a218fda86960e288abf4e7d2c391fabb795b3aa9793c7f445ac6557563e9ceba3d76de0cdf15751964381ec0977cfd2b8b0df1e3d4427","ssdeep":"","tlshash":"0fc08cc5a0c26d002602651410bf25e49034442670481b03cd94e8892e220b08237f98","size":142,"data":"","first_seen":"2023-11-27T00:22:22Z","last_seen":"2026-04-15T23:06:55.609575Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aeed8cee04c23305323c4bbf32df5ee9","sha1":"300d05e3ade915bd52526aa22905cba8b5f82049","sha256":"9b1b7dd121d874420af47ba81288f6424883b97290f8b504b8038d59e3e9d89a","sha512":"65c1e4c92c02877e1aef716dc82cc96803b5409db34ea97b7ed07e1dfd26d4d38424874e71254d0b51a112013af203c4f3131991cdae21ca12a5b039e2490413","ssdeep":"","tlshash":"a8c08cc5a0d62e001a52781022bf28f490244426b8481b038c99ec582e330b09233e98","size":148,"data":"","first_seen":"2023-10-16T21:01:42Z","last_seen":"2026-04-15T23:06:55.613563Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d518e80e496c7eb32ecec50124ddbbbd","sha1":"434c34bb5fd937ea3527f0a9440b7112f202b510","sha256":"a748aab1c17f1a5f8a05d8ae0c3c26447695cb1e26cd21f94db4d4f7e39d81fa","sha512":"5291a720787db62c62551e22df8853fbae707326dece26f5d500685335166991500caff0cc45ee83119ae963d7c46bd72da56cc56d8f4b4240286f212afdc7a1","ssdeep":"","tlshash":"72c08cc4a0d22d001602642064af34e49028402670481b028ca4d8482e620b08233e98","size":138,"data":"","first_seen":"2025-10-19T13:46:59.620579Z","last_seen":"2026-04-11T08:05:57.778377Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29460ee3c98ffe0292f11e1b8e620cc5","sha1":"d134fe4338086f230d1ce1e8d35cb390c24696a5","sha256":"d20bab552d2aa313015bfbf04990a79f83edb08688b4d1fce574f2c502f5b593","sha512":"6d3024639af5dcac01a7382a801882222c8b10ba0f08e65a59cac2b6e0f010e2100e9730818459f5ade3b617c2b581e0f6c238f309a8d350ecea76326959ab06","ssdeep":"","tlshash":"f6c08cc8a0c32d102a0e64a414af34f490384026748c1b028ca8d8682e630b08237ea8","size":148,"data":"","first_seen":"2025-09-19T01:43:04.824635Z","last_seen":"2026-04-11T08:02:17.348332Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8b13f978aa40570c8c40f7d64a2d24e3","sha1":"369af8dea6983f346def39612591f2d4e8afdddf","sha256":"9df2a29fcf1104862647c6d9793b1e10954f0d53ab5be94c90702f21a56f87d0","sha512":"599feab7dad35cabd156570561d296115b6fd31d2190de4d5fe9029239ffce4ea5a656861fca1ac2a817c134272a7aea558d2c15fb702ec2f13b17761824029e","ssdeep":"","tlshash":"13c08cc4b0d62e009616659425af24e49034402a744c1b428ca8d84c2e224b0a237ea8","size":144,"data":"","first_seen":"2026-04-11T01:17:14.207887Z","last_seen":"2026-04-11T08:05:57.7752Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/Task-a58992c1.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5643604c3ad430f05a132aaa6e78343b","sha1":"9a325b70efa2bc970532b9fa7b5d8a39bcb77b24","sha256":"3a140bc03456935cb6fb59d15e38ae2028bac3344324533632f4dca0d93f50f4","sha512":"3aa45c4d8f28905c9dbd9d6774037c42ca1646f39de438b0976b494de555237be2d2e6de4f46543cf22517d91023c21ab397f12a7a9277ee1d7c1a8c6b25ed2f","ssdeep":"192:ZSOgBmLXBmICB7T20wZryzPRs7kUC1+ULpBWvgZg+UtcG+1x0+UoDSrNbMKR30+B:Zaz+kUC1+UmgZg+Uf+1x0+UnIe30+Uy","tlshash":"a542ff06e803e2a8f5f23495a5dd141472f45febd26e8506b1f9263603c28f09bdeb79","size":12768,"data":"","first_seen":"2026-04-11T01:17:14.182535Z","last_seen":"2026-04-11T08:05:57.768275Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5d31ff7e60917b0ed4a4b70d37f66a2b","sha1":"c50f1dcef18065974e84265a1a49bdd0ee29e449","sha256":"aa6fd728eecb263d1055ba5f0b243644492895c8b51fdf396aeb35f2026ac848","sha512":"37b9cf72e1f471ea4b8ab70e1ced41fd251b10d068879907f2f7dd3276ac5c5cd9b0c3b90a731ee5449d42ba3b181ce145207561b4e72ddb32bbf1337361fb8e","ssdeep":"","tlshash":"72c08cc8b0c22d001606641010af24e49024402670482b028dd4d8482e220b48233e98","size":138,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-04-21T18:05:22.165271Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e5d2b2e05705c39e5f447ece72b7daaf","sha1":"d47e201913cdc5e05970b2fdd825466f4d2c098f","sha256":"5e5af724706aec17a5a0073272378114cb828a3ff4e039cbc831cefe7c9bcea0","sha512":"10df444e8f5989daefb17e5ad36637616862ae5ed2879a92e5c003c4dbb13495d3c142dc467c320399c0c54d2fa85d5ba8b97d1703a6d1f5110364a259769082","ssdeep":"","tlshash":"87c08cc8a0c37d002602a51014bf25e49024402674482b028c98e8592e220b09233ed8","size":144,"data":"","first_seen":"2025-09-19T01:43:04.822061Z","last_seen":"2026-04-11T08:05:57.643289Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-04-22T08:48:38.144036Z","times_seen":4739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"44c7cdf09faee85377cf12a065e7c573","sha1":"86b50b31c6d926f4424c3868d2ac6983e6e0ebb7","sha256":"4ee0a0ee09cb2fb26fbff3d4361dbc8412116827df45202522c00337060397e7","sha512":"f145920b56dcfe9b5327e27c241496d14f69edcd9be91b21f74902fc13fe43feed6ff42c0717c3a838b19e99fbd553cd157e952b26823f71060bf9c10e4cefa7","ssdeep":"","tlshash":"0dc08cc4a0e62d105602641461af34e4a024842674491b52cea4dc482e624f09233e98","size":148,"data":"","first_seen":"2026-04-11T01:17:14.211437Z","last_seen":"2026-04-11T08:05:57.774058Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-9c7956e2.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1ac178f5ac8008d775be691c0f0055eb","sha1":"265fd5e971ea5d780200620895b6e3b482ee08f6","sha256":"4bb270c75b2f88497e4d737c6f0eadceafcc9777a08809959052750014a3e0a4","sha512":"81a8027f1678951969af71f7158876f911218e0f909b75a2466e6ec7323b62b79d82ffb88314b6e288c3fb22ff409d70e2c52b3f2088d657b224de0a3b1a3eac","ssdeep":"","tlshash":"bdf0c0056d01c5bc6c96064a1a9520109204366fe36564f8a5df226ca79f4f9793972c","size":556,"data":"","first_seen":"2026-04-11T01:17:14.186449Z","last_seen":"2026-04-11T08:05:57.752808Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useNews-9ec38bce.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e97f422e6e5ca77dfade7c5db792bc8f","sha1":"d89b321d94c867bbb73d91a3da3e822eefb4e845","sha256":"4b53f1431b84648549f9271514420912d4adcd2a8c1a9da80a265899fc648bf1","sha512":"c7866bc23c7965e029342a5e4b079cb880f26ad0b1d239b2d3cc3c3a25aa7ea635c812e7104139a1ed15cc4de351a22afe2c2e31ff8581e392b68a1e027a5e8f","ssdeep":"","tlshash":"a911004eb166d2f861fe1c0c24571128726b5b847931e8c0a3be1a931962cf4e57ba3d","size":916,"data":"","first_seen":"2026-04-11T01:17:14.173007Z","last_seen":"2026-04-11T08:05:57.739312Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useFriendsCircle-3732382c.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5c3594ec119d469d3bc5e96a20dd9d32","sha1":"0cbe3b3277d15cde51828ac4883f53794ab20866","sha256":"492e12a04f6bdebf60229ff96dc40d6039b2ceb0e47d263dbb3c495c237517af","sha512":"64dd472899831f5bf770d14eb0f044346910aaad8896a8314c7d44abe5504e0c4a722f44b60817f220ed01d98b25479599297927aa939cd7e42f3f6c92673252","ssdeep":"","tlshash":"8651b77236b222ead3b330bae03660159aa92f943d16d1d1711d0f058a7cc12d9bff18","size":2736,"data":"","first_seen":"2026-04-11T01:17:14.190241Z","last_seen":"2026-04-11T08:05:57.749114Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/index-ff1ec330.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ad792ba3a8730fd1fd93ecb9cda2a54c","sha1":"3209e53ce53d2392d0b2cb91b8bb68ca65fe805e","sha256":"b98487e0dff5a4727e29c9a77a6dda6a1459b96ac7e414c1087c0494cc72d807","sha512":"c7abff4781016e373be593da669d847c875e819235e13814109a87184dbae597db9ec0cc0e87fb972e0ab7ec9908a274806a6f63cbe0516fed998b1cff12d0db","ssdeep":"","tlshash":"3311236bec95f130415398dc96a80ba3a3cc7dd8213163c4b55e893807641ec703e60b","size":901,"data":"","first_seen":"2026-04-11T01:17:14.164049Z","last_seen":"2026-04-11T08:05:57.762742Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/InvestMoneyCard.vue_vue_type_script_setup_true_lang-132085a6.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7244bebe1cb5e00826e60d7bd9c3f1ba","sha1":"4258b90d6e5ac2916c6b790736775885b1a75843","sha256":"3d766a83541f3b05813428acf2d3ccd4d55e92ef2b54da3ffadba3ae8743fb5f","sha512":"1c44820026da6e77a7c7d965e2c97cecab55820cbeed474970cad5bca8f00ff5c9e225014e35d5ced1ec85d99f2c9b1d8362061655c2df6ba42a26c8f972bb14","ssdeep":"96:FYh4nwm6bh9FAy+6Cwl1YFBESMpRBQEiJMzmWGf+upM3jpm0IMXX0+CcJ0edMU//:qh4nXOhn6hwMFByfQnNBofF","tlshash":"d1d11248b8328774f9b21851e49e7109735c3f8ec453e496b1fc12126beb875e769b2c","size":6261,"data":"","first_seen":"2026-04-11T01:17:14.193435Z","last_seen":"2026-04-11T08:05:57.761591Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useActivity-db553016.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e7d1a7746603a618d09ee23ab3639328","sha1":"940d969de31e11e276060e256efa56c1ead56917","sha256":"a0e30538c7d8e4b796f8df7b62321e49d49f79736d8ab556e9cffbd553e07bef","sha512":"b19a902a16527c82f22ae47b169661793e47ec6e31bafbe16e81b049e8a2e1b3b52ade8d046c2e6bbb51de699f736ee0b9ca17a1b207a3702c39198ffbbef137","ssdeep":"","tlshash":"1521309ab00df37990ef08591816640362892bd46324c4a9fbb50c4e17e6bf9c67661f","size":1152,"data":"","first_seen":"2026-04-11T01:17:14.165491Z","last_seen":"2026-04-11T08:05:57.770006Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"caad72fe48a09f8a060e5dd1477935fa","sha1":"f2b5ddb3021c1d3b5df6a518c7b555a7ffaeba39","sha256":"3097fffe06a687f15fda650f93d6f5303679a4fc78db9645da44a7aa4fa902fb","sha512":"1ad398a20e4693fe3fcd02aa2ffd3fa8f2c7bc1cafdc3778ed28300852491cc74174c17f930f387a3d75c02a35aa21100f56df21ee41f5222850cea0d1edee06","ssdeep":"","tlshash":"b731682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1591,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-04-21T13:48:47.908577Z","times_seen":408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28e056a6989b49de8bf0c6fe7a9078e","sha1":"166889dc07218cf99767d4179177e393a87c50b5","sha256":"5adba9de6f8cd98bd9f208363a88990f71f45bc7eaa3b277fa7fc86d54f0ecbb","sha512":"5fca1b898fe0243788c1e8403086ea2b8f6374b3575b8c71ff971b969f1e1325eb301221aad3fa4f9447bb8df6c43021297674123c156e4fd1a322d5cd3cdcc9","ssdeep":"","tlshash":"acf0ab0b199008319707b17a2a7fec0a1e42201f29646671be0c95109fce97e4664d5c","size":506,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-04-21T13:48:47.911334Z","times_seen":512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c771a56c31bff8ba6299f63241568899","sha1":"3d6509d1f412e744a937e891546180b1093f7ccd","sha256":"c0b3a74335ec3f96e25be399971bafea9e3513f821dd3b4009608de199fd4f2a","sha512":"f859c02090a494b60671d2dea13324fc38d926b315de977edb5889e587917facd9d2e4c1e73e0edb3f0112b5af30b8d05d33a173612c81f4cdbcab5bcf47a03c","ssdeep":"","tlshash":"7b0128e59986483146db31fa2a9e301070318003b908beb0386f15446fdd33ed3f6bd8","size":689,"data":"","first_seen":"2024-11-20T07:54:53.452195Z","last_seen":"2026-04-21T13:48:47.912061Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"779dad81833261bc5bb0a005e1f01254","sha1":"12d7162ceb3f36169373d8935fabfe54383bdc49","sha256":"93230595b6dab54d976a3739d1b5c741f15161c568e4be72acf514dae4db984d","sha512":"3194159f5b7870c1ee051e973be89bc09b272e6dd29a2a8e174cfcda83da4f1c424108051a6dd4131934fa40d09b13ff817d4c401418f1e1cda3ff97cb60fb8a","ssdeep":"1536:kSO1Ejiaa1zoLOIkxUanOChvb6rXhWXvVC1Kazgpk5DXV:ZOxA+/lWWMDF","tlshash":"9943c79cf7e9b02103973472497f541be33bba646c0b8650c526e5883dbc59e9237eac","size":58518,"data":"","first_seen":"2026-04-01T22:36:39.136818Z","last_seen":"2026-04-19T20:09:00.510595Z","times_seen":2344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/tabbar-5-1-88ebdc42.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6f426d1d419eb7c29b054c7ba217aaa8","sha1":"88a040864ff5fcc97b874157809a9d1a5ccb4da3","sha256":"12f422d1f0ff02d2dcd3de682631b23ec56050ff895881306df19ae0003b21cb","sha512":"02407a19a3d1082c613e585050beab002f06f4e6b0bdf47e8b1c2aa45780b00974731190a801308f803a1ea9866d06447fcd72dba7048b9bcef755a1fa1b2959","ssdeep":"768:uVxpvoZ8USsO3E2443m5upG1CrMG/O3LYNTw9Hn9LxpvoZ2UssOWE2143m5upGKz:usO3E29Aj1hOT4n1sOWE24AjK5DT4n3S","tlshash":"6663e07631195ebfaee18862f20a0205cdb1169b530ef299cb94b2b754dd721ec1bcf4","size":68031,"data":"","first_seen":"2025-07-12T13:57:48.771979Z","last_seen":"2026-04-19T22:13:03.047855Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/tabbar-d3508a6a.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3fcbdc68af5369cf65b36be76e0d887","sha1":"4deed386218fc0a821a62364fe297b80131cd294","sha256":"d9a483a03b281dadd0c1346e242ab30a96e16a75f2a5e73af1de99ddd877bd0c","sha512":"5af50ed344ffe274bd2b048a226cd070d9798f3c72fa3feea4d3124ca40cc422fcf10fc47b6da50cba380bd6451353bfa4b35de2e5c2e17560a0109c71cfdd68","ssdeep":"1536:sTJ7rd7AmRmqqm1t2WfFEjI5kP8qT0vl6hkE4lf0qArT0EJTRsEpmKf/gUOsE7T5:sbQ69mem8h5Z7Y0","tlshash":"41c3c8848905d57ef53264425c9c0c42714dbfe3e8198ab6f2f8af5927d1bb8232e327","size":120032,"data":"","first_seen":"2026-04-11T01:17:14.17054Z","last_seen":"2026-04-11T08:05:57.755527Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-04-19T22:13:03.178841Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28e056a6989b49de8bf0c6fe7a9078e","sha1":"166889dc07218cf99767d4179177e393a87c50b5","sha256":"5adba9de6f8cd98bd9f208363a88990f71f45bc7eaa3b277fa7fc86d54f0ecbb","sha512":"5fca1b898fe0243788c1e8403086ea2b8f6374b3575b8c71ff971b969f1e1325eb301221aad3fa4f9447bb8df6c43021297674123c156e4fd1a322d5cd3cdcc9","ssdeep":"","tlshash":"acf0ab0b199008319707b17a2a7fec0a1e42201f29646671be0c95109fce97e4664d5c","size":506,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-04-21T13:48:47.911334Z","times_seen":512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/NavBar.vue_vue_type_style_index_0_lang-286f12c1.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ddd065657e39a046c7f09c551dabd0b5","sha1":"764304c24a7a57765b48850f679fbbb6f06a9d45","sha256":"ddf806880108aa75ae1ee34575076c1bd8c4a09ce3347fd090cb723054f34ff2","sha512":"8c483fab321a538a4da9fbbd0fb56f670553b1b7ce8f49e94d7d03a833e90485eb5cc7f228afcb2d8ef54237c46366fe634c77441a33f49c75468ae0d1435f34","ssdeep":"384:gYroOOhEirCrEh6Zmn+wwPXdxbpKDb3kVCO4CUWQ:gY1uE2kFoLOBLQ","tlshash":"cbb22040e926c77ccab623288d8a6445b24c5fced159f5a1f1fd282b37dacb47118b9c","size":24529,"data":"","first_seen":"2026-04-11T01:17:14.17439Z","last_seen":"2026-04-11T08:05:57.736547Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/TaskList.vue_vue_type_script_setup_true_lang-aa515eb7.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8d11db1f21721ff03b1773392127d338","sha1":"90bbecebb742c5bf6de7a525a30ca4fd19c2d299","sha256":"d3d60ee01bde3ee5e92131d96fecf3584f407433304df681b76b47ceed9d50bd","sha512":"3817e4559969844afdf9031a048c521aefdcc53447275dfc4052f92fad30688a1fd07ce5e7ae5a61645bade25d2fb12316000b5fb6013bd23aec68b224eb7142","ssdeep":"","tlshash":"d8f0c08e7d0e45b3c3598db4a7be046264940266672c51d4f40e0867d311898a87fee7","size":546,"data":"","first_seen":"2026-04-11T01:17:14.200958Z","last_seen":"2026-04-11T08:05:57.767642Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c008f4c90094ab10d30d443db4d72acb","sha1":"0ca6de305dbbd08264c6490052e7dd3c467cbe52","sha256":"9f092faf8fbbf9d15388f049870e2e9ce35aaff94dad5959f4f5a0e2e028432b","sha512":"eff2baf4f27de9ab6497e646d602e1d659a370317db2461a61587094d4fe6e06f04d611f91a9692effabb327ae64d1a76073ecd861f9c70130df4ba710059184","ssdeep":"","tlshash":"acc08cc8b0d22d103a06651014ff34e49024402670486b06cc94d8582e334b48233ed8","size":145,"data":"","first_seen":"2023-07-28T08:36:27Z","last_seen":"2026-04-21T11:18:55.319268Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"65c1f755cd8887bd9adfa92c412f76e6","sha1":"b6b46d53bb3ac68de8bce2a0a1671d56efa6ce8f","sha256":"b88a7374697019ec5206e0a9c40d58a1cd9901bd0e9cec76170a9c153262787f","sha512":"a8f05658606458fc09b133c6438eb1b8de37222fe159e96ff40af7f6e8bf42b9baa9ec22e519b56f8aa6ad8f7b49d316e20ed8bab2ac5b659d2315cd5864106b","ssdeep":"","tlshash":"85c08cc4b0d22d002612681168af34e59028802a75881b528cd6e8592e270b4c233edc","size":147,"data":"","first_seen":"2023-12-06T04:41:19Z","last_seen":"2026-04-15T23:06:55.607847Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/index-b32835d6.