{"report_id":"34934b2e-cac4-4e74-b97a-49b401c1bdff","version":0,"status":"done","tags":[],"date":"2026-06-16T16:46:03Z","url":{"schema":"http","addr":"ngw740.com/90GAME.shtml","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"104.21.5.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ngw740.com/zh/90GAME.shtml?t=20260616","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"title":"Error 404","dom":{"size":130517,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"e66bb4d167178bf53922cd1524530a46","sha1":"e0d22100d28aa9d1aa14b5c1425e85614f100ca7","sha256":"0802fbcfc7e717b692ff76bf00a4deec44e17d48b840651bb50a60053ed27e64","sha512":"5302a8487bb8d56e17fe5bbb81089a84192532c38787721b23dc08b3833593598473ecfe90255c027db874c6226c1d2c07c959bbfcdcc89adb071da407043fbb","ssdeep":"3072:UzKJF0TA4TvWgExddRKomXQkdAF1CSbAbDsElH/2iqypnZEO7WXYQN8oj72ij:RJF0TA4TvWgExddRKomXQkdAF1CSbAbq","tlshash":"a8d334a563e399e892e6596487d4ef04cd732f8bc3522d40b71ce88497d8b10b5fb18e","dom_hash":"domhasha56706877c3751f4d5873d5c0c775caf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ngw740.com/90GAME.shtml","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"104.21.5.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-21T16:46:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ngw740.com","ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-07","domain_rank":0,"first_seen":"2026-06-16T16:46:07.327557Z","last_seen":"2026-06-16T16:46:07.327557Z","alert_count":14,"request_count":14,"received_data":517841,"sent_data":7205,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"czguii.com","ip":{"addr":"47.116.14.146","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2025-12-09","domain_rank":0,"first_seen":"2026-05-06T10:02:32.870954Z","last_seen":"2026-06-11T02:11:14.197368Z","alert_count":0,"request_count":2,"received_data":88358,"sent_data":877,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"node92.aizhantj.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-29","domain_rank":2777266,"first_seen":"2025-06-02T19:05:33.428728Z","last_seen":"2026-06-14T17:36:51.796334Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":470,"comment":"","tags":null,"fingerprints":null},{"fqdn":"h58ggg.com","ip":{"addr":"43.198.113.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":88358,"sent_data":877,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"b.hbz8v.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-04-16","domain_rank":0,"first_seen":"2025-06-19T19:59:56.529555Z","last_seen":"2026-06-12T05:24:41.55658Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":442,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cache.sgvafs.top","ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-08","domain_rank":0,"first_seen":"2025-09-10T03:39:13.857252Z","last_seen":"2026-06-11T02:11:14.389055Z","alert_count":0,"request_count":14,"received_data":4303512,"sent_data":8660,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ngw740.com/zh/90GAME.shtml?t=20260616","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1d2b729fb25c6d23af88d55a0eb3904","sha1":"f3dfadac5c358cab21d483d128bf4f5e6e91065b","sha256":"e1f5b19ec7cd9a4fe995f89785c184f2210d02a7865fdb1b2e99f5125fb34d27","sha512":"73fef35730918b9aad7f0e0f95ca1c8102de2a4e9a41f446649ae0e8eac90aef669b304f8945638470639f9daa7805e5f4d0f89d976cda52946b4f375b90f433","ssdeep":"1536:JxhvCJF0TA4TvWgExddRKomXQkdAF1mtdE/jpaaMNxv0ufPNiA9hzCATQ7vKeSBJ:JzKJF0TA4TvWgExddRKomXQkdAF1CSb0","tlshash