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dde738c032bd23c1322d039113d21ed","sha1":"eea8522bd961277dde28e3b18b76eb5f89c04c59","sha256":"38da02e95a12677ba6c2748c6f3ec54aaa65763bc2ad7b75e51611219af2ee88","sha512":"a5b0e646559fdec5da2bc22a01d3c3c0f817e14ab2c6bb724eae04fb8d180d318ae550958700bc66e64417ff85ed09300a68c46818b89ce5d5584b8ab826c186","ssdeep":"6144:gUETf8o37ibfN+kPyFnuIBer/XHG1uqTPPusf519etYxlGqG9l/BmVuK6:EvWbfN+KYMYe","tlshash":"0ce4f851d01ada7cf9b3e25191cca88232992ffac0969156f1f82c674bd2c7c6b8d734","size":675144,"data":"","first_seen":"2026-04-11T01:17:14.1752Z","last_seen":"2026-04-11T08:05:57.754712Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d2b2b050757ba3d24426c42c3e4676f","sha1":"6a3359c5389d7d41f4b9647878b29cf654f5fc63","sha256":"da3abe33f5dd2abd814eb50229fb90d0ab61f7553b0154dae0cf129be7e7980f","sha512":"1c678470e263ef5bc0a5f8b44714ccd7cac330e2a61742d4735579da012208167e3b6672534f5ed217b285ff49c4204cc060936cf2f2d7e1625e10df79bed04e","ssdeep":"","tlshash":"b0f0eb130cd900af6f2710bd2b3faa1236a41113044ac020fc0e8720af20e7c1724acc","size":656,"data":"","first_seen":"2025-09-10T03:49:42.458429Z","last_seen":"2026-04-21T13:48:47.915464Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useCompany-18868465.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39c41e30326830b6af18f9728e9c7298","sha1":"73a0c4b1a3f42ddf976b79f0dff9f0948fb5fc24","sha256":"657747e23be2e124bec996278c82807ddcd72cc41a82f05a6e5e2eb2cbc8a2b4","sha512":"8628774f5077769808cb82078f96d3bf6734002d4d3493816f6c1d459ae9df103487c9b9f459dbd5b7dea5c2cff367f8d0dff8bd7c9333d245ae30b92e7e509f","ssdeep":"","tlshash":"1bd0a725600043b943b7689d537d78281592a0b43b4a86c0891a1f464af6ae69257e1d","size":227,"data":"","first_seen":"2026-04-11T01:17:14.19711Z","last_seen":"2026-04-11T08:05:57.747051Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useVip-b04cf728.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b7f17459df6b88d710aceeeeb6cd8975","sha1":"5884cfcc250b1c16ec45e32876bd405df02431fd","sha256":"43862ee5979d983f58a79f641ee563e60e18b4936fb1282d988b402141e3e8dd","sha512":"d181263752a1cbf85d1aa98dc69a1008b93543f252b147f19ee45b4a1778581409f2eb7600cdd5cfdb54c8c9faf1663347b36bb984cf460acdd388ab2e029382","ssdeep":"","tlshash":"ec5164abf178057a4bf90c78a8f9128711702304f84191ea52972f418f6bd118ffaf0a","size":2986,"data":"","first_seen":"2026-04-11T01:17:14.188053Z","last_seen":"2026-04-11T08:05:57.76355Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"049972a36fef115e27668058d5e950c5","sha1":"f02b1ba8ccefff95b823faae20d077872c3e8516","sha256":"2223f389d74edec8bfcdd49f10a386022866654a89922c72d1606f92fe8c1dff","sha512":"dc32620fefac17c5ab674479cc13faab3bda3df0ade320dc87d80e39ec3ccb06daee24a0a389f2764ed3ab79dbea842d701abe6a18eb788fd197ca1b9f7274d2","ssdeep":"","tlshash":"e5c08cc5b0c3ad102623a95010af34e490245027784c5b279ce8ec883f230f4823be9c","size":156,"data":"","first_seen":"2025-10-19T13:46:59.500763Z","last_seen":"2026-04-11T08:05:57.774606Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"421efed211514571d72a14276edfde2d","sha1":"97a8c92c153465f97249bc9a1454856cd59fae04","sha256":"0eaded59f36462b5d3498a1ff3db4c8f5ea81650fb451241ab9313502be0fa60","sha512":"10085b2bdbdbd08ddd53111b0aae17483f9980cf5a5488b4d2e1a79b67d8228cf5ee249e5a3cbf44ffd2fc969b1eda57a0ae35c678e61ca845e1d854d0ec3c45","ssdeep":"","tlshash":"e8c08cc4a0c63d002602651114af64e4a0244026704c2b62ad94d8482e234b08233e9c","size":142,"data":"","first_seen":"2024-04-30T04:58:08Z","last_seen":"2026-04-15T23:06:55.607193Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/#/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e78c1f258f3b0ae5996bb4f66121b1a","sha1":"e98d398efad79e8b5baceb5a86c508fc23ff8df5","sha256":"6334dfdc681a227a28ff9ca0d4966d3e974157148466c09b0ba9e01feb52a028","sha512":"2effaa7621f4047ae94082e1fadf7b4c8c8d43fa4088bccb17769a224011958715b6cac0e042b4004490f983c229b8c5d2fb24dc5de62c1e7ff70c8b11c8b180","ssdeep":"","tlshash":"3cc08cc5a1c62d122a12641116af39e4a024802670881b468c98d8592e230b0923be98","size":144,"data":"","first_seen":"2023-11-27T00:22:22Z","last_seen":"2026-04-19T22:13:03.182972Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/autoplay-186da9d2.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5873554d215113ef0704001e22da8a10","sha1":"5d6fd5597e7c9b43d767de8da0730edad43665b5","sha256":"a8b3e94f5833e9df419e7b6e0cf45965e23ea3a972ab4787315205a0758e3474","sha512":"7d584d5a0091c77c7144f1c7a982e9e72b06c109ad17ee18483567ee0bdca521605d092f154ff66eb44b851f8cc2fa910e6a3fe846a42c0c4f377772c42b1647","ssdeep":"1536:UvA+DqolxUdfGB+TLsU0mRCsdRPQhjyrjzVPeXV/wTmBrvl9V:oD8RPQhj6Ip1","tlshash":"fb831a89b224b17706f75a8b82b5c21172b44948f805d4e4b1fd5dbb486e98813feff8","size":83129,"data":"","first_seen":"2026-04-11T01:17:14.179308Z","last_seen":"2026-04-11T08:05:57.741484Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"api.gouzi.cyou/api/user/app_info?d=1775881556098","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:56.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"OPTIONS /api/user/app_info?d=1775881556098 HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://gouzi.cyou/\r\nOrigin: https://gouzi.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:56 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://gouzi.cyou\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFYdGvlHh2QC%2FDDMRP%2FWA3Yr%2FgxDrvdRAlHE%2BIUCtqTfnsqWtlmkLTQSZYzQ0Kx7vU%2BrUsdw4Gqv4wf2QwYtpS202d8OAjx%2F2dzCtssQtVxX6E5H0G7fWwOiFMVhV57SPA%3D%3D\"}]}\r\ncf-ray: 9ea73aee4ca25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T10:09:22.674326Z","times_seen":14054606,"resource_available":true,"data":null}},"time_used":491,"timings":{"blocked":99,"dns":77,"connect":3,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/api/public/get_lang_json?d=1775881556843\u0026lang=en","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:56.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1775881556843\u0026lang=en HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://gouzi.cyou/\r\nOrigin: https://gouzi.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://gouzi.cyou\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivPvrgKHvPXyLkYl6KOtgmQUYt9yNHRLxv3Ga13eizg2k3xVdV6u9Jxw%2FEDVUrjPU7301rwuC3iErCfm0Cg1eNp%2BxBb7KGIdbU5VLwRuDbn0J0TryXt2IorydYzAKzy%2B0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af25b9fb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T10:09:22.674326Z","times_seen":14054606,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/api/public/index_info?d=1775881557330","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /api/public/index_info?d=1775881557330 HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1775881557330\r\nst-ttgn: fa9ae987aa29aeef9d19360121789264\r\nOrigin: https://gouzi.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://gouzi.cyou\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Phq4KWYhu4rISuUOrBjmVMIRb%2BmTGwL1XpS5Dy00mvsl66wA8DNCp3tpI4i2z1t7qNp5KgPw97rYAoJA126EF0YOmhjvp6ugLIP%2B6iTBqE417nl%2BmG1YkvvTgndIy5Kcnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ea73af65d8db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5628,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7f6f39aad630f8637b5c5925ed5b9ad0","sha1":"859d01ed2ded2529046b9bd44cc625913b8ec3fc","sha256":"4b17eccf18e84da23a645f6780e3dd449991344e033094acbca1ecfb6e6bbdb2","sha512":"62e90943d952330dfa6d862dbcae3b577f7fffc18a8b38deca401284480398ee39c09b9e70563d6d5633d9231b1c8435af03aa62ccd0eec3440c50b0ee02755e","ssdeep":"96:I/GyQMAhgvXGr+mHr0ilrIK1rDGzrgHNrd8Zr02g9Przipr/2eTzf6aiY:I/GrMJXLmIiaKZGAHH8vg93iE27","tlshash":"e0c1a1f1716e5c1116f12fd27fcb21916aadf06b1dc49fa4ce6aaebc4194023122bc66","first_seen":"2026-04-11T04:26:27.523719Z","last_seen":"2026-04-11T04:26:27.523719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/index-b32835d6.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/index-b32835d6.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-a546125e.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-a4d48\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TWYzRe0QFzGSduRVEpxhc%2Fk9Bj5BboozPNXcIC1fsPf1Q%2FRoAzq8QK06Hx7182eXKTbSi8MJDvlSfkEDK8qPsTz9liNISL211Kinwiok0FCWZx2queq3M7KkppOs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afbdf9ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":675144,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7dde738c032bd23c1322d039113d21ed","sha1":"eea8522bd961277dde28e3b18b76eb5f89c04c59","sha256":"38da02e95a12677ba6c2748c6f3ec54aaa65763bc2ad7b75e51611219af2ee88","sha512":"a5b0e646559fdec5da2bc22a01d3c3c0f817e14ab2c6bb724eae04fb8d180d318ae550958700bc66e64417ff85ed09300a68c46818b89ce5d5584b8ab826c186","ssdeep":"6144:gUETf8o37ibfN+kPyFnuIBer/XHG1uqTPPusf519etYxlGqG9l/BmVuK6:EvWbfN+KYMYe","tlshash":"0ce4f851d01ada7cf9b3e25191cca88232992ffac0969156f1f82c674bd2c7c6b8d734","first_seen":"2026-04-11T01:17:14.1752Z","last_seen":"2026-04-11T08:05:57.754712Z","times_seen":9,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useFriendsCircle-3732382c.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useFriendsCircle-3732382c.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-ab0\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZt4YXwZ5z1NV0p31H%2F%2BZfIFQcO7JRNhIYcA4dZVinH%2FTOHIO5jUa3A2AgowogDEuA8axgOi%2B%2BYJzm6ObZQRcYs2SvNRHsEzlc9qKbIAsXBMg1XW0Yca6Rze3oN2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afcb801b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2736,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2735)","md5":"5c3594ec119d469d3bc5e96a20dd9d32","sha1":"0cbe3b3277d15cde51828ac4883f53794ab20866","sha256":"492e12a04f6bdebf60229ff96dc40d6039b2ceb0e47d263dbb3c495c237517af","sha512":"64dd472899831f5bf770d14eb0f044346910aaad8896a8314c7d44abe5504e0c4a722f44b60817f220ed01d98b25479599297927aa939cd7e42f3f6c92673252","ssdeep":"","tlshash":"8651b77236b222ead3b330bae03660159aa92f943d16d1d1711d0f058a7cc12d9bff18","first_seen":"2026-04-11T01:17:14.190241Z","last_seen":"2026-04-11T08:05:57.749114Z","times_seen":9,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/api/public/get_lang_json?d=1775881556843\u0026lang=en","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /api/public/get_lang_json?d=1775881556843\u0026lang=en HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1775881556843\r\nst-ttgn: e5c39c067fc769294bff43ea7730f4cc\r\nOrigin: https://gouzi.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://gouzi.cyou\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8TUXqlhDUvX0NeozmP2PwnKIPECkAyGcQe6ofmiewBVeRNy8LS8vgW%2FWh6i9fVOPowJ1yIcMvq%2FmknReP%2BjP%2FKa%2FRJ%2BVGWd7A3fzpRVcFro49Ia3nuUxM52asVTzWKi9qg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ea73af41c7ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25666,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1355ce33c39b5b3618e1e0232f0655fc","sha1":"a8c2ec7d85bb2a29741867ede1d2f6888835e20e","sha256":"24f345a6f1376a5596157cbded27fc59a64484cddfcb101d919a20898e47a474","sha512":"67102d5fde8a248304926fe79cee02d5822e88de1b7b7ee112306cf969196a4abf04582dafd4b77be946f1ecf4d34a8f80368f11bdb2f14c5742058e67a20b2d","ssdeep":"384:/PvNQBAT0andjWglUdz6B4BlCqcP8va6N+UdUE/2KyKBqfGSu/eLX7CA7xl2n:XlQST0aZWgqcPgfuE/2KmzRf7Sn","tlshash":"7bb2c74f720a1db3afd35bc1789b6d0765f951c31690084d4cdeca2c12adf99b22f19a","first_seen":"2026-04-11T01:17:14.18939Z","last_seen":"2026-04-11T08:05:57.754037Z","times_seen":9,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/index-a546125e.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:55.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/index-a546125e.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-15b232\"\r\nexpires: Sat, 11 Apr 2026 16:25:55 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZzTvygJ34JxfJIW0%2BLr1Lh2zbJM48koIeY0KwKlgHEsD3U5C8uq%2FI1B2oU4hRb5LttNihuKnOb%2Fs%2F7sS0s2LzUZBcbAqOqctB6%2BWKBuszUraJ48bhsm2Y2KlVMmJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73ae6dda0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1421874,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18617)","md5":"8b572747cabe0cf1be1b00d6b780f678","sha1":"3d24ff73a130c691edd012b3c312a73939a3514d","sha256":"a6d4b11dcc2ca11b3e81d1e0fe67b088d4dcf47c793f2052ec18797a12e8e568","sha512":"e37180f230a85f1fe854ae6e5b697f83f464d549be8da3763ece7f18fa1352360271ec41b8469691834bced6027de1f6e9fe2f8a2319b2c5070a107d55b209da","ssdeep":"12288:pV12QAvRIIDgZ4L50nlWqZ6MMee7pVo2W:pWIQzLEJwMReW","tlshash":"562529282a6bf344a419c0d7fa373c84c59de18aa40b64d15f754bb31bb2753eaacd13","first_seen":"2026-04-11T01:17:14.199162Z","last_seen":"2026-04-11T08:05:57.765877Z","times_seen":9,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":572,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/NavBar.vue_vue_type_style_index_0_lang-286f12c1.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/NavBar.vue_vue_type_style_index_0_lang-286f12c1.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/tabbar-d3508a6a.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-5fd1\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0oxL2ocgqYdXYQO29wMRsw2FD5pd3ZWBjBy99cp7aVxicahU558KUXk7aLq0YBWvq7U%2B8lWJ6RMoZpkLVHVUVKtoBsXXIvRZ6cMpZeBj57tB1rvbdBzAObKltiZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af7de20b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24529,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (24528)","md5":"ddd065657e39a046c7f09c551dabd0b5","sha1":"764304c24a7a57765b48850f679fbbb6f06a9d45","sha256":"ddf806880108aa75ae1ee34575076c1bd8c4a09ce3347fd090cb723054f34ff2","sha512":"8c483fab321a538a4da9fbbd0fb56f670553b1b7ce8f49e94d7d03a833e90485eb5cc7f228afcb2d8ef54237c46366fe634c77441a33f49c75468ae0d1435f34","ssdeep":"384:gYroOOhEirCrEh6Zmn+wwPXdxbpKDb3kVCO4CUWQ:gY1uE2kFoLOBLQ","tlshash":"cbb22040e926c77ccab623288d8a6445b24c5fced159f5a1f1fd282b37dacb47118b9c","first_seen":"2026-04-11T01:17:14.17439Z","last_seen":"2026-04-11T08:05:57.736547Z","times_seen":9,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useArticle-416a6424.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useArticle-416a6424.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1AA4FzzViCYHf%2FQsfT9pCTNoR38Rqp7ge4P3LleTn2KB%2FFKdH6hDR2tCaoqAkEeBez9z7XRiiXRga8A23CHJc7XvRIhQPiCAi5Iw8KKKNcTNO5imvnGIVrwNobdZ\"}]}\r\netag: W/\"69d68056-268\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73afcbfffb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (615)","md5":"491aaaeee15c649ec5d6341a8748fed8","sha1":"f5bdbe223347f6240dcc7f60783b311e36442104","sha256":"9d905cf74f9b9ef49b13869a5228ca4c257f69e4fbee6c8bd8bebbd1acea0170","sha512":"64440ffa07b48b2a69f98749d15e8b76c72d40dead14d0906c6a464cb900a08be23088979ee9b7b370bf7da596fbf5119c03b4b0c525273120a1ca993d9cfb2d","ssdeep":"","tlshash":"bef00c7470689bb89372bcb08cbe314c02612b00fa0260c4270eaf9c19f669693a1f5c","first_seen":"2026-04-11T01:17:14.171309Z","last_seen":"2026-04-11T08:05:57.751606Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/upload/img/69d685258ddd.webp","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /upload/img/69d685258ddd.webp HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 216704\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:41:09 GMT\r\npriority: u=4,i=?0\r\netag: \"69d68525-34e80\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d90ZOclAe4vVuLO80Xrlp8FMOKt0%2Bkq%2FDiLGI%2FLB6cS4ttMM38LW4Z1hI1gibyoM7f%2BIcYQOrerCWuL7X%2Bwud9M5TaNRSDekxxzO2FK4lO4zhYp0BnfeYc5YXt8%2F1ceKWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afd7853b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":216704,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1012x645, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4bc64875afdcbee7ea13a51838f9f8f4","sha1":"a0c8941abc57e418b16d1182c22c05b059aac3c0","sha256":"8fb23a815fe3b974d635c24fe51aa0d7e5147fc2a5da7ce060eeaaf8879c8fe1","sha512":"0dc9d0b45ddd8b113d909c17af3a7e0fc4399cd82fba66bf001026028f8b0021646e2e3413289be5be4ca5bb28114d2a0a66a0350386622a624cdbd319a3e2e3","ssdeep":"6144:GXSYDKlaBfHfzc6Vq6+vXMMmM7WOH0rS9u7:MGlaBf/g6VGWMXUp7","tlshash":"f72423c0e3ed84af4ad59c68599a183c5973657c822d501d4472b806cbffb7e3b22e1e","first_seen":"2026-04-11T01:17:14.185011Z","last_seen":"2026-04-11T08:05:57.750912Z","times_seen":9,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kaoya88.top/upload/img/69d685aa910d.webp","fqdn":"api.kaoya88.top","domain":"kaoya88.top","tld":"top"},"ip":{"addr":"172.67.134.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaoya88.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:13 GMT","end":"Tue, 07 Jul 2026 15:30:12 GMT"},"fingerprint":{"sha1":"B7:1D:1F:B6:C2:35:81:CD:CB:CF:17:5F:37:30:62:B3:96:F0:B7:86","sha256":"19:9A:3F:14:79:5D:CD:07:FA:5C:35:28:66:17:9C:AF:C2:B1:A6:2F:EC:D6:88:D6:C0:48:24:6A:B0:03:8B:99"}}},"request":{"raw":"GET /upload/img/69d685aa910d.webp HTTP/1.1\r\nHost: api.kaoya88.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25426\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:43:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69d685aa-6352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 67\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4sigrOf4pyAHwiMlqbzUklTu8%2FmZzL5NZOACTUyvV%2FkRNE0WFCMA1qMcTHZPOypj8a2wn6EoXyDsTSuKkB8oepRjhzpum5hD1ol9bSztynM%2BAfJ1B%2B0a1G0QNSv956ozOsU%3D\"}]}\r\ncf-ray: 9ea73afdfe4f56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 384x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82d0ced2f4af7c2a02cbdf02f4ccd468","sha1":"7b4f7c7c4e47fbd881817c9523144325b844a24b","sha256":"1153417f0b5032e7c475ef0c5252f83bd353df4844fd5971693a34c0c279ba14","sha512":"9fc6f0e78bfe94ef51c66ed711dd3a58b69f9b774b956a413b41d131c94a7915e3fd0dd14081d3a1463571c6e48e709b380fcf54031e93629d45d0111dac3f51","ssdeep":"768:L0dzqZvyf9XOJt9DTlYNEH6SPEJ17qZb2D716xrdDm6ZTO:L0deRiVgt9b6YC1hn1wrx3TO","tlshash":"89b2e0bbe7e1da031037bc3f509d1558eb0da6a5a09884d6927baa2d1118a413e94cab","first_seen":"2026-04-11T01:17:14.167593Z","last_seen":"2026-04-11T08:05:57.73759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":52,"dns":3,"connect":1,"send":0,"wait":10,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.kaoya88.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/NavBar-faa64b88.css","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/NavBar-faa64b88.css HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 01:32:47 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"691686bf-5c7e\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dqMP6hSeDO02UJjE1af5wBS1sNvnUD%2BRYDY4t7U%2FBoXKUjXIPHLYg5EBOxiA%2BuVn9YJJn61DyK1SDVxXqvVzuy7a18UkT%2F7Iz1Xouamn%2FS0lsWg1GFFZg69iF7Pu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af56d1cb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23678,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23677)","md5":"468f2ddc6e3aa1b8eaad881853ad4eaa","sha1":"3dc5d872bdf5b920b14a9785be130086ca981ff1","sha256":"faa64b884a32121e72154c982db040a08bffc528d5f6605f6355486a31bbc7a8","sha512":"562cb73416ff54d30da51daa11b726bec115156c4359c701af70648563a3f68b876aaa59cbb0af5aa2b4d207de044f31919e59c492a8a8c15e7a2b4b1fe4fc9b","ssdeep":"384:9Qus6Dn1lvW04hbGC2WNuf1BVyGQ8ApopxgS3JS57:eu1D1VN0bV2WNuf1yGZlL+7","tlshash":"16b274e403a4b33cff1fa41666ed8ac92e149209c237f9599e017336d1df29716b9d88","first_seen":"2025-10-16T04:09:02.764428Z","last_seen":"2026-04-21T13:48:47.883081Z","times_seen":149,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/index-2ee7b3a8.css","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/index-2ee7b3a8.css HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3ab21-553\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WbWKgGcfDSJlqovdRpgEcYqigxv7LbAWg9jrsvUL%2B3AGNtdF%2BwhLTU0iNfpV3oXg43xvCC3E%2BEpA7tIwfCdfetUpTg5IKXtLT93q0plmKIx4r9aPhkeulaz9DJE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af57d25b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1362)","md5":"0f5f6fda477235a06349008a000d81c8","sha1":"2431f7ff7dfeac6f2ec44afeb4cd3480abb25990","sha256":"2ee7b3a8a0e1b31b163b33129d9d82b368716adfaadc9f632b97c05fe1937a26","sha512":"e962a30cc904c107b5800bbac6606585b6d74c1d7f0d61eb032bae0a30a77c60d11f232e231bf943f53ee88fa5d971a540ea18881cf1f4855ad5a2e2b7c52f02","ssdeep":"","tlshash":"aa21c478da5090397e12fde5d7d705daf23ca5614c1beb997a18e16083c37f41a13382","first_seen":"2025-07-06T21:44:04.062809Z","last_seen":"2026-04-22T08:48:38.041309Z","times_seen":213,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/upload/img/69d683c88811.webp","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /upload/img/69d683c88811.webp HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86136\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:35:21 GMT\r\npriority: u=6,i=?0\r\netag: \"69d683c9-15078\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NGDZCKUnPc8hCdct0kY2yVfmLOM%2Bp%2FMT7%2BGGlx1zTfKj0LTK3TvP17YCP7F8Ub7JeWJgDmZWWV2tMoziDIJPOVM31m5IzAG7VFcTWb2BXzx%2BTkcFMNYNATT%2FUkslzw1Eag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af9def0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86136,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x1170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c0eee0d9664e4e0261d776bc4a0cc906","sha1":"ff70097b0c40b6f56bbbf350319ed77b9571834d","sha256":"281189b9384eac4b3318ba3ee0810cdaef8fd93424c60208db8381ce8dc50ec0","sha512":"6a20be9e89698f364c73baa941a93c58b903c69ae1c58e37054849cfb33158b5ec6c733d8fd2eb3218da26c831cc41b8bde4091e6e51e63c7ca93fe2e546afb7","ssdeep":"1536:oo3S42Aj+f8KsHz5gsse6zM9wqs5VCtUwZ18HoVjkYq/deSQ1pBGSiA:2DfJlI9w5vC34HegYqoY","tlshash":"ea8312a60e5a7c3e1e1bd4e987bd05160e4df241b438c1ca871164f6e8b74e9279b280","first_seen":"2026-04-11T01:17:14.17827Z","last_seen":"2026-04-11T08:05:57.749646Z","times_seen":9,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/api/public/help?d=1775881559113\u0026language_type=en","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:59.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"OPTIONS /api/public/help?d=1775881559113\u0026language_type=en HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://gouzi.cyou/\r\nOrigin: https://gouzi.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:59 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://gouzi.cyou\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2eNVa%2BUoCdrD7xfI4IBZIhvZrnlO41s6KYzi6vcA8FbVy2v4nsxF5g7xQe8TWOedoT5ZnNJgPx0qttq4jvYUhVuFrNh6EpccAAGxf2SXayyiaUuJHSR9vrFB%2BtY7mHLWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73b00899cb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T10:09:22.674326Z","times_seen":14054606,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/api/public/help?d=1775881559113\u0026language_type=en","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:59.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /api/public/help?d=1775881559113\u0026language_type=en HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nst-ctime: 1775881559113\r\nst-ttgn: f2eb5ee0791e40e3fe26458063775f4f\r\nOrigin: https://gouzi.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:59 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://gouzi.cyou\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fglSjf2ppUiE3aTgOsUHz16K3LfNxKAspVYxi%2Ftdnkx%2BT4jHDii220lPeCUobx9moEm8TngfvrNy3ZrDakjh8PHqV%2B6sUggmZa3sZHHsyQbaxgpam5MbWNZtgvKVp9vjMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ea73b017a2db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c9cdc072312ad6570ffd7c01a7a4df20","sha1":"1f2a15c46a07df9babb020131410955519d22e87","sha256":"b20e0f291cb7aa0e1372ec8c7911c53e2f56c14d5be6825ba1e60a1d88298ba0","sha512":"a72f5fce340852158f7727b20bf2b02541b20dce1322d91cf3bf6db24dea6a75acde64cf2f512767bea1592c247270515613668fd5e49923537ba3068ac624c9","ssdeep":"","tlshash":"a1c02229fe09861279c090ac05ce31e05b3014b1900c0600042df08c03c9292e2b0c68","first_seen":"2026-04-11T01:17:14.185778Z","last_seen":"2026-04-11T08:05:57.771535Z","times_seen":9,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useActivity-db553016.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useActivity-db553016.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-480\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIojSsDY8k6BbfzjwnvCvHsN3I51OBtrnC2UehyKlRPFtdhAPfVV55%2BIol6L4UVmtxg7IPy1XTPJcS7caEy%2FItav%2B4R%2F7DGeL9FARN2xTP1DE54w2ZxnPozKWbk2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5bd56b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1152,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1151)","md5":"e7d1a7746603a618d09ee23ab3639328","sha1":"940d969de31e11e276060e256efa56c1ead56917","sha256":"a0e30538c7d8e4b796f8df7b62321e49d49f79736d8ab556e9cffbd553e07bef","sha512":"b19a902a16527c82f22ae47b169661793e47ec6e31bafbe16e81b049e8a2e1b3b52ade8d046c2e6bbb51de699f736ee0b9ca17a1b207a3702c39198ffbbef137","ssdeep":"","tlshash":"1521309ab00df37990ef08591816640362892bd46324c4a9fbb50c4e17e6bf9c67661f","first_seen":"2026-04-11T01:17:14.165491Z","last_seen":"2026-04-11T08:05:57.770006Z","times_seen":9,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/InvestMoneyCard.vue_vue_type_script_setup_true_lang-132085a6.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/InvestMoneyCard.vue_vue_type_script_setup_true_lang-132085a6.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-1875\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qRT55tjoGq4TdY5hlAdUzcvoM9BuxJPBGP7QRWhjEvBRdZsSR7Ny1Xe%2B3cdqqsPeJFPqJO2d7qLNvw9AlmVpLU92F%2B5MnwKHwlr96fmxNp0T8Vot0mxSqXGQ1rlC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5cd61b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6260)","md5":"7244bebe1cb5e00826e60d7bd9c3f1ba","sha1":"4258b90d6e5ac2916c6b790736775885b1a75843","sha256":"3d766a83541f3b05813428acf2d3ccd4d55e92ef2b54da3ffadba3ae8743fb5f","sha512":"1c44820026da6e77a7c7d965e2c97cecab55820cbeed474970cad5bca8f00ff5c9e225014e35d5ced1ec85d99f2c9b1d8362061655c2df6ba42a26c8f972bb14","ssdeep":"96:FYh4nwm6bh9FAy+6Cwl1YFBESMpRBQEiJMzmWGf+upM3jpm0IMXX0+CcJ0edMU//:qh4nXOhn6hwMFByfQnNBofF","tlshash":"d1d11248b8328774f9b21851e49e7109735c3f8ec453e496b1fc12126beb875e769b2c","first_seen":"2026-04-11T01:17:14.193435Z","last_seen":"2026-04-11T08:05:57.761591Z","times_seen":9,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/route-block-83d24a4e.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/route-block-83d24a4e.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=4,i=?0\r\netag: \"68d3ab21-1b\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=200aAdj0QDE%2FZayuzQorwoH6f0%2BNe9OnlF9sx58SNbUic83kxqRX419dIunG1VeVNVECc2qyAiqBlXFiWJb%2BkWSkJAOxG%2BDe%2FDOUhfe39nwisGhPRfYpUEvUqagt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5dd69b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-04-19T23:46:53.555892Z","times_seen":632,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useHome-b180038d.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useHome-b180038d.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/tabbar-d3508a6a.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-d85\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bfIR%2FtQXWAQG0Fo%2F0AhbPs8bGmmsWaWamPJq%2FlXMPnCgjFNGeIN7FqlROmogd4U7gEvnB%2FIwstb3OOavAfh%2F9Z5JGTpvTwrETAYMM15jnSDIUlTbeikzvayIa4o3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af7de22b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3461,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3460)","md5":"180e5534d2ab3f14d143c3fd62836b1a","sha1":"f046ba937c89852b069d89726b6628d4d3adb7ff","sha256":"70d4461732f0c64eb7293a76225725bf96d485754a83d5053ef6a4def30fa425","sha512":"11015156b772218af5067b62443534622d7e6781fcc4e578f381635b282dda2388d7626e6d83fb08e87c0347a56eb39b0f33bb7823589ddcf616dacb0de770c1","ssdeep":"","tlshash":"fb61735873b38074c7b915b016ea0901603ed705dc5ae0cdb1a305555b7bfe6b8dcea6","first_seen":"2026-04-11T01:17:14.180948Z","last_seen":"2026-04-11T08:05:57.746452Z","times_seen":9,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:55.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sat, 11 Apr 2026 04:25:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Wed, 15 Apr 2026 04:25:55 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-04-22T10:16:26.687557Z","times_seen":449,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":121,"dns":1,"connect":21,"send":0,"wait":41,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/autoplay-0705b292.css","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/autoplay-0705b292.css HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3ab21-193f\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZu%2FvSN3Ts%2F0VVoudq2k6mK7k3NFkALZBY3F848vN6JOjKcY1tuJkxeM9jKJKi33ErByfgWOMidfTsjVIM2li5St%2FHQkhExDfOLTCP%2BO69kJX8%2BRJQWe6m%2BdPfLF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af58d2bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6463,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6462)","md5":"ad7569aeb1cba986c6ac4e67ede7ce3d","sha1":"a349c7cf87f2dd7986e8a559bcee04e373c4e819","sha256":"0705b292d9baebaf25bc13a82479079e34ceb79c72d8a0f2e629549e566ee963","sha512":"44050b92538f77d7b85ce174464f2a66a0734318ebf57bf09ae477343dac4a53ef60ec61498f20fe7fcd94624584cca649fff59d085ff02c749b0f23456272c1","ssdeep":"96:3B5mSJ+MbpDAKneQYX+vJToiL5dKSme+jeHfZDayEIuf/:fmUJbiKneCJTtdKSme+jeHu/","tlshash":"0ed1b730a3141c2362274f194b48e6f86ea484738fa38919f6856f2cdbfd8f5155eb92","first_seen":"2023-08-13T21:03:24Z","last_seen":"2026-04-19T22:13:03.133505Z","times_seen":127,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/tabbar-18f13363.css","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/tabbar-18f13363.css HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-a9ab\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FZw%2BzVfl4GQ8uoflaNNmpOhTbTktJikQ%2BMuC%2FUR82%2F8oaQT%2B3HxDwi2aYNRn9JxvU2ypTovFXBKF4VtS7BSYVSVGOX3%2B%2F6sH%2BCgVTgZW08prjgRZg37j%2BD%2BwffDg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af57d1eb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43435,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43434)","md5":"46f9e46a3c4010a2cde3185a0f10726b","sha1":"f0ece0179ea8d9e76597516fc9b1e53d3b7b2550","sha256":"18f1336370a631bee37f30faddc7d1f9ce47bd9be41aa272ad90d50cdc7402ff","sha512":"73d1f6a60d36c4adddb385afa5bc9d32ac8597b54f381c4399e64345e89fbd5fb97bd4269369020c06f8f0a14bfa47ca8e1fee8a007adfbc65576853e4da3ad3","ssdeep":"192:a5eIevjMgcRchfcDdk9gNtXAr4dARw+tVGT2eJ5kbWwR3oxECSo4k5Yrkj7YVyny:a5GMjRchqm9KPqRstWi1CYJHfkH/Q/oV","tlshash":"b8131294125c633ddb6bf12364eb45c91910f213c527b54abb42b721cafba932136fca","first_seen":"2026-04-11T01:17:14.169014Z","last_seen":"2026-04-11T08:05:57.770483Z","times_seen":9,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/index-b32835d6.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/index-b32835d6.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-a4d48\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5WM9PiQ%2BsXl7S%2FoqZ9cJlg6K8LNE5sMmRUnmrqNF9xUVaAvMeuVqAAlV%2BnbYDaij4nXvLzAeRkqzB4TTBGk%2FOZQNPQOZT1U85Dg6r%2FW9izUTGZzUyyhoKJY%2F6Ryh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5bd4ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":675144,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7dde738c032bd23c1322d039113d21ed","sha1":"eea8522bd961277dde28e3b18b76eb5f89c04c59","sha256":"38da02e95a12677ba6c2748c6f3ec54aaa65763bc2ad7b75e51611219af2ee88","sha512":"a5b0e646559fdec5da2bc22a01d3c3c0f817e14ab2c6bb724eae04fb8d180d318ae550958700bc66e64417ff85ed09300a68c46818b89ce5d5584b8ab826c186","ssdeep":"6144:gUETf8o37ibfN+kPyFnuIBer/XHG1uqTPPusf519etYxlGqG9l/BmVuK6:EvWbfN+KYMYe","tlshash":"0ce4f851d01ada7cf9b3e25191cca88232992ffac0969156f1f82c674bd2c7c6b8d734","first_seen":"2026-04-11T01:17:14.1752Z","last_seen":"2026-04-11T08:05:57.754712Z","times_seen":9,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":446,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useCompany-18868465.