":"bc837b956383dae4e7a9591887c8df414e732f8bd3512e90bb0cf88561d9620f2fd18e","size":80854,"data":"","first_seen":"2026-06-16T16:46:18.130174Z","last_seen":"2026-06-16T16:46:18.130174Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/zh/90GAME.shtml?t=20260616","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b521933979801fb29e8eb651ed2f8195","sha1":"d1c42bf9aa4b8ec01efcce728c4239034531f758","sha256":"144fce14949b246bf42bf991b0e28796fe5effabf238038d90391c5369918460","sha512":"cb149fa34b9408cc82dc17eca7f971e6c58de231d89f9912a1266e9b40a140b4fc7c96e75a38c6b74c6be657f74ba66d1401d1134fcc43999567d196619d653d","ssdeep":"","tlshash":"3e218b1aedb111121a73a0bd2f5b612570276403ee3cfa393a5f03552fc4a1eca77b88","size":1314,"data":"","first_seen":"2026-02-22T10:27:11.511223Z","last_seen":"2026-06-16T16:46:18.131659Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/js/bootstrap.5.3.0.min.js","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80421,"data":"","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-06-16T17:12:35.067494Z","times_seen":16561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/zh/90GAME.shtml?t=20260616","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eefd472ba58a753c6c4e3695160c529","sha1":"36c26b07f42163de6ae2f654b5685ccdb91fbf9f","sha256":"302620849f912420d8665cec0dc9ca3316ba22545d213754643b6966186a657c","sha512":"26478d6ff1f675aa14bb5988fb0b0710255d6db37640938f7fc80d496681747f3f16d2eb362e3f55b5479fa55b914dc4e440c0d313aa31163586be7daff98472","ssdeep":"","tlshash":"81b092212a7645708189105a713ddb65bce22674a4659625978e8c1d7a50d818677810","size":116,"data":"","first_seen":"2025-10-15T08:51:23.133804Z","last_seen":"2026-06-16T16:46:18.133892Z","times_seen":605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/js/petite-vue.iife.0.4.1.js","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7db3244c9a6704a3159a38c82207f66","sha1":"cc3b2bf9d2fcc718c86b1ed2ac7d9cd5ba12ef43","sha256":"774bb8e88b09936246a57f0dfed88a375258a8235b893561c96880411dabc4d5","sha512":"3197ffb1055735a329d122d6c8edfa9c12fccd54e8f22f579a4e79b3c6ae0163391e790429a3f680434309aaecce1572941ea47dee321ac080feaada2de3f3b6","ssdeep":"384:56N7rvrXsqsgs94SzHhjVBvGg0Rr15uH9oSbH9XRZrclZprFjCx9VXU5G7Cqbt/p:AN7brXT3gfzHhjVBvL0RrTujhZrclZpy","tlshash":"6672e6b63346b53253e919d740321054f3255458380aa899f6bc6ea7387fc8692fbf3b","size":16901,"data":"","first_seen":"2023-03-08T14:25:21Z","last_seen":"2026-06-16T16:46:18.102543Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/zh/90GAME.shtml?t=20260616","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e115d71ea7e348f9cb2aa4bd7631ed5d","sha1":"8f9a324e714aefc87474e181e69a68d9e85cc7b5","sha256":"fbdccde383f9ac0d36625bdf4fab33bb85d9fb7dda33f3f44942d6ee57f1e6c0","sha512":"8d07b4febe7deba77eb5278fc2c53e3d62d4f938bba47ca117c00dd91485f0ee37ec0064b73647cd7ad8887f16cb289e838ad90c630b56740320451f0a016aa7","ssdeep":"","tlshash":"96a022c03afaa002c233383030e32c8f20002ce00000cc00a300f02338330b2bc828ac","size":66,"data":"","first_seen":"2026-02-22T10:27:11.528696Z","last_seen":"2026-06-16T16:46:18.135149Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/js/lianmeng.js?1781628340677","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6c8d4a7cbfd1f43b875ab4a004545b2","sha1":"09ac1ea70ee8d7c80ed9047b3a5524b182702941","sha256":"5db33a7711b16fe5bc87f45306c4ef9ab7b098378d6e839279df7d8bb5cd37d5","sha512":"122a8496ef4096971a046557b8ac335f9f40837644cd1648f42f76421b3295a8ccd200f7af936efcc345c0a0821447360