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useCompany-18868465.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E1mb2dDEpdq%2BypsffHE5Ko2UfA8uDUdjWNfaDYj50238fbL27oqSjhXA0mkCi6ptnptp1BqIRfdyjka9lviBvaS%2F90g0z6Z7q%2BMsFMiOp6qjCgGUswAhZWXpuWYK\"}]}\r\netag: W/\"69d68056-e3\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af5cd5fb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"39c41e30326830b6af18f9728e9c7298","sha1":"73a0c4b1a3f42ddf976b79f0dff9f0948fb5fc24","sha256":"657747e23be2e124bec996278c82807ddcd72cc41a82f05a6e5e2eb2cbc8a2b4","sha512":"8628774f5077769808cb82078f96d3bf6734002d4d3493816f6c1d459ae9df103487c9b9f459dbd5b7dea5c2cff367f8d0dff8bd7c9333d245ae30b92e7e509f","ssdeep":"","tlshash":"1bd0a725600043b943b7689d537d78281592a0b43b4a86c0891a1f464af6ae69257e1d","first_seen":"2026-04-11T01:17:14.19711Z","last_seen":"2026-04-11T08:05:57.747051Z","times_seen":9,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/BaseLogo.vue_vue_type_script_setup_true_lang-b71dde3c.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-b71dde3c.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/tabbar-d3508a6a.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Moobv4AeYc%2FIRbvAoHgBCUERqJMDFD8AxQBbt%2BdBq038svZzIepInp%2BhenQPL%2FsCGTm3iEjKb4apvtJoqT1TlQDwpnKzfmLsJvb00hMPdHff4voagtrP4UTDml5t\"}]}\r\netag: W/\"69d68056-20a\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af7de21b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (521)","md5":"d4c3671fb2e7d141646a68c659571c98","sha1":"287beab403245adbfd1155ecba9c2ed1a00d90f4","sha256":"458ded89d1b0e00f836593f45a356097681bf15d37a0519854370279885264ae","sha512":"340ef136208c05b8834842a4fcb8ec4de0c704499a51fe7b80556f4663f8da069eabc40fd98e2d9ae05790fab8b53ab487ee663c791cbf8c5c964c0b6f4cfe37","ssdeep":"","tlshash":"bdf0c90f5c2a91ff80a659982b47204212085eadc6209a94f2e92374a2418aab01ea28","first_seen":"2026-04-11T01:17:14.181747Z","last_seen":"2026-04-11T08:05:57.747662Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/BaseUserTab.vue_vue_type_style_index_0_lang-f8ccfa6f.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-f8ccfa6f.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jTs2xefnlFaL3C223prQgVWZqplaN6eIQ0ons%2F8vDcfO9AvpRA08SDI9oL5WcRXR1ikU0pWZYxiKbR%2FetMabRRukVwZMsuFHgCAyJH8EQKNDCMH%2FzGWUx9NPEn3r\"}]}\r\netag: W/\"69d68056-2d4\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73afcc811b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (723)","md5":"92e431194a14ae5f6f8b7e9dd6ba2954","sha1":"3c10e40f980120ee9d3ccbacb6010a331a05d3e7","sha256":"538956b64409881e747c5b59a16abe5c109c36626d31689b03d0dfe45d0dfed5","sha512":"3e3c187130dd34d952b600688053b37ec4125d00d696ded645db47bfc4cd6954aa79cda0ff153fc479f211c521437000ab2796380017a3e00a88cec2282576ec","ssdeep":"","tlshash":"8e01c5dd58e5cbf9849306543e6b2050d0958f94db298d45b0ec1a22279b8b1b6de73c","first_seen":"2026-04-11T01:17:14.180257Z","last_seen":"2026-04-11T08:05:57.739943Z","times_seen":9,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/upload/img/69d683f79b87.webp","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:56.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /upload/img/69d683f79b87.webp HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25426\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:36:07 GMT\r\npriority: u=4,i=?0\r\netag: \"69d683f7-6352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLV6khdMJdPOZeEfVazpa54X1Ynybqln7MylegwWzZuL4LW5vxl7iyyCGqvr%2B475%2F6RUqxgoPLTllMe%2BWzHx3sC66pYy8lBgUzrEyfUXdAfaIs%2BX%2B4YwLrUhWVjvfJ1aJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af23b96b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 384x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82d0ced2f4af7c2a02cbdf02f4ccd468","sha1":"7b4f7c7c4e47fbd881817c9523144325b844a24b","sha256":"1153417f0b5032e7c475ef0c5252f83bd353df4844fd5971693a34c0c279ba14","sha512":"9fc6f0e78bfe94ef51c66ed711dd3a58b69f9b774b956a413b41d131c94a7915e3fd0dd14081d3a1463571c6e48e709b380fcf54031e93629d45d0111dac3f51","ssdeep":"768:L0dzqZvyf9XOJt9DTlYNEH6SPEJ17qZb2D716xrdDm6ZTO:L0deRiVgt9b6YC1hn1wrx3TO","tlshash":"89b2e0bbe7e1da031037bc3f509d1558eb0da6a5a09884d6927baa2d1118a413e94cab","first_seen":"2026-04-11T01:17:14.167593Z","last_seen":"2026-04-11T08:05:57.73759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/index-ff1ec330.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/index-ff1ec330.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wbr5OmR8LPubPTtiix1WzXaKTmCOiohJ6%2BmYjMAa7AEiWytPLMA8Vv%2FwQESxV%2Fg6zoyanlg%2FCffyHGD0edfv0rFyPT%2BWyUrhT55BZyq8T3UlEIZASvAFFyEongr%2B\"}]}\r\netag: W/\"69d68056-385\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73afcc80ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":901,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (900)","md5":"ad792ba3a8730fd1fd93ecb9cda2a54c","sha1":"3209e53ce53d2392d0b2cb91b8bb68ca65fe805e","sha256":"b98487e0dff5a4727e29c9a77a6dda6a1459b96ac7e414c1087c0494cc72d807","sha512":"c7abff4781016e373be593da669d847c875e819235e13814109a87184dbae597db9ec0cc0e87fb972e0ab7ec9908a274806a6f63cbe0516fed998b1cff12d0db","ssdeep":"","tlshash":"3311236bec95f130415398dc96a80ba3a3cc7dd8213163c4b55e893807641ec703e60b","first_seen":"2026-04-11T01:17:14.164049Z","last_seen":"2026-04-11T08:05:57.762742Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kaoya88.top/upload/img/69d685e6c736.webp","fqdn":"api.kaoya88.top","domain":"kaoya88.top","tld":"top"},"ip":{"addr":"172.67.134.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaoya88.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:13 GMT","end":"Tue, 07 Jul 2026 15:30:12 GMT"},"fingerprint":{"sha1":"B7:1D:1F:B6:C2:35:81:CD:CB:CF:17:5F:37:30:62:B3:96:F0:B7:86","sha256":"19:9A:3F:14:79:5D:CD:07:FA:5C:35:28:66:17:9C:AF:C2:B1:A6:2F:EC:D6:88:D6:C0:48:24:6A:B0:03:8B:99"}}},"request":{"raw":"GET /upload/img/69d685e6c736.webp HTTP/1.1\r\nHost: api.kaoya88.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25426\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:44:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69d685e6-6352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 67\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B0JQK%2BQCj9rVn0igetB3a4BlhLwmvKYANVXUuGrl5cpasZ2DwORV4I3kB8lAP%2BLFybNUL1WhtWYa%2BiNxd%2FAz7rOj2p5ebKPJn%2BdzYsqLI8r8wQNRC1SzrDjZT78%2Fj8jiHUs%3D\"}]}\r\ncf-ray: 9ea73afe1e5756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 384x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82d0ced2f4af7c2a02cbdf02f4ccd468","sha1":"7b4f7c7c4e47fbd881817c9523144325b844a24b","sha256":"1153417f0b5032e7c475ef0c5252f83bd353df4844fd5971693a34c0c279ba14","sha512":"9fc6f0e78bfe94ef51c66ed711dd3a58b69f9b774b956a413b41d131c94a7915e3fd0dd14081d3a1463571c6e48e709b380fcf54031e93629d45d0111dac3f51","ssdeep":"768:L0dzqZvyf9XOJt9DTlYNEH6SPEJ17qZb2D716xrdDm6ZTO:L0deRiVgt9b6YC1hn1wrx3TO","tlshash":"89b2e0bbe7e1da031037bc3f509d1558eb0da6a5a09884d6927baa2d1118a413e94cab","first_seen":"2026-04-11T01:17:14.167593Z","last_seen":"2026-04-11T08:05:57.73759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":54,"dns":6,"connect":1,"send":0,"wait":5,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.kaoya88.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kaoya88.top/upload/img/69d686067246.webp","fqdn":"api.kaoya88.top","domain":"kaoya88.top","tld":"top"},"ip":{"addr":"172.67.134.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaoya88.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:13 GMT","end":"Tue, 07 Jul 2026 15:30:12 GMT"},"fingerprint":{"sha1":"B7:1D:1F:B6:C2:35:81:CD:CB:CF:17:5F:37:30:62:B3:96:F0:B7:86","sha256":"19:9A:3F:14:79:5D:CD:07:FA:5C:35:28:66:17:9C:AF:C2:B1:A6:2F:EC:D6:88:D6:C0:48:24:6A:B0:03:8B:99"}}},"request":{"raw":"GET /upload/img/69d686067246.webp HTTP/1.1\r\nHost: api.kaoya88.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25426\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:44:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69d68606-6352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 67\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W29tTGjRLi4K9Bu2X5KmR9eENuOCqomy3kX%2B6hfWZMprp8VIW62dFXtkK%2BFnOnvLSTtYX8esd649TBQyPT3H7xA5mUrjoExCRhMAfI7OO8Zh9c%2F7gZDXA%2B7NwlaSGD0mK7s%3D\"}]}\r\ncf-ray: 9ea73afe0e5456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 384x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82d0ced2f4af7c2a02cbdf02f4ccd468","sha1":"7b4f7c7c4e47fbd881817c9523144325b844a24b","sha256":"1153417f0b5032e7c475ef0c5252f83bd353df4844fd5971693a34c0c279ba14","sha512":"9fc6f0e78bfe94ef51c66ed711dd3a58b69f9b774b956a413b41d131c94a7915e3fd0dd14081d3a1463571c6e48e709b380fcf54031e93629d45d0111dac3f51","ssdeep":"768:L0dzqZvyf9XOJt9DTlYNEH6SPEJ17qZb2D716xrdDm6ZTO:L0deRiVgt9b6YC1hn1wrx3TO","tlshash":"89b2e0bbe7e1da031037bc3f509d1558eb0da6a5a09884d6927baa2d1118a413e94cab","first_seen":"2026-04-11T01:17:14.167593Z","last_seen":"2026-04-11T08:05:57.73759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":44,"dns":5,"connect":1,"send":0,"wait":5,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.kaoya88.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kaoya88.top/upload/img/69d6863ed169.webp","fqdn":"api.kaoya88.top","domain":"kaoya88.top","tld":"top"},"ip":{"addr":"172.67.134.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaoya88.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:13 GMT","end":"Tue, 07 Jul 2026 15:30:12 GMT"},"fingerprint":{"sha1":"B7:1D:1F:B6:C2:35:81:CD:CB:CF:17:5F:37:30:62:B3:96:F0:B7:86","sha256":"19:9A:3F:14:79:5D:CD:07:FA:5C:35:28:66:17:9C:AF:C2:B1:A6:2F:EC:D6:88:D6:C0:48:24:6A:B0:03:8B:99"}}},"request":{"raw":"GET /upload/img/69d6863ed169.webp HTTP/1.1\r\nHost: api.kaoya88.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25426\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:45:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69d6863e-6352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 67\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jEvWBUHkD5dqCVkDuk78J6CNR%2F2QGhKg7feM9bLpOHulTa9IW2Atd%2Bx%2BxOQof23cPOcdqIgdBBw%2FiftSPxAiaM%2B5fTE3qyyyTWy%2FWXPszzf8w3RLxCeOv91qGQpAGo0baMk%3D\"}]}\r\ncf-ray: 9ea73afdee4756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 384x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82d0ced2f4af7c2a02cbdf02f4ccd468","sha1":"7b4f7c7c4e47fbd881817c9523144325b844a24b","sha256":"1153417f0b5032e7c475ef0c5252f83bd353df4844fd5971693a34c0c279ba14","sha512":"9fc6f0e78bfe94ef51c66ed711dd3a58b69f9b774b956a413b41d131c94a7915e3fd0dd14081d3a1463571c6e48e709b380fcf54031e93629d45d0111dac3f51","ssdeep":"768:L0dzqZvyf9XOJt9DTlYNEH6SPEJ17qZb2D716xrdDm6ZTO:L0deRiVgt9b6YC1hn1wrx3TO","tlshash":"89b2e0bbe7e1da031037bc3f509d1558eb0da6a5a09884d6927baa2d1118a413e94cab","first_seen":"2026-04-11T01:17:14.167593Z","last_seen":"2026-04-11T08:05:57.73759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.kaoya88.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/index-3afecd42.css","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:55.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/index-3afecd42.css HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:55 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-109ea2\"\r\nexpires: Sat, 11 Apr 2026 16:25:55 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yl6AmVC61OeTCXiq8DvG53tq1d7i3BdYl3KW8eS6Iv6PupBNEs30UZ4TLKap%2FQMcHoWIGaCoIXHbxNfeWmMH1mpLwijSHwCNPGLVRK7QQhoZwOE6%2BdsHc%2Fw3DL9Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73ae6dda1b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1089186,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"f32539892b21e2510319823ca55a0bc6","sha1":"e3fc6423c27f8e8abd744dedef3a1a8135aa979b","sha256":"461402be412df835e881c5e9da819c9cabfd05d96437bdea45b43a60ac1bb3d9","sha512":"961bac85f5cff3400612e84534e5650580dd4c66119207a1ba24bb17bce9c7efb26fd0680580cd252f25eb0705179620424067b447c1a502930f0a5f96546eef","ssdeep":"12288:6n1+/nTIa0POiwag+0uRNNcD55TSS12FhKR7htucwesKzN8vFw:6n1STI7Oi0ocD55TSS12FhKR7htucwO","tlshash":"ca254bb86f8451befd0bcf7a4728958c691ef093ef424e846619f53043c72a77663268","first_seen":"2026-04-11T01:17:14.200055Z","last_seen":"2026-04-11T08:05:57.741988Z","times_seen":9,"resource_available":false,"data":null}},"time_used":900,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":580,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/danche-fcb091b6.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/danche-fcb091b6.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hWhOpPscYCe8KMGp2xVuTfPTyb%2BjCsqh6g5U9UFs2jcdX%2Fx1IbyNbi9eBK1NpG1o9ldiXhENLyhlJWlBNDpBRAV3E9k5a%2B7tOpt4YViMWu3Q9d9TT7Q50bM%2BIQTY\"}]}\r\netag: W/\"69d68056-3d4\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af5bd4bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":980,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (979)","md5":"d3cc98ae6159473ca496a5ec0bcb6571","sha1":"7491d2357aa926474afa9f6c2c1a18552ecc27f6","sha256":"3362b73d436a56e5900cd1e4c5522754b43fc3ea6bd306577e8ba9dd06204d49","sha512":"d5b959c107cc0c665a9bedb96caf5fb2c6b86bc0d73fb02ea27930d847136870e07ce9346c9035a0958ec080d459a78ad01269094e95ecfeba36eb5a5a58b393","ssdeep":"","tlshash":"1511446f780362b0f6715c612aa7805323144b8acf1fd2d572fe4e0193a6d35bf15a35","first_seen":"2026-04-11T01:17:14.1721Z","last_seen":"2026-04-11T08:05:57.756977Z","times_seen":9,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/product-1f4a3203.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/product-1f4a3203.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yxs1a5QleMjDluuCorh7qMUmF%2FoZwb6Gdq8U91BjQXAUfPTRUX8eWV6wbmS%2FcoMpa6yn1pjsSDLZGbZgXl7JUiEGvYykeDE6nz00pT1XliPcw1xNMBqklj%2BuwnWP\"}]}\r\netag: W/\"69d68056-2ad\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af5cd5db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (684)","md5":"d7101c2cb93ef1335b0030068030e0bb","sha1":"d057d1f244704cd1132a8f4386afa64b43c6ab28","sha256":"37cf0c9a7cfa1825eb3621a0d0f9031eb80b08f865ef12f6496980768d913352","sha512":"ee418f291884517256b397d30555959f794671b2d1f1fad0cbc4484bd1d4f3945c38eec4eb2961299f2891e021a9af2fe4b84d8a83a0770010943aa9f7c85fe7","ssdeep":"","tlshash":"29017b4f6c6ff3c94117e9b09020ce058f19ac20fa0c47f83f547b1176c218a6289b34","first_seen":"2026-04-11T01:17:14.176146Z","last_seen":"2026-04-11T08:05:57.752155Z","times_seen":9,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/InvestCard-538387ad.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/InvestCard-538387ad.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-5b69\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PppAOuJTnHwjqU282ob49%2BdhCzesjfliKnio%2B4ggdtdIHwRF7RrmPU7PIrBN4QQ0Qmgi0Vx%2Btq1vHi9Zh9VtQnuY%2BocJOP7Ew72F6jaGuX2me6ZfMXzpB%2BGxcoKV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5cd60b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23401,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23400)","md5":"714c2eec71c8a8f51abca31cd9063b67","sha1":"ba935ae6e003213ac2d85f337d58f887ecddf2b3","sha256":"79fa6ceff40bf588483f92ae824cb5984bd5d252a4a60e274d3b23af76ccd1a7","sha512":"de9b0a58e339f6432c442480f9389af0d9f1f132ec79dfead9097a204d96a3a278ecdb7c1451735f92af460fa97ffad0dd68e8f755d27d4426e085dd98adbe83","ssdeep":"384:SzJ58J5ydYHj96Ra4xJu1LJtf+EVRuwbg/imzi1/X5/Xq/Xt:SP8ydYp6Ra4+1dcEVRuwLM","tlshash":"6cb29461d032c939e5fb78a0108c814476192feed2a18476b0fceb465b87c7c575e7ae","first_seen":"2026-04-11T01:17:14.191627Z","last_seen":"2026-04-11T08:05:57.744471Z","times_seen":9,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useVip-b04cf728.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useVip-b04cf728.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-baa\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FCItbrqThTdtTjYLX%2B5ddYcRxt8jaS8QKa6%2Fy3Z%2F36hqwudqokBSlRsnruElkfOdWjjhBraMIv%2B6hArHoByMFJ2nrJuqhqL9YU27P5CtCtIrwSP8pJVUwsjIWI97\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5cd64b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2986,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2985)","md5":"b7f17459df6b88d710aceeeeb6cd8975","sha1":"5884cfcc250b1c16ec45e32876bd405df02431fd","sha256":"43862ee5979d983f58a79f641ee563e60e18b4936fb1282d988b402141e3e8dd","sha512":"d181263752a1cbf85d1aa98dc69a1008b93543f252b147f19ee45b4a1778581409f2eb7600cdd5cfdb54c8c9faf1663347b36bb984cf460acdd388ab2e029382","ssdeep":"","tlshash":"ec5164abf178057a4bf90c78a8f9128711702304f84191ea52972f418f6bd118ffaf0a","first_seen":"2026-04-11T01:17:14.188053Z","last_seen":"2026-04-11T08:05:57.76355Z","times_seen":9,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/Rank.vue_vue_type_script_setup_true_lang-050d87ff.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/Rank.vue_vue_type_script_setup_true_lang-050d87ff.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-1a3c\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BHyoB%2BNQL1XqDQbYnF3pIpLu3%2FGLH7oUsofvJnsy9BTZjt4MJDtV6E9wCmIQyBmx9ujNIj%2BBzTmH5NHO8Bn383YPib%2FvlzY8ASidZXwJlpuZMp%2BxEDzSKPz8uO8O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5cd65b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6716,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6715)","md5":"806bc948c2ac4d6cb3c5dcab74903013","sha1":"c4cd5b23f0f9c790ee41e678d92c6d34982a1185","sha256":"28b16189d4f1bbe83de70392ec94963d59142fa0e543ea70ecdcf50a93bbb668","sha512":"70dbf0cbd3a3bf1d57339ba3aef6f1a67d6cc657610a23c9f5eb8223de4585dd13999723c406bf148a83f3a8acdb473a24aaeb7dc9abbf52bea812bae6993d4f","ssdeep":"192:7SXYZeAjoF/647rsTBuXb76sVL5zrwhmQFMkklUIFn:7SDV6fZAh","tlshash":"4ed1f0416025cabce4f76125b98a9921b184bfc7c566c406f1fd28032feac75979cbac","first_seen":"2026-04-11T01:17:14.183715Z","last_seen":"2026-04-11T08:05:57.7451Z","times_seen":9,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/route-block-83d24a4e.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/route-block-83d24a4e.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=3,i=?0\r\netag: \"68d3ab21-1b\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4W8mJRSSjADg7NKXypELDA6HKBvOAO3x%2B6RmOkTJ1edx3%2BEAOBRk78aaYCQ%2FHlGXL3qczHZ246gUts5W3LZnTm1aU3oztsMXXqzscB9hTvYB2PXyh9pPZjIsA65m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afcb806b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-04-19T23:46:53.555892Z","times_seen":632,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/favicon.ico","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:56.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 11 Apr 2026 04:25:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6PBhkIxc6bDNmQdl9dl2sP%2BjhHaFL1vaYShNsUGdzrC2m%2F6Eqta3BCG74VOg%2BvlgyAJqrXSE7X4LT8Qr07HNhqPHD%2FmFx%2BGIGI85NXADrBnrS1ke2zMwX8lcJXaz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ea73aee79c0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-04-22T08:48:27.453565Z","times_seen":256160,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/NavBar.vue_vue_type_style_index_0_lang-286f12c1.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/NavBar.vue_vue_type_style_index_0_lang-286f12c1.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-5fd1\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHUoEl%2FJa4fuEuX3qdDOyQrRIsIfMD7ibyA2fLWr%2BCRuHCGdbE7QVVGviIx9QWrseDw0v2LdYWJJvmuoSmo2IOPvhNMuQY2rmYwvPGo%2FhjARcoaKlq%2FnZPHeBD70\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5ad43b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24529,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (24528)","md5":"ddd065657e39a046c7f09c551dabd0b5","sha1":"764304c24a7a57765b48850f679fbbb6f06a9d45","sha256":"ddf806880108aa75ae1ee34575076c1bd8c4a09ce3347fd090cb723054f34ff2","sha512":"8c483fab321a538a4da9fbbd0fb56f670553b1b7ce8f49e94d7d03a833e90485eb5cc7f228afcb2d8ef54237c46366fe634c77441a33f49c75468ae0d1435f34","ssdeep":"384:gYroOOhEirCrEh6Zmn+wwPXdxbpKDb3kVCO4CUWQ:gY1uE2kFoLOBLQ","tlshash":"cbb22040e926c77ccab623288d8a6445b24c5fced159f5a1f1fd282b37dacb47118b9c","first_seen":"2026-04-11T01:17:14.17439Z","last_seen":"2026-04-11T08:05:57.736547Z","times_seen":9,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/TaskList.vue_vue_type_script_setup_true_lang-aa515eb7.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/TaskList.vue_vue_type_script_setup_true_lang-aa515eb7.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QY9Rbr%2BkLrsw7CvQwmdCiNPvC1p1sABfLA4yhzZszZw63F7OrQCoehi1OYvRqx%2F6akiesT%2F3eN6kNbnDyV%2Bm%2B63EWmQmlgAaLt09435kYRH5MNBBFaSIepM4F2XA\"}]}\r\netag: W/\"69d68056-222\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af5bd4eb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":546,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (545)","md5":"8d11db1f21721ff03b1773392127d338","sha1":"90bbecebb742c5bf6de7a525a30ca4fd19c2d299","sha256":"d3d60ee01bde3ee5e92131d96fecf3584f407433304df681b76b47ceed9d50bd","sha512":"3817e4559969844afdf9031a048c521aefdcc53447275dfc4052f92fad30688a1fd07ce5e7ae5a61645bade25d2fb12316000b5fb6013bd23aec68b224eb7142","ssdeep":"","tlshash":"d8f0c08e7d0e45b3c3598db4a7be046264940266672c51d4f40e0867d311898a87fee7","first_seen":"2026-04-11T01:17:14.200958Z","last_seen":"2026-04-11T08:05:57.767642Z","times_seen":9,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/InvestCard-538387ad.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/InvestCard-538387ad.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-5b69\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUKDJ76PqW8j0BdaGv3x6O%2F1kw60iCh8%2F5SEbmIcC2Ngyu7Re0Fw0z%2BFn9ahlovO7SrLfoPLISLEM1w4SgdcDHn0M4ZzHlaJ5M5LiWi7CS%2FuYiZGRhGNRrbLczyS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afcb804b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23401,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23400)","md5":"714c2eec71c8a8f51abca31cd9063b67","sha1":"ba935ae6e003213ac2d85f337d58f887ecddf2b3","sha256":"79fa6ceff40bf588483f92ae824cb5984bd5d252a4a60e274d3b23af76ccd1a7","sha512":"de9b0a58e339f6432c442480f9389af0d9f1f132ec79dfead9097a204d96a3a278ecdb7c1451735f92af460fa97ffad0dd68e8f755d27d4426e085dd98adbe83","ssdeep":"384:SzJ58J5ydYHj96Ra4xJu1LJtf+EVRuwbg/imzi1/X5/Xq/Xt:SP8ydYp6Ra4+1dcEVRuwLM","tlshash":"6cb29461d032c939e5fb78a0108c814476192feed2a18476b0fceb465b87c7c575e7ae","first_seen":"2026-04-11T01:17:14.191627Z","last_seen":"2026-04-11T08:05:57.744471Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/upload/img/69d683c88811.webp","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /upload/img/69d683c88811.webp HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86136\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:35:21 GMT\r\npriority: u=4,i=?0\r\netag: \"69d683c9-15078\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZtaMIHWGzzz3%2FA4Cz2Yqx7041n0NlRGcRKuwE7lPFpSm1fA9L69RHUnXdJEofpEeayvxymLO6byJfNjFGb5%2BhabXDtDpWeV6QRU87Ym5cfbjscJiy8okVNx%2BA7BLyhe1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afd4840b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86136,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x1170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c0eee0d9664e4e0261d776bc4a0cc906","sha1":"ff70097b0c40b6f56bbbf350319ed77b9571834d","sha256":"281189b9384eac4b3318ba3ee0810cdaef8fd93424c60208db8381ce8dc50ec0","sha512":"6a20be9e89698f364c73baa941a93c58b903c69ae1c58e37054849cfb33158b5ec6c733d8fd2eb3218da26c831cc41b8bde4091e6e51e63c7ca93fe2e546afb7","ssdeep":"1536:oo3S42Aj+f8KsHz5gsse6zM9wqs5VCtUwZ18HoVjkYq/deSQ1pBGSiA:2DfJlI9w5vC34HegYqoY","tlshash":"ea8312a60e5a7c3e1e1bd4e987bd05160e4df241b438c1ca871164f6e8b74e9279b280","first_seen":"2026-04-11T01:17:14.17827Z","last_seen":"2026-04-11T08:05:57.749646Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kaoya88.top/upload/img/69d685f15a0f.webp","fqdn":"api.kaoya88.top","domain":"kaoya88.top","tld":"top"},"ip":{"addr":"172.67.134.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaoya88.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:13 GMT","end":"Tue, 07 Jul 2026 15:30:12 GMT"},"fingerprint":{"sha1":"B7:1D:1F:B6:C2:35:81:CD:CB:CF:17:5F:37:30:62:B3:96:F0:B7:86","sha256":"19:9A:3F:14:79:5D:CD:07:FA:5C:35:28:66:17:9C:AF:C2:B1:A6:2F:EC:D6:88:D6:C0:48:24:6A:B0:03:8B:99"}}},"request":{"raw":"GET /upload/img/69d685f15a0f.webp HTTP/1.1\r\nHost: api.kaoya88.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25426\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:44:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69d685f1-6352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 67\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BLgTD%2FaUNyLSwY633AbG%2FjLvgWFZN8T5uC1CgTIi242vQQLbHETv2%2B0Fljbft2Uh0v0%2BVB9RYsQpafDkqx5x3ZZ1k4eKCtMx1dnoNVIvDyQNhtgbk4ALu01EnYfzRAdw%2Bc%3D\"}]}\r\ncf-ray: 9ea73afe0e5556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 384x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82d0ced2f4af7c2a02cbdf02f4ccd468","sha1":"7b4f7c7c4e47fbd881817c9523144325b844a24b","sha256":"1153417f0b5032e7c475ef0c5252f83bd353df4844fd5971693a34c0c279ba14","sha512":"9fc6f0e78bfe94ef51c66ed711dd3a58b69f9b774b956a413b41d131c94a7915e3fd0dd14081d3a1463571c6e48e709b380fcf54031e93629d45d0111dac3f51","ssdeep":"768:L0dzqZvyf9XOJt9DTlYNEH6SPEJ17qZb2D716xrdDm6ZTO:L0deRiVgt9b6YC1hn1wrx3TO","tlshash":"89b2e0bbe7e1da031037bc3f509d1558eb0da6a5a09884d6927baa2d1118a413e94cab","first_seen":"2026-04-11T01:17:14.167593Z","last_seen":"2026-04-11T08:05:57.73759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":49,"dns":5,"connect":1,"send":0,"wait":5,"receive":4,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.kaoya88.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/api/public/index_info?d=1775881556857","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /api/public/index_info?d=1775881556857 HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1775881556857\r\nst-ttgn: 5fece520b32b1a82e394c67e5fa49e6c\r\nOrigin: https://gouzi.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://gouzi.cyou\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BP4qgF%2BtmcEfn%2BnPq65ViOpldxGw8eeMKAlX7su5knyM184E%2FLwjiJ3NdoLQRf0hQ33Z26t5OXsp%2FWV7aKmoX8SgM0KEHE2zSC7KYmVSZ5Wg9MMzJsShRapQ2xUFYkSkUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ea73af44c8ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5628,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7f6f39aad630f8637b5c5925ed5b9ad0","sha1":"859d01ed2ded2529046b9bd44cc625913b8ec3fc","sha256":"4b17eccf18e84da23a645f6780e3dd449991344e033094acbca1ecfb6e6bbdb2","sha512":"62e90943d952330dfa6d862dbcae3b577f7fffc18a8b38deca401284480398ee39c09b9e70563d6d5633d9231b1c8435af03aa62ccd0eec3440c50b0ee02755e","ssdeep":"96:I/GyQMAhgvXGr+mHr0ilrIK1rDGzrgHNrd8Zr02g9Przipr/2eTzf6aiY:I/GrMJXLmIiaKZGAHH8vg93iE27","tlshash":"e0c1a1f1716e5c1116f12fd27fcb21916aadf06b1dc49fa4ce6aaebc4194023122bc66","first_seen":"2026-04-11T04:26:27.523719Z","last_seen":"2026-04-11T04:26:27.523719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/BaseUserTab-c449726b.css","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/BaseUserTab-c449726b.css HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hU%2BKw0%2F7ER%2F6tDu2LDgs4y5jj2LvHr0Ylr8yc7XDFyuzqIprl44tNdTlKfIlLuZa4Vg%2BT%2BjTFB%2FiO6DCtvA2%2BT64fuz5XQJhayeEHGPSHoHI6Ky8Rw3HiKg4qxwl\"}]}\r\netag: W/\"68d3ab21-67\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af59d3ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b8d7ddd09f6113fe70a8ce29ce0f4f9a","sha1":"e5e5284a913c5a08cb36b655cee62fab9ae2f736","sha256":"c449726b38d5164aa8a8d9c73e9c00f401e74c59b1bf2d6b974d15db8722372e","sha512":"b385a0a7b17f175fe07b11341303935f1327d46d8bc66073e545fa18a160d6e60dbe3e74b75e100ec6714b6ad09390305ae9d9bb2ca00a039a51913d6bf18320","ssdeep":"","tlshash":"5cb0924c1840b02a288161f80f5642e808493244ae028eb870243d5101c36f9207392a","first_seen":"2025-05-06T14:23:01.793345Z","last_seen":"2026-04-21T13:48:47.898821Z","times_seen":203,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/autoplay-186da9d2.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/autoplay-186da9d2.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-144b9\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rT7Q6ZW3Z2YIwkwxg1hY2ngpp17EEuuVZ11Pw0CD%2FFiI2frEmlu0tsvJ35auUnH80F8aV9CyGS6wfggvox3y%2BJZC8dDNC3ezjs4onSwojcpMoEvsWH6vw1phNi33\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afcbff9b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83129,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5873554d215113ef0704001e22da8a10","sha1":"5d6fd5597e7c9b43d767de8da0730edad43665b5","sha256":"a8b3e94f5833e9df419e7b6e0cf45965e23ea3a972ab4787315205a0758e3474","sha512":"7d584d5a0091c77c7144f1c7a982e9e72b06c109ad17ee18483567ee0bdca521605d092f154ff66eb44b851f8cc2fa910e6a3fe846a42c0c4f377772c42b1647","ssdeep":"1536:UvA+DqolxUdfGB+TLsU0mRCsdRPQhjyrjzVPeXV/wTmBrvl9V:oD8RPQhj6Ip1","tlshash":"fb831a89b224b17706f75a8b82b5c21172b44948f805d4e4b1fd5dbb486e98813feff8","first_seen":"2026-04-11T01:17:14.179308Z","last_seen":"2026-04-11T08:05:57.741484Z","times_seen":9,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/product-1f4a3203.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/product-1f4a3203.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zdPYcfkwFNAac1w6uB6C66ApQ02Q%2Bz5GJ7hAGWV7jtOd7QVGqkJy1eRE4P8%2Bu45E46YJ9DSVwf7%2BzqAHaHAM%2BEdlBDd6XQMT8arKIDq2PQv1Q%2Fov%2FDYvnJVq8cbv\"}]}\r\netag: W/\"69d68056-2ad\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73afcc80bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (684)","md5":"d7101c2cb93ef1335b0030068030e0bb","sha1":"d057d1f244704cd1132a8f4386afa64b43c6ab28","sha256":"37cf0c9a7cfa1825eb3621a0d0f9031eb80b08f865ef12f6496980768d913352","sha512":"ee418f291884517256b397d30555959f794671b2d1f1fad0cbc4484bd1d4f3945c38eec4eb2961299f2891e021a9af2fe4b84d8a83a0770010943aa9f7c85fe7","ssdeep":"","tlshash":"29017b4f6c6ff3c94117e9b09020ce058f19ac20fa0c47f83f547b1176c218a6289b34","first_seen":"2026-04-11T01:17:14.176146Z","last_seen":"2026-04-11T08:05:57.752155Z","times_seen":9,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/InvestMoneyCard.vue_vue_type_script_setup_true_lang-132085a6.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/InvestMoneyCard.vue_vue_type_script_setup_true_lang-132085a6.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-1875\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MgXXLNHeOzrto0AQCQx2hd0EBX6IvZXOC6a%2FTqB7VbvCj7CZWAaMhfcAI0T8xJPPY6MU8c1h6Tq13IZHOhOo1zhhVU80sNSSypPwIrdspnRMjWYbIPIJl5EUCg3j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afcc80db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6260)","md5":"7244bebe1cb5e00826e60d7bd9c3f1ba","sha1":"4258b90d6e5ac2916c6b790736775885b1a75843","sha256":"3d766a83541f3b05813428acf2d3ccd4d55e92ef2b54da3ffadba3ae8743fb5f","sha512":"1c44820026da6e77a7c7d965e2c97cecab55820cbeed474970cad5bca8f00ff5c9e225014e35d5ced1ec85d99f2c9b1d8362061655c2df6ba42a26c8f972bb14","ssdeep":"96:FYh4nwm6bh9FAy+6Cwl1YFBESMpRBQEiJMzmWGf+upM3jpm0IMXX0+CcJ0edMU//:qh4nXOhn6hwMFByfQnNBofF","tlshash":"d1d11248b8328774f9b21851e49e7109735c3f8ec453e496b1fc12126beb875e769b2c","first_seen":"2026-04-11T01:17:14.193435Z","last_seen":"2026-04-11T08:05:57.761591Z","times_seen":9,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/api/public/index_info?d=1775881556857","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:56.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1775881556857 HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://gouzi.cyou/\r\nOrigin: https://gouzi.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://gouzi.cyou\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWcxcLQWyVYRbZL2nEnxCzF3fbOM%2BlapRE0KziRhqj%2FIWX%2BydU5%2BZj58vF%2FdSlVtrslWPY6JPeUuTW%2FE1K5%2Fx%2FSRXfFKCdX7qBMgUd43cj8Fez5n%2FMc2Xw4x2ZaIwdSqvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af26ba4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T10:09:22.674326Z","times_seen":14054606,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/upload/img/69d680ef6e47.webp","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /upload/img/69d680ef6e47.webp HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 89198\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:23:11 GMT\r\npriority: u=6,i=?0\r\netag: \"69d680ef-15c6e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dd83TB%2B6j2amFNJvnhRi%2BDEk9OzNrz%2BkcdQm0%2BxyEFGg9ykHE8O3EeDEKHJCAKi6zsN4Eh2EcPuw2xiAz7TOpjJVeJM8ig6XW9PGdhwz7AID5%2Bset9N0hZ9v8jBPt3Y38g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af54d0fb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x1170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d0fff5f1feea0b1b568a695308a719bd","sha1":"f03fb5d210c325325f6380687aa068c5cc86625c","sha256":"a7ad47f7be58c62940e561f3caf1d6985a4011984c3c6bb292d6bf62df4d36d9","sha512":"0e9a935b28a8a24ebf0af91a38f50f99f7d8ea372cec4eac838e520f2913c25ef2fbf7ea6b8ffed650f82d5f649d935bb16bb46c1bddf2c2b48a092592d6d6db","ssdeep":"1536:0B2E6rBMnkEi0dMo9DGidsDAJmdNIGioHi32o2QevKJFXQbWwOp:08EKMnkiY7AQ+GW2TQFcbWp","tlshash":"4293026f0c4e78f1e426245f3fd11fded6a189ddb6aa5f70d2212a85407eba03d28846","first_seen":"2026-04-11T01:17:14.192541Z","last_seen":"2026-04-11T08:05:57.745798Z","times_seen":9,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/danche-fcb091b6.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/danche-fcb091b6.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HoKeBhFQrHauRMhHncwS1WO6a6E9DR%2FZJDNu8hfVViaKQSUPxJL8hObI1YyI%2FDZHiC8e26Ame4fGeDDTAFIFObWpzFlg8QClNDnOHEhdHFr%2FNXhvGmPmF8RuO9JB\"}]}\r\netag: W/\"69d68056-3d4\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73afc8fe3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":980,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (979)","md5":"d3cc98ae6159473ca496a5ec0bcb6571","sha1":"7491d2357aa926474afa9f6c2c1a18552ecc27f6","sha256":"3362b73d436a56e5900cd1e4c5522754b43fc3ea6bd306577e8ba9dd06204d49","sha512":"d5b959c107cc0c665a9bedb96caf5fb2c6b86bc0d73fb02ea27930d847136870e07ce9346c9035a0958ec080d459a78ad01269094e95ecfeba36eb5a5a58b393","ssdeep":"","tlshash":"1511446f780362b0f6715c612aa7805323144b8acf1fd2d572fe4e0193a6d35bf15a35","first_seen":"2026-04-11T01:17:14.1721Z","last_seen":"2026-04-11T08:05:57.756977Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-9c7956e2.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/BaseMainBtn.vue_vue_type_style_index_0_lang-9c7956e2.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fzHWz%2FxPPkt7ma01wljrY6JBCK6U%2FobeNUEeO9LuFmMGyybo0Bxe6gndZ4H0fCzUUb7mDR6FWa8ry7hkMtcsKZNjXN%2BsIwB0IGLIUsC8aXOF3pFo9EuXYq%2BYusED\"}]}\r\netag: W/\"69d68056-22c\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73afcbffbb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (555)","md5":"1ac178f5ac8008d775be691c0f0055eb","sha1":"265fd5e971ea5d780200620895b6e3b482ee08f6","sha256":"4bb270c75b2f88497e4d737c6f0eadceafcc9777a08809959052750014a3e0a4","sha512":"81a8027f1678951969af71f7158876f911218e0f909b75a2466e6ec7323b62b79d82ffb88314b6e288c3fb22ff409d70e2c52b3f2088d657b224de0a3b1a3eac","ssdeep":"","tlshash":"bdf0c0056d01c5bc6c96064a1a9520109204366fe36564f8a5df226ca79f4f9793972c","first_seen":"2026-04-11T01:17:14.186449Z","last_seen":"2026-04-11T08:05:57.752808Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/Rank.vue_vue_type_script_setup_true_lang-050d87ff.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/Rank.vue_vue_type_script_setup_true_lang-050d87ff.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-1a3c\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hqa7Qdrtm4z6d73Ane5lQWxmnBUpjlmkIj9EQY1RkbT98o9VA3fUTspcYh%2B0tSPHpJZnLB3TAC1OJhvwkzYSASUMrGBOS5DhAIG1cAsDrquGSc2Fu8o9U3enz5Vn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afcb805b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6716,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6715)","md5":"806bc948c2ac4d6cb3c5dcab74903013","sha1":"c4cd5b23f0f9c790ee41e678d92c6d34982a1185","sha256":"28b16189d4f1bbe83de70392ec94963d59142fa0e543ea70ecdcf50a93bbb668","sha512":"70dbf0cbd3a3bf1d57339ba3aef6f1a67d6cc657610a23c9f5eb8223de4585dd13999723c406bf148a83f3a8acdb473a24aaeb7dc9abbf52bea812bae6993d4f","ssdeep":"192:7SXYZeAjoF/647rsTBuXb76sVL5zrwhmQFMkklUIFn:7SDV6fZAh","tlshash":"4ed1f0416025cabce4f76125b98a9921b184bfc7c566c406f1fd28032feac75979cbac","first_seen":"2026-04-11T01:17:14.183715Z","last_seen":"2026-04-11T08:05:57.7451Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/api/public/index_info?d=1775881557330","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1775881557330 HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://gouzi.cyou/\r\nOrigin: https://gouzi.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://gouzi.cyou\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bv%2BMfGB92xpKdteVSNef4dGEsBdtLJHyspNTH8M291V7jSsqKsnNtzJ4IReHQz2jUR%2FISBtc9hDdUNjDKdpMSDDJ1QGdG92LyuvXyORk1qPmzkHwAvqrKPXHfZ4aBfO3gA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af55d17b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T10:09:22.674326Z","times_seen":14054606,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useArticle-416a6424.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useArticle-416a6424.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Q7aptobRZHZpvm0%2FVqJ6FE40heYXAqpTCc6Bug0mU6yTxXb8I4hDpzBnUTb2H6VTpf%2BBXn9fzdfJ91D0NiQOVla4iXDyzacL1pc7WvtLscWulMlzuGWps9yfGjr\"}]}\r\netag: W/\"69d68056-268\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af5cd57b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (615)","md5":"491aaaeee15c649ec5d6341a8748fed8","sha1":"f5bdbe223347f6240dcc7f60783b311e36442104","sha256":"9d905cf74f9b9ef49b13869a5228ca4c257f69e4fbee6c8bd8bebbd1acea0170","sha512":"64440ffa07b48b2a69f98749d15e8b76c72d40dead14d0906c6a464cb900a08be23088979ee9b7b370bf7da596fbf5119c03b4b0c525273120a1ca993d9cfb2d","ssdeep":"","tlshash":"bef00c7470689bb89372bcb08cbe314c02612b00fa0260c4270eaf9c19f669693a1f5c","first_seen":"2026-04-11T01:17:14.171309Z","last_seen":"2026-04-11T08:05:57.751606Z","times_seen":9,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/BaseUserTab.vue_vue_type_style_index_0_lang-f8ccfa6f.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-f8ccfa6f.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SU8l%2FkoI80ee85RgDMh%2FdESb13fO%2BnuGKaJKYuZftoCy%2FzGQ3eUYTSmhD%2FChIrnpzxeKCcOZVCy%2FjNPwYBJ8UuguNQsHbiu%2F%2FzX5z68qawRnqHg7f7R%2BQRZTrhia\"}]}\r\netag: W/\"69d68056-2d4\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af5dd68b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (723)","md5":"92e431194a14ae5f6f8b7e9dd6ba2954","sha1":"3c10e40f980120ee9d3ccbacb6010a331a05d3e7","sha256":"538956b64409881e747c5b59a16abe5c109c36626d31689b03d0dfe45d0dfed5","sha512":"3e3c187130dd34d952b600688053b37ec4125d00d696ded645db47bfc4cd6954aa79cda0ff153fc479f211c521437000ab2796380017a3e00a88cec2282576ec","ssdeep":"","tlshash":"8e01c5dd58e5cbf9849306543e6b2050d0958f94db298d45b0ec1a22279b8b1b6de73c","first_seen":"2026-04-11T01:17:14.180257Z","last_seen":"2026-04-11T08:05:57.739943Z","times_seen":9,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/tabbar-5-1-88ebdc42.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/tabbar-5-1-88ebdc42.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/tabbar-d3508a6a.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3ab21-109bf\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOLmtkcG0gSvrcSRFU2G0GXj4ckrckrXplZe5gGeSuxsdHed%2Fc7BWapfMNZQjFOT019UrHXuYuyXqys5a9wMhQD2kKPzl%2FdByaiTYICgZkvr2a4tlScNo3Wcas5S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af7de1fb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68031,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6f426d1d419eb7c29b054c7ba217aaa8","sha1":"88a040864ff5fcc97b874157809a9d1a5ccb4da3","sha256":"12f422d1f0ff02d2dcd3de682631b23ec56050ff895881306df19ae0003b21cb","sha512":"02407a19a3d1082c613e585050beab002f06f4e6b0bdf47e8b1c2aa45780b00974731190a801308f803a1ea9866d06447fcd72dba7048b9bcef755a1fa1b2959","ssdeep":"768:uVxpvoZ8USsO3E2443m5upG1CrMG/O3LYNTw9Hn9LxpvoZ2UssOWE2143m5upGKz:usO3E29Aj1hOT4n1sOWE24AjK5DT4n3S","tlshash":"6663e07631195ebfaee18862f20a0205cdb1169b530ef299cb94b2b754dd721ec1bcf4","first_seen":"2025-07-12T13:57:48.771979Z","last_seen":"2026-04-19T22:13:03.047855Z","times_seen":112,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useCompany-18868465.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useCompany-18868465.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2BHr4VZKUUdnG6XkKvCQ12AE5nz4z3fvuCjnQ9UUe0g5nOhiRNCudCyq1Romtk8xB9fkSBWu1uLuPnlA7nPsUHgVPtbFKzeaD0L2Cqj6DfFobRlCjU9km7gjsEtc\"}]}\r\netag: W/\"69d68056-e3\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73afcb803b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"39c41e30326830b6af18f9728e9c7298","sha1":"73a0c4b1a3f42ddf976b79f0dff9f0948fb5fc24","sha256":"657747e23be2e124bec996278c82807ddcd72cc41a82f05a6e5e2eb2cbc8a2b4","sha512":"8628774f5077769808cb82078f96d3bf6734002d4d3493816f6c1d459ae9df103487c9b9f459dbd5b7dea5c2cff367f8d0dff8bd7c9333d245ae30b92e7e509f","ssdeep":"","tlshash":"1bd0a725600043b943b7689d537d78281592a0b43b4a86c0891a1f464af6ae69257e1d","first_seen":"2026-04-11T01:17:14.19711Z","last_seen":"2026-04-11T08:05:57.747051Z","times_seen":9,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/tabbar-d3508a6a.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/tabbar-d3508a6a.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-a546125e.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-1d4e0\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sU85lHSFG8RCshZVVa1w27f1h%2BEy1Mnng6sX9%2FLQ8aGkFuoZxTbDFa%2FUMHcIjYVG7bO%2FuFbnxZpr1rHRsiFRJ3wpfdOaj73iOJ%2Fg6Oiwzw%2F1OLV7PS0RxYN1IrmK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af68da0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120032,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e3fcbdc68af5369cf65b36be76e0d887","sha1":"4deed386218fc0a821a62364fe297b80131cd294","sha256":"d9a483a03b281dadd0c1346e242ab30a96e16a75f2a5e73af1de99ddd877bd0c","sha512":"5af50ed344ffe274bd2b048a226cd070d9798f3c72fa3feea4d3124ca40cc422fcf10fc47b6da50cba380bd6451353bfa4b35de2e5c2e17560a0109c71cfdd68","ssdeep":"1536:sTJ7rd7AmRmqqm1t2WfFEjI5kP8qT0vl6hkE4lf0qArT0EJTRsEpmKf/gUOsE7T5:sbQ69mem8h5Z7Y0","tlshash":"41c3c8848905d57ef53264425c9c0c42714dbfe3e8198ab6f2f8af5927d1bb8232e327","first_seen":"2026-04-11T01:17:14.17054Z","last_seen":"2026-04-11T08:05:57.755527Z","times_seen":9,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-11T04:25:54.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:54 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5pMYVyob4JkXCxvJII2%2BulcUo96k00L2SvzPiNQiypUURDgJkMENuqldNQl5xwGHc3csSusc0q5tvLl4AAny%2FAJWlOcytmXuVaEv3JgLqAZPIUme9IyX1ls24no\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9ea73ae409ff1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152986,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (54279)","md5":"3fd1e15f3eb6322488339245d42c2d3d","sha1":"beccfde1ec66d818ec6d25c2b6f353335252155d","sha256":"d21aa468e510e44b9baacf9c63aad3896eb59edbbd695157b23ad77014880cba","sha512":"7fc398c4c84fba9b5e7bd715bfcb0e75eb84dddcdb910fd096c308b3ced59adb2d515cd91dc5f39bb4a9f5c48c0b77c508e75087968eeabb41523f65ef2283fa","ssdeep":"1536:imoOZI7RqsqLhJFApnPq4LBjJPu9WYZ9uGptLLWv2XyTO5Kwulq:Omuq","tlshash":"1ee309f6a3e8a1e8e80bd3b8e676a476352b30ff3f45c648719c5a64fb2105d854dd80","first_seen":"2026-04-11T01:17:14.198176Z","last_seen":"2026-04-11T08:05:57.737059Z","times_seen":9,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":67,"dns":49,"connect":1,"send":0,"wait":295,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:55.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:63:7D:63:F2:DF:8F:C5:65:EF:16:8E:06:3E:E4:66:D9:41:67:CD","sha256":"91:A8:D7:CD:20:36:14:EC:9A:D5:10:BC:DD:44:F1:9D:26:20:78:F8:92:93:7B:37:6A:F8:E9:7B:FC:7E:72:66"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 24658\r\nserver: CloudFront\r\ndate: Sat, 11 Apr 2026 04:25:55 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=73d5d2c9b3eb4512b5a7ceff2d9cd7aa;max-age=86400;expires=Sun, 12 Apr 2026 04:25:55 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: QLxIhcaOnDCrAUB3AqrnGh984n8XaCOXgWWYXFu3YcMCGEMgAVsyxw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58518,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58491)","md5":"779dad81833261bc5bb0a005e1f01254","sha1":"12d7162ceb3f36169373d8935fabfe54383bdc49","sha256":"93230595b6dab54d976a3739d1b5c741f15161c568e4be72acf514dae4db984d","sha512":"3194159f5b7870c1ee051e973be89bc09b272e6dd29a2a8e174cfcda83da4f1c424108051a6dd4131934fa40d09b13ff817d4c401418f1e1cda3ff97cb60fb8a","ssdeep":"1536:kSO1Ejiaa1zoLOIkxUanOChvb6rXhWXvVC1Kazgpk5DXV:ZOxA+/lWWMDF","tlshash":"9943c79cf7e9b02103973472497f541be33bba646c0b8650c526e5883dbc59e9237eac","first_seen":"2026-04-01T22:36:39.136818Z","last_seen":"2026-04-19T20:09:00.510595Z","times_seen":2344,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":47,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/api/user/app_info?d=1775881556098","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:56.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /api/user/app_info?d=1775881556098 HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1775881556099\r\nst-ttgn: 0d048ce055e47c25dc588509bf6b1460\r\nOrigin: https://gouzi.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:56 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://gouzi.cyou\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hunYpxJBv%2BHVyNl%2BPCzeVUgMtVnpr8LrMnqxiHvpCEuo8p19f0CyIb1LhMs8F9rlhcQqFOxNfIitCZTl0w9kEtrRAxZK%2FLacYXkwLKlOPZImLe3h38VGnI6ikreW90r1OQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ea73af02a6db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5944,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e32396e6b8dbe35c77443b64914d0723","sha1":"25bb6a4608f73218b1c67d7b6e5c32055c074cfe","sha256":"5a57f80e2d9120d66d310bd6276bd789e3cd0b1823a9d1603336caec82b1f87f","sha512":"0fb489054688837af4ee820e1e01f9a7206ee5c6e7c3a5718d7cb52c3988d2731b7a1031c5f0695a4c43375bd09ddf8875a9c84c63a11f3743063e93217440c5","ssdeep":"96:IlS2U/yV3y7Lv5ZFR0UTjeEIccy2Q0LZKeZKwjNYAkIAOrwDCErw/oYA6rJ9YArb:IlS2U/yV3y7LB3R04jezcz2hN/kI8DC1","tlshash":"b7c12d11355adc7bd6e7bdc02acb75118d9d7cabfccc8b8aeb2cdda604980a1112e507","first_seen":"2026-04-11T04:26:27.546395Z","last_seen":"2026-04-11T04:26:27.546395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/Task-025bbdaf.css","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/Task-025bbdaf.css HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-53f\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8n9kfW1JtXeD1j0zz80OlfFFzevqkyZVPb8SlQv4RSE8%2F5CLIwqw8S729%2F4K2i%2BuMolYcthZUVXCkIBRowTeWHFDNoq4zzTVlqmOFA0UkNhi1HcN%2BbkZfw2LDk5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af57d2ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1343,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1342)","md5":"7fc73a295af0c54633d3cd450b975d06","sha1":"074420347a8a785ebbc1934f638ff7d5226b3c9f","sha256":"025bbdaf54023769d7ef322262a668ca5b9a89b81d876e1ce10c4c274b165ea8","sha512":"2b6789f421598a7dc5bd4e15fb88745b0020e6336aee0a3d79a5ed988eb51df80e7a7e8b8db6c580bfbc102e177df56f1142d21948993279034a913f93679537","ssdeep":"","tlshash":"db21c364fd5ba40733ebf04d74a4a7d66160e3a24738973eac8530b14ac31b43263725","first_seen":"2026-04-11T01:17:14.18726Z","last_seen":"2026-04-11T08:05:57.766938Z","times_seen":9,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/tabbar-5-1-88ebdc42.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/tabbar-5-1-88ebdc42.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3ab21-109bf\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2kJ3%2BifvRj7ZeICxwJyWfKJVvIv9hNT6vPPxvBJamVsHrtFEL%2FGmeIqYUg2Ql7JVU%2BYoSTm5DUY%2BsFKY6kwcxeXDsPOvTRkoZnJmKqj3fH8BgOhnwic5anWKxXrn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5ad41b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68031,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6f426d1d419eb7c29b054c7ba217aaa8","sha1":"88a040864ff5fcc97b874157809a9d1a5ccb4da3","sha256":"12f422d1f0ff02d2dcd3de682631b23ec56050ff895881306df19ae0003b21cb","sha512":"02407a19a3d1082c613e585050beab002f06f4e6b0bdf47e8b1c2aa45780b00974731190a801308f803a1ea9866d06447fcd72dba7048b9bcef755a1fa1b2959","ssdeep":"768:uVxpvoZ8USsO3E2443m5upG1CrMG/O3LYNTw9Hn9LxpvoZ2UssOWE2143m5upGKz:usO3E29Aj1hOT4n1sOWE24AjK5DT4n3S","tlshash":"6663e07631195ebfaee18862f20a0205cdb1169b530ef299cb94b2b754dd721ec1bcf4","first_seen":"2025-07-12T13:57:48.771979Z","last_seen":"2026-04-19T22:13:03.047855Z","times_seen":112,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/BaseLogo.vue_vue_type_script_setup_true_lang-b71dde3c.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-b71dde3c.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pokZx5q4loN7WRMOgZam9%2FdFIC9KN3AB0IM%2B%2Bt%2FPsfpoReDToFtCdDWSOEmZFtu0oxP4mLeDUkGzeGeXqRaZsPe%2F6FOC%2FRF%2F2R0Be3WZCI0SBWroL7120kyEDeNa\"}]}\r\netag: W/\"69d68056-20a\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af5ad45b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (521)","md5":"d4c3671fb2e7d141646a68c659571c98","sha1":"287beab403245adbfd1155ecba9c2ed1a00d90f4","sha256":"458ded89d1b0e00f836593f45a356097681bf15d37a0519854370279885264ae","sha512":"340ef136208c05b8834842a4fcb8ec4de0c704499a51fe7b80556f4663f8da069eabc40fd98e2d9ae05790fab8b53ab487ee663c791cbf8c5c964c0b6f4cfe37","ssdeep":"","tlshash":"bdf0c90f5c2a91ff80a659982b47204212085eadc6209a94f2e92374a2418aab01ea28","first_seen":"2026-04-11T01:17:14.181747Z","last_seen":"2026-04-11T08:05:57.747662Z","times_seen":9,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kaoya88.top/upload/img/69d68654fb72.webp","fqdn":"api.kaoya88.top","domain":"kaoya88.top","tld":"top"},"ip":{"addr":"172.67.134.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaoya88.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:13 GMT","end":"Tue, 07 Jul 2026 15:30:12 GMT"},"fingerprint":{"sha1":"B7:1D:1F:B6:C2:35:81:CD:CB:CF:17:5F:37:30:62:B3:96:F0:B7:86","sha256":"19:9A:3F:14:79:5D:CD:07:FA:5C:35:28:66:17:9C:AF:C2:B1:A6:2F:EC:D6:88:D6:C0:48:24:6A:B0:03:8B:99"}}},"request":{"raw":"GET /upload/img/69d68654fb72.webp HTTP/1.1\r\nHost: api.kaoya88.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25426\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:46:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69d68654-6352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 67\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Syely0TmJhY88qS1SmvC%2BL0SgrrZxiY%2BYLv7XE7SyOcGpdNPNwiN1Vo24YazEz%2B530NI77ZrPew7vuTdAxUwnK1Jokti%2F%2FU37CyHE8%2FhrABm3zdn7gKaLnqOHca1%2Fp77s7E%3D\"}]}\r\ncf-ray: 9ea73afdee4856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 384x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82d0ced2f4af7c2a02cbdf02f4ccd468","sha1":"7b4f7c7c4e47fbd881817c9523144325b844a24b","sha256":"1153417f0b5032e7c475ef0c5252f83bd353df4844fd5971693a34c0c279ba14","sha512":"9fc6f0e78bfe94ef51c66ed711dd3a58b69f9b774b956a413b41d131c94a7915e3fd0dd14081d3a1463571c6e48e709b380fcf54031e93629d45d0111dac3f51","ssdeep":"768:L0dzqZvyf9XOJt9DTlYNEH6SPEJ17qZb2D716xrdDm6ZTO:L0deRiVgt9b6YC1hn1wrx3TO","tlshash":"89b2e0bbe7e1da031037bc3f509d1558eb0da6a5a09884d6927baa2d1118a413e94cab","first_seen":"2026-04-11T01:17:14.167593Z","last_seen":"2026-04-11T08:05:57.73759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.kaoya88.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/BaseMainBtn-cf1599ad.css","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/BaseMainBtn-cf1599ad.css HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gukm9KFxq95J1kf%2BuECIpQMmiPAbkyn3JXGf0FtgDyrYojezW5Yzm4qOMG8659rp2YlcpZQVEIyY7TTopfO%2F27PlargWTJEBFhhRhqGoqEegu%2B890lQBT8g89rJ9\"}]}\r\netag: W/\"68d3ab21-da\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af58d2eb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c1fb97309cdf49465e4f0c30d3076578","sha1":"a89aad9837fa74c4b617ae97df0cb4bd6be84cd8","sha256":"cf1599ad93a05243bea5ed51b989a7bf72f5292a94b612154a39d30d50e35e9c","sha512":"c43620fa6919ff89a83a41252ce19bfef4cf68662f34b0a054749d7293c2dcb601ba2dace836f22635988cd596f8bc16b3f7b331a7eb622cb0df89e256ce9030","ssdeep":"","tlshash":"4ad0128d3191b97e18be87cc75ec50214b8038975f51beb9655429dd43872773c7305e","first_seen":"2023-11-04T18:18:58Z","last_seen":"2026-04-21T13:48:47.874875Z","times_seen":206,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/tabbar-d3508a6a.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/tabbar-d3508a6a.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-1d4e0\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQEgNkmX0aekqhJUvyARP9b%2BLlCEBGyCum5eYXeQCU%2BiewxtpcdqrMGtfZkDaQ0azabXOdcU%2Fzu7weCvXQIr%2BAA0%2BXxk5ttnN8IC3vOyobDF25F4DDevsMXU1Y%2Bo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5ad3eb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120032,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e3fcbdc68af5369cf65b36be76e0d887","sha1":"4deed386218fc0a821a62364fe297b80131cd294","sha256":"d9a483a03b281dadd0c1346e242ab30a96e16a75f2a5e73af1de99ddd877bd0c","sha512":"5af50ed344ffe274bd2b048a226cd070d9798f3c72fa3feea4d3124ca40cc422fcf10fc47b6da50cba380bd6451353bfa4b35de2e5c2e17560a0109c71cfdd68","ssdeep":"1536:sTJ7rd7AmRmqqm1t2WfFEjI5kP8qT0vl6hkE4lf0qArT0EJTRsEpmKf/gUOsE7T5:sbQ69mem8h5Z7Y0","tlshash":"41c3c8848905d57ef53264425c9c0c42714dbfe3e8198ab6f2f8af5927d1bb8232e327","first_seen":"2026-04-11T01:17:14.17054Z","last_seen":"2026-04-11T08:05:57.755527Z","times_seen":9,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/upload/img/69d6851de2d4.webp","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /upload/img/69d6851de2d4.webp HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69074\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:41:01 GMT\r\npriority: u=4,i=?0\r\netag: \"69d6851d-10dd2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJ0B7V6H6JfNiEYZIY7k%2BSxWsallTrpCoXjb5CG55HelFVCZQ6KglHdNMOv3CMEmGKZqXdm%2FNZZhLcSctCtzRapzqA%2FB38VygM7L5hvVSOeQcuZihYutfcghNTyKKT4csQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afd7852b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x533, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"22f42f6a4e746e0312043f7f8f92db04","sha1":"5ff07d145a3a58c660e705590dcdd76301be8407","sha256":"f30b8c0eb955c5114f86640035132e95d8d3ed46e3d7ae60966d3e6196c4fe54","sha512":"f2bf8b82654195a471acdde7b525bb258d827952dd4f488afd43416ae0819e23046d0d899b0ec3349a3a2e1984e8e4eeea56bbcb8cbe82919732a86dfd661aa7","ssdeep":"1536:fCROqXHhAOYYni4aYLHM0U3FyT+NoFjLYlET3LHOXIlkEfyZqEwbtI:wOym4aCk3FQ+CFYlm36XsKZwbC","tlshash":"2b6302add51809619b0deb906466d602ed18440d3eafdc8be28608f758de0fa7da3fd4","first_seen":"2026-04-11T01:17:14.166541Z","last_seen":"2026-04-11T08:05:57.769418Z","times_seen":9,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kaoya88.top/upload/img/69d68622ca28.webp","fqdn":"api.kaoya88.top","domain":"kaoya88.top","tld":"top"},"ip":{"addr":"172.67.134.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaoya88.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:13 GMT","end":"Tue, 07 Jul 2026 15:30:12 GMT"},"fingerprint":{"sha1":"B7:1D:1F:B6:C2:35:81:CD:CB:CF:17:5F:37:30:62:B3:96:F0:B7:86","sha256":"19:9A:3F:14:79:5D:CD:07:FA:5C:35:28:66:17:9C:AF:C2:B1:A6:2F:EC:D6:88:D6:C0:48:24:6A:B0:03:8B:99"}}},"request":{"raw":"GET /upload/img/69d68622ca28.webp HTTP/1.1\r\nHost: api.kaoya88.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25426\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:45:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69d68622-6352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 67\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eR%2BVuTiqxbBl5ehBjGkHN6EnwlYnOWRHs9GkI2vzYCBuno4AXkh6qL6wYR%2BtOcuFjLXm73jaWSkDKEjpdl5oGgBUCvcNr0UN4XVjpFRlL7s9%2BM5W%2B3UZicQCL%2F%2BXBto3Eqc%3D\"}]}\r\ncf-ray: 9ea73afdee4556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 384x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82d0ced2f4af7c2a02cbdf02f4ccd468","sha1":"7b4f7c7c4e47fbd881817c9523144325b844a24b","sha256":"1153417f0b5032e7c475ef0c5252f83bd353df4844fd5971693a34c0c279ba14","sha512":"9fc6f0e78bfe94ef51c66ed711dd3a58b69f9b774b956a413b41d131c94a7915e3fd0dd14081d3a1463571c6e48e709b380fcf54031e93629d45d0111dac3f51","ssdeep":"768:L0dzqZvyf9XOJt9DTlYNEH6SPEJ17qZb2D716xrdDm6ZTO:L0deRiVgt9b6YC1hn1wrx3TO","tlshash":"89b2e0bbe7e1da031037bc3f509d1558eb0da6a5a09884d6927baa2d1118a413e94cab","first_seen":"2026-04-11T01:17:14.167593Z","last_seen":"2026-04-11T08:05:57.73759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.kaoya88.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kaoya88.top/upload/img/69d6866a23f9.webp","fqdn":"api.kaoya88.top","domain":"kaoya88.top","tld":"top"},"ip":{"addr":"172.67.134.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaoya88.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:13 GMT","end":"Tue, 07 Jul 2026 15:30:12 GMT"},"fingerprint":{"sha1":"B7:1D:1F:B6:C2:35:81:CD:CB:CF:17:5F:37:30:62:B3:96:F0:B7:86","sha256":"19:9A:3F:14:79:5D:CD:07:FA:5C:35:28:66:17:9C:AF:C2:B1:A6:2F:EC:D6:88:D6:C0:48:24:6A:B0:03:8B:99"}}},"request":{"raw":"GET /upload/img/69d6866a23f9.webp HTTP/1.1\r\nHost: api.kaoya88.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25426\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:46:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69d6866a-6352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 67\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCQR7%2BxMpPYh%2B06XdcGGmPa6hOS5c9K%2F9JBEcVCXBpO0hTZ1SNdDSQ9EDFSKrdQrvEV1HANeDKThiQAybrE6853M05F0RsBCw5ugrTyOdRXAUqlIlR3syQXnB6ONP%2F51JEE%3D\"}]}\r\ncf-ray: 9ea73afdfe4b56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 384x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82d0ced2f4af7c2a02cbdf02f4ccd468","sha1":"7b4f7c7c4e47fbd881817c9523144325b844a24b","sha256":"1153417f0b5032e7c475ef0c5252f83bd353df4844fd5971693a34c0c279ba14","sha512":"9fc6f0e78bfe94ef51c66ed711dd3a58b69f9b774b956a413b41d131c94a7915e3fd0dd14081d3a1463571c6e48e709b380fcf54031e93629d45d0111dac3f51","ssdeep":"768:L0dzqZvyf9XOJt9DTlYNEH6SPEJ17qZb2D716xrdDm6ZTO:L0deRiVgt9b6YC1hn1wrx3TO","tlshash":"89b2e0bbe7e1da031037bc3f509d1558eb0da6a5a09884d6927baa2d1118a413e94cab","first_seen":"2026-04-11T01:17:14.167593Z","last_seen":"2026-04-11T08:05:57.73759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.kaoya88.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/Task-a58992c1.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/Task-a58992c1.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-31e0\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5hKli7sSOil0fXc%2B5ekp6US4qny1axFWbaP2k7mZWxF9NnZ2m%2B5JP3zI%2Ff5Sf4wmSCvlmITPaVbfrx0TM2vxnv2fkb5R1%2BZs9OSZSE56drnFcdtYyo0HQKEhwwaa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5bd50b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12768,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12767)","md5":"5643604c3ad430f05a132aaa6e78343b","sha1":"9a325b70efa2bc970532b9fa7b5d8a39bcb77b24","sha256":"3a140bc03456935cb6fb59d15e38ae2028bac3344324533632f4dca0d93f50f4","sha512":"3aa45c4d8f28905c9dbd9d6774037c42ca1646f39de438b0976b494de555237be2d2e6de4f46543cf22517d91023c21ab397f12a7a9277ee1d7c1a8c6b25ed2f","ssdeep":"192:ZSOgBmLXBmICB7T20wZryzPRs7kUC1+ULpBWvgZg+UtcG+1x0+UoDSrNbMKR30+B:Zaz+kUC1+UmgZg+Uf+1x0+UnIe30+Uy","tlshash":"a542ff06e803e2a8f5f23495a5dd141472f45febd26e8506b1f9263603c28f09bdeb79","first_seen":"2026-04-11T01:17:14.182535Z","last_seen":"2026-04-11T08:05:57.768275Z","times_seen":9,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-9c7956e2.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/BaseMainBtn.vue_vue_type_style_index_0_lang-9c7956e2.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kgoIkWFs%2B3rEDQbcQJlcpC4rKh5cUUM20mC%2FhT4MgNyzmFgTPJfOL%2BJViUUZrls%2BDCssDIajAF4Rk9GJz194HRTCXOUcnkMDrIV46NAuHQXtIYfdF4dC6ywc9n0R\"}]}\r\netag: W/\"69d68056-22c\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af5bd54b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (555)","md5":"1ac178f5ac8008d775be691c0f0055eb","sha1":"265fd5e971ea5d780200620895b6e3b482ee08f6","sha256":"4bb270c75b2f88497e4d737c6f0eadceafcc9777a08809959052750014a3e0a4","sha512":"81a8027f1678951969af71f7158876f911218e0f909b75a2466e6ec7323b62b79d82ffb88314b6e288c3fb22ff409d70e2c52b3f2088d657b224de0a3b1a3eac","ssdeep":"","tlshash":"bdf0c0056d01c5bc6c96064a1a9520109204366fe36564f8a5df226ca79f4f9793972c","first_seen":"2026-04-11T01:17:14.186449Z","last_seen":"2026-04-11T08:05:57.752808Z","times_seen":9,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useFriendsCircle-3732382c.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useFriendsCircle-3732382c.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-ab0\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AAvqsu8gHiiu5C0hNXoEvDwLS8LqkF2ZAABx2W1EgQZ7cqwAxagJFkSKsMBKHvnveFHK0h24y2aM3Rob9oWuvJOLE16l51GCD6FYhD6C2My82nZpqZLJK98NCJzf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5cd59b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2736,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2735)","md5":"5c3594ec119d469d3bc5e96a20dd9d32","sha1":"0cbe3b3277d15cde51828ac4883f53794ab20866","sha256":"492e12a04f6bdebf60229ff96dc40d6039b2ceb0e47d263dbb3c495c237517af","sha512":"64dd472899831f5bf770d14eb0f044346910aaad8896a8314c7d44abe5504e0c4a722f44b60817f220ed01d98b25479599297927aa939cd7e42f3f6c92673252","ssdeep":"","tlshash":"8651b77236b222ead3b330bae03660159aa92f943d16d1d1711d0f058a7cc12d9bff18","first_seen":"2026-04-11T01:17:14.190241Z","last_seen":"2026-04-11T08:05:57.749114Z","times_seen":9,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useActivity-db553016.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useActivity-db553016.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-480\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kBAZi1AZGWKGNVxQ2JdMUmkmnOT6RndOJKxko91Haws244vfxyA8MzlHnFtYpeXKqkIltNkC0fRppOkaUigcRt0u9WMNkpI0wavDWVAV8xCsJZZY56dBEfFqUm8l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afcbffeb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1152,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1151)","md5":"e7d1a7746603a618d09ee23ab3639328","sha1":"940d969de31e11e276060e256efa56c1ead56917","sha256":"a0e30538c7d8e4b796f8df7b62321e49d49f79736d8ab556e9cffbd553e07bef","sha512":"b19a902a16527c82f22ae47b169661793e47ec6e31bafbe16e81b049e8a2e1b3b52ade8d046c2e6bbb51de699f736ee0b9ca17a1b207a3702c39198ffbbef137","ssdeep":"","tlshash":"1521309ab00df37990ef08591816640362892bd46324c4a9fbb50c4e17e6bf9c67661f","first_seen":"2026-04-11T01:17:14.165491Z","last_seen":"2026-04-11T08:05:57.770006Z","times_seen":9,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/Task-a58992c1.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/Task-a58992c1.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-31e0\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Am9%2BwuFJWYJddmxjHlDhk3rp0Ktlr8rsdfxCg81ku5z764Xj4foscQXoecbtfm0odsIJQO7e3B41tTpgjgkFk8Qr1ebTn6BTd16qNqLztBjXhRKXwM4PQlVdWWbI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afcc808b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12768,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12767)","md5":"5643604c3ad430f05a132aaa6e78343b","sha1":"9a325b70efa2bc970532b9fa7b5d8a39bcb77b24","sha256":"3a140bc03456935cb6fb59d15e38ae2028bac3344324533632f4dca0d93f50f4","sha512":"3aa45c4d8f28905c9dbd9d6774037c42ca1646f39de438b0976b494de555237be2d2e6de4f46543cf22517d91023c21ab397f12a7a9277ee1d7c1a8c6b25ed2f","ssdeep":"192:ZSOgBmLXBmICB7T20wZryzPRs7kUC1+ULpBWvgZg+UtcG+1x0+UoDSrNbMKR30+B:Zaz+kUC1+UmgZg+Uf+1x0+UnIe30+Uy","tlshash":"a542ff06e803e2a8f5f23495a5dd141472f45febd26e8506b1f9263603c28f09bdeb79","first_seen":"2026-04-11T01:17:14.182535Z","last_seen":"2026-04-11T08:05:57.768275Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/InvestCard-828e3461.css","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/InvestCard-828e3461.css HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 01:32:47 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"691686bf-22bd\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfqjgQ3Ufvkl4%2FN1%2BOrOo%2FCAA%2BQ9hkGTKUHswrfkzFrAXyf0TVkriRw5dC9JCW0AQ%2FYSrNsJgzWDKlEbmahNMf8GhXdsmA1ZeJPbsWjJ50PZmk6DEA3KfgV%2FWX4g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af59d31b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8893,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8892)","md5":"3a9b48a672ea73ea9aac1ea9ea701d61","sha1":"33c90dc4f88d06bd792ca86b4d6605be584a7276","sha256":"828e34611528ee07351e526d20d1c84e767287f026d42832329c8adb7831352b","sha512":"28312132ce8e7f322c47c661eb4154dae83192e6fdeed91cb0aa310ce764a87f7410a4009c242494c2a80013ec8b8edcb645c956f31f9e54450d485d4f6593ce","ssdeep":"96:hfTJMVPLGgsHq5SlLfoloYigRpYPLGRg9pTw7jgLmcKkT16WbActkY0ANKB:NwLlsHiSlLfol8/L8g9p87jgLmc9xS","tlshash":"ba0242f3e185231bb427e46a298d229d6c35b603d41397df66467231cecf9fb2963109","first_seen":"2025-10-11T14:37:51.684973Z","last_seen":"2026-04-19T22:13:03.151837Z","times_seen":88,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/index-bf01850e.css","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/index-bf01850e.css HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-9bb87\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9OeTdlqD0uX0O45IKcJrYyp1NsX7cwRx2xW9jQCLXysd77nFk9FXscQ7Uv7ITfS2l1tpj9BIyedhrIQDTdveig4uB%2BxHFGFsqU5R7rMmLSWXJ32Aw4hXfUIAM6GN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af59d3cb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":637831,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ef2b06c4610c41a2fec27942c17e57fc","sha1":"856f9a53e7f8d5cfd86d168473fb62501e36532f","sha256":"bf01850e9155b1e821d14bfbdf41786be65c3274776a5007456a32420f34fef2","sha512":"574b367a6fcbc0c871d501b64d84e4d5869d24e129eb3cee38702c6077a75180bd592f27120342c52bbb62a751151f3eb2117c03df9a7db8c49bf983b34de4d1","ssdeep":"6144:mw9UjEUDEH18KqIV/464bQz39UzLIAQrUTQ68K/0O60ySrZO/eH1hRXAt+BN7c:mwi++d89ELMUTnpJs","tlshash":"5bd4d5b43544663bbdb7e124766c1ecd2e16a103d523c29ce676342dccefae3266e148","first_seen":"2026-04-11T01:17:14.196184Z","last_seen":"2026-04-11T08:05:57.768915Z","times_seen":9,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":612,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useHome-b180038d.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useHome-b180038d.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-d85\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vx4WBAQdRs7jaxbXBlmn46mhOy0POZo%2BLaR4ltxXk9wBe%2BYQ0sjTMXr4Qcw4mSkjJoVDymKxzBJGt8jjylzmUtQU%2BtVxgwVBlkmcCjnxqFK9Go6zXi1B8Q1XPJ0L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5ad46b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3461,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3460)","md5":"180e5534d2ab3f14d143c3fd62836b1a","sha1":"f046ba937c89852b069d89726b6628d4d3adb7ff","sha256":"70d4461732f0c64eb7293a76225725bf96d485754a83d5053ef6a4def30fa425","sha512":"11015156b772218af5067b62443534622d7e6781fcc4e578f381635b282dda2388d7626e6d83fb08e87c0347a56eb39b0f33bb7823589ddcf616dacb0de770c1","ssdeep":"","tlshash":"fb61735873b38074c7b915b016ea0901603ed705dc5ae0cdb1a305555b7bfe6b8dcea6","first_seen":"2026-04-11T01:17:14.180948Z","last_seen":"2026-04-11T08:05:57.746452Z","times_seen":9,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/index-ff1ec330.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/index-ff1ec330.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ETtsb89jqJ6lRJXWevfVtPe5NdFGDNgDh%2FLK3gYmoRgD0xtnjYs7flLbJD9okK7mpEuSwxMy0vnCNZ85knPvpg38WgvrHW6%2Br7MxtJGKNI5qLINp5m7xHSFExHmf\"}]}\r\netag: W/\"69d68056-385\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af5bd52b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":901,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (900)","md5":"ad792ba3a8730fd1fd93ecb9cda2a54c","sha1":"3209e53ce53d2392d0b2cb91b8bb68ca65fe805e","sha256":"b98487e0dff5a4727e29c9a77a6dda6a1459b96ac7e414c1087c0494cc72d807","sha512":"c7abff4781016e373be593da669d847c875e819235e13814109a87184dbae597db9ec0cc0e87fb972e0ab7ec9908a274806a6f63cbe0516fed998b1cff12d0db","ssdeep":"","tlshash":"3311236bec95f130415398dc96a80ba3a3cc7dd8213163c4b55e893807641ec703e60b","first_seen":"2026-04-11T01:17:14.164049Z","last_seen":"2026-04-11T08:05:57.762742Z","times_seen":9,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/autoplay-186da9d2.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/autoplay-186da9d2.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-144b9\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ci%2BZ6t7%2BvETL7yfc8UIIzF07w%2FY8nVQlqt24hLX5D0L9ddBINVjKdcceehLBSmTu8P92okwmJxhjPRZnJ7IPBosopjBkRaL7%2FD%2Ff0WisVsraV9Au0fzeyDTaMN6u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73af5bd53b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83129,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5873554d215113ef0704001e22da8a10","sha1":"5d6fd5597e7c9b43d767de8da0730edad43665b5","sha256":"a8b3e94f5833e9df419e7b6e0cf45965e23ea3a972ab4787315205a0758e3474","sha512":"7d584d5a0091c77c7144f1c7a982e9e72b06c109ad17ee18483567ee0bdca521605d092f154ff66eb44b851f8cc2fa910e6a3fe846a42c0c4f377772c42b1647","ssdeep":"1536:UvA+DqolxUdfGB+TLsU0mRCsdRPQhjyrjzVPeXV/wTmBrvl9V:oD8RPQhj6Ip1","tlshash":"fb831a89b224b17706f75a8b82b5c21172b44948f805d4e4b1fd5dbb486e98813feff8","first_seen":"2026-04-11T01:17:14.179308Z","last_seen":"2026-04-11T08:05:57.741484Z","times_seen":9,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useNews-9ec38bce.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:57.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useNews-9ec38bce.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gouzi.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5D4s6hc4KhuV8FoacRq12qukwsm%2B%2BQzcBpsVKoXpJfh%2Bi9NApbqP%2Fy943D1RJiQMTWz8Cjq63SK9yDVVb8eCqpnzw8Y7cBtPwdmmyE1vzUCunfzU2zPOnvBhOES\"}]}\r\netag: W/\"69d68056-394\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73af5bd55b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":916,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (915)","md5":"e97f422e6e5ca77dfade7c5db792bc8f","sha1":"d89b321d94c867bbb73d91a3da3e822eefb4e845","sha256":"4b53f1431b84648549f9271514420912d4adcd2a8c1a9da80a265899fc648bf1","sha512":"c7866bc23c7965e029342a5e4b079cb880f26ad0b1d239b2d3cc3c3a25aa7ea635c812e7104139a1ed15cc4de351a22afe2c2e31ff8581e392b68a1e027a5e8f","ssdeep":"","tlshash":"a911004eb166d2f861fe1c0c24571128726b5b847931e8c0a3be1a931962cf4e57ba3d","first_seen":"2026-04-11T01:17:14.173007Z","last_seen":"2026-04-11T08:05:57.739312Z","times_seen":9,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useVip-b04cf728.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useVip-b04cf728.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d68056-baa\"\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eO9bBBB8Fohj6u9dwjZI80iapSySA6i4vItKny2me1f3SGkjcqkdvXumaIfWBEnNfbftOokoAuTx7iYBYwKwWoFkY3DwwQEPqUXd6HBHe3ac14IcxbjkOh9DMmyP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afcc810b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2986,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2985)","md5":"b7f17459df6b88d710aceeeeb6cd8975","sha1":"5884cfcc250b1c16ec45e32876bd405df02431fd","sha256":"43862ee5979d983f58a79f641ee563e60e18b4936fb1282d988b402141e3e8dd","sha512":"d181263752a1cbf85d1aa98dc69a1008b93543f252b147f19ee45b4a1778581409f2eb7600cdd5cfdb54c8c9faf1663347b36bb984cf460acdd388ab2e029382","ssdeep":"","tlshash":"ec5164abf178057a4bf90c78a8f9128711702304f84191ea52972f418f6bd118ffaf0a","first_seen":"2026-04-11T01:17:14.188053Z","last_seen":"2026-04-11T08:05:57.76355Z","times_seen":9,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/TaskList.vue_vue_type_script_setup_true_lang-aa515eb7.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/TaskList.vue_vue_type_script_setup_true_lang-aa515eb7.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qIxvXxqaG7pu%2Bmv72RQLJ%2FGjkre0svMLcLgrcA5%2F35Zuc%2BUgOqemuG%2BWU6Nq25SlxJIgQqlafwuzNIslle9pPsG6VsVjahbzncp6t7QCg9kppNyFVk4e%2FiZgTTX4\"}]}\r\netag: W/\"69d68056-222\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73afcaff8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":546,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (545)","md5":"8d11db1f21721ff03b1773392127d338","sha1":"90bbecebb742c5bf6de7a525a30ca4fd19c2d299","sha256":"d3d60ee01bde3ee5e92131d96fecf3584f407433304df681b76b47ceed9d50bd","sha512":"3817e4559969844afdf9031a048c521aefdcc53447275dfc4052f92fad30688a1fd07ce5e7ae5a61645bade25d2fb12316000b5fb6013bd23aec68b224eb7142","ssdeep":"","tlshash":"d8f0c08e7d0e45b3c3598db4a7be046264940266672c51d4f40e0867d311898a87fee7","first_seen":"2026-04-11T01:17:14.200958Z","last_seen":"2026-04-11T08:05:57.767642Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gouzi.cyou/assets/useNews-9ec38bce.js","fqdn":"gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /assets/useNews-9ec38bce.js HTTP/1.1\r\nHost: gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/assets/index-b32835d6.js\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:20:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 16:25:57 GMT\r\ncache-control: max-age=43200\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nt9sjsGzkDVtJ2dIazr3ugJv1p34eKPHVhROYjPrvIP0Q7npwlogJ2Lem2VO9SayMBt2ww%2FpCuX%2BXrpsM4tK1s2r1OsnfWTyBwt7WFSw2sljT5ozVxYI2LynrJOO\"}]}\r\netag: W/\"69d68056-394\"\r\ncontent-encoding: br\r\ncf-ray: 9ea73afcbffcb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":916,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (915)","md5":"e97f422e6e5ca77dfade7c5db792bc8f","sha1":"d89b321d94c867bbb73d91a3da3e822eefb4e845","sha256":"4b53f1431b84648549f9271514420912d4adcd2a8c1a9da80a265899fc648bf1","sha512":"c7866bc23c7965e029342a5e4b079cb880f26ad0b1d239b2d3cc3c3a25aa7ea635c812e7104139a1ed15cc4de351a22afe2c2e31ff8581e392b68a1e027a5e8f","ssdeep":"","tlshash":"a911004eb166d2f861fe1c0c24571128726b5b847931e8c0a3be1a931962cf4e57ba3d","first_seen":"2026-04-11T01:17:14.173007Z","last_seen":"2026-04-11T08:05:57.739312Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-11","alert":"Phishing Block","trigger":"gouzi.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gouzi.cyou/upload/img/69d6851412af.webp","fqdn":"api.gouzi.cyou","domain":"gouzi.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gouzi.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:57 GMT","end":"Tue, 07 Jul 2026 15:30:56 GMT"},"fingerprint":{"sha1":"95:84:E7:17:3C:AC:40:CE:98:4C:0E:93:27:B9:60:C4:38:9B:EB:B5","sha256":"43:09:5E:50:BA:A5:8F:1C:15:06:7A:D9:C5:60:4E:CB:7D:67:78:02:99:0D:61:F7:03:A3:13:04:A0:59:5E:20"}}},"request":{"raw":"GET /upload/img/69d6851412af.webp HTTP/1.1\r\nHost: api.gouzi.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nCookie: _scid=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt; _scid_r=wT8wJHkgC3BBSCOyKI6gmvBE_KnwKFtt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 434924\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:40:53 GMT\r\npriority: u=4,i=?0\r\netag: \"69d68515-6a2ec\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nlOwJsPiVf2O%2FImubJSulUhRXb2iHGyCtleh7UAOFgppamWtEzaaB6xjAAvMd98jR3F43XLOnhp%2BD3cCu142DcmjWC86bBpK3BGkCEQOMoyuZQD6YF9gD%2FbVuxfKvT%2F3iQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea73afd784eb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434924,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x776, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d8fa5679da5f890a9167e72f598e4077","sha1":"f49ce0cb4523547b29220ad3433ab28917448b35","sha256":"ef1c53ae74550b19fb61a4a446a800e699c8feb251852baffc12015ee2b85431","sha512":"d0d5ef269996f20bbef91385afc8a4b501c13bbe44295ee697fcfb8a5494aff37fa682ba30e34d1c22de55e10f71cb2acf4e77a2a991adb2da57325f75171539","ssdeep":"12288:rPTwXLXZ/z7nxJDVCO0t5UNL/yn9qnwGHQPlAwuj5sFS6JXZ:/w7Z/JJP0t5ogqnh6lmsNJ","tlshash":"f794230958839620dd42a0d0ef0913d6fbddb2442fad777ab5f13aa7185f2e4f60928d","first_seen":"2026-04-11T01:17:14.194391Z","last_seen":"2026-04-11T08:05:57.750273Z","times_seen":9,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.gouzi.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kaoya88.top/upload/img/69d685c543af.webp","fqdn":"api.kaoya88.top","domain":"kaoya88.top","tld":"top"},"ip":{"addr":"172.67.134.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gouzi.cyou/","date":"2026-04-11T04:25:58.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaoya88.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 15:30:13 GMT","end":"Tue, 07 Jul 2026 15:30:12 GMT"},"fingerprint":{"sha1":"B7:1D:1F:B6:C2:35:81:CD:CB:CF:17:5F:37:30:62:B3:96:F0:B7:86","sha256":"19:9A:3F:14:79:5D:CD:07:FA:5C:35:28:66:17:9C:AF:C2:B1:A6:2F:EC:D6:88:D6:C0:48:24:6A:B0:03:8B:99"}}},"request":{"raw":"GET /upload/img/69d685c543af.webp HTTP/1.1\r\nHost: api.kaoya88.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gouzi.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 04:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25426\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 16:43:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69d685c5-6352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 67\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kr1M901rszTZVXyKX6%2BO6ny4A0AJjX7%2BZdwOUlMTG%2F4YWIn1ZZazLw6JMS8Q5dqadW%2BTBB%2B12NIyhdAw9hCl2Q%2BeFJUCufbKE1Sm%2BqxNcfWbIsEErWIuY76eyh3q%2Fk9N9Lc%3D\"}]}\r\ncf-ray: 9ea73afdee4456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 384x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82d0ced2f4af7c2a02cbdf02f4ccd468","sha1":"7b4f7c7c4e47fbd881817c9523144325b844a24b","sha256":"1153417f0b5032e7c475ef0c5252f83bd353df4844fd5971693a34c0c279ba14","sha512":"9fc6f0e78bfe94ef51c66ed711dd3a58b69f9b774b956a413b41d131c94a7915e3fd0dd14081d3a1463571c6e48e709b380fcf54031e93629d45d0111dac3f51","ssdeep":"768:L0dzqZvyf9XOJt9DTlYNEH6SPEJ17qZb2D716xrdDm6ZTO:L0deRiVgt9b6YC1hn1wrx3TO","tlshash":"89b2e0bbe7e1da031037bc3f509d1558eb0da6a5a09884d6927baa2d1118a413e94cab","first_seen":"2026-04-11T01:17:14.167593Z","last_seen":"2026-04-11T08:05:57.73759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":45,"dns":1,"connect":1,"send":0,"wait":11,"receive":2,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"api.kaoya88.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}