a1172ef0b321a0320817be29e94498d","ssdeep":"192:jJz8GzCgQ743UBtvOJ/1embbStCtAPvI0r4Bz5AhMoC:C0J3UP2/1embWU2hMoC","tlshash":"61e1fa28579b21642913e034a67b2198a89eb3b3b355f85c3f0f5ad21fc0d8dd4d79b4","size":7450,"data":"","first_seen":"2026-05-31T06:08:46.841128Z","last_seen":"2026-06-16T16:46:18.112628Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/js/main.js?t=2","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8da959fa063ef06640624e131c1ba921","sha1":"c54ef4f3b6b8f1b2789c4a9c5c34e881f9f0eb12","sha256":"5509f3bdce1116a3b990d2bfce065c3884d4bbbe7843fc69532159be81f051f9","sha512":"603975fbbd6f36fe2355335483f23f6b711b4cd19dee6887f59c26a6a5dcecc6a3b65119a22441a96c3d42f1f9dd086f915d16448aab6324fa8fd28aa5d523ff","ssdeep":"192:Sls/WRlsEpT3yynRj1vy3PLt/4coXMubWp/G5GzgyryXOPkdKqPT06Cylr/Okxvc:UsGsEfRGptIpjI6/HlfW5Ug","tlshash":"2bb2972926fb003285e361be5fcb52487235a01ba84bcd4dbe6cc7850f91f2459b2fe5","size":24469,"data":"","first_seen":"2026-03-31T06:28:36.567162Z","last_seen":"2026-06-16T16:46:18.101029Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/js/tongji.js?t=1","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b1a7eb6337d1687906de68e0220c8a2","sha1":"4489e06e26fc61fc86d6da8346eedb2126fe20c9","sha256":"fe4a43e59cd908934f18e31cf6d6cbcb1d95244920b6bf5dc82666c9738e7086","sha512":"83aef6525e2277dd63530616aec59be3e3832ec6d3b5d1dc0ea00056bcc94638d524a2673007d5bc8a86b27af2f56853133fed82b867695e1452e17f7e8d3216","ssdeep":"","tlshash":"8cd02b4a28c008e5e27600a80b6dc1497022512519cac10174ccc4955c20dd004ad9cc","size":261,"data":"","first_seen":"2025-06-23T16:23:53.30232Z","last_seen":"2026-06-16T16:46:18.124324Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"czguii.com/4/104717622804i?_=1781628341224","fqdn":"czguii.com","domain":"czguii.com","tld":"com"},"ip":{"addr":"47.116.14.146","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f54aba8bfd34d1fd6f58495e9d6cbbaf","sha1":"3ba360d8e9094009070b5b1533c92f8c5f1cb3b0","sha256":"093b59a62087de70cda153b98ca03415f0b04e3b283cb4107c8c57dc52fdcf0e","sha512":"842ee6db2b89220f3ecaf5b571f8ff710addcdaeb20396531907f93abca3124507d6cb34cc2a5ba5097f6e3e18fd5d68dbbebe056159f4ad5f27c99c33494191","ssdeep":"1536:+A/0M/UBWJRVKoY2r9WBIcTAMa45yVVFllR1i5sCFya37oiHWS8sj+tFhIOMohyP:+3UMa4ySyq","tlshash":"048320d4a29ae15f2b8c5d43fe78aede50b5972790c5b347c398fa4d04ad24bc29c8c4","size":87823,"data":"","first_seen":"2026-06-16T16:46:18.105218Z","last_seen":"2026-06-16T16:46:18.105218Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/zh/90GAME.shtml?t=20260616","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b44438534a616f51e4473ff9e1e7ea91","sha1":"bea6c7cb8b8f8b68a238ffde2f9b21e714cd4d0d","sha256":"51f3b59c618a44ce03648b404c0c7fa539d9835aa13c22b7a6f7f5803304ffed","sha512":"91a7c114f042594c3bb69d2c13f3a503f064947b8c9591f81879b4f582637f3a481fba19c72c66459d29d92cbf6c8dbc6d36da84f370a32a42cfee143366ce38","ssdeep":"384:AKvetVmZ2GwpToLIFzXejJk2rb52xs/TaTC3iigsv/UnX57:AKImZ+ToLIFzOjOw0YTF3L7S57","tlshash":"f2a2b5a96961192a98bb32e56fbf714cb07321133d19ca06bb1cd1708f61075217bdfa","size":21946,"data":"","first_seen":"2026-06-16T16:46:18.136248Z","last_seen":"2026-06-16T16:46:18.136248Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h58ggg.com/4/104717622804i?_=1781628341223","fqdn":"h58ggg.com","domain":"h58ggg.com","tld":"com"},"ip":{"addr":"43.198.113.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f54aba8bfd34d1fd6f58495e9d6cbbaf","sha1":"3ba360d8e9094009070b5b1533c92f8c5f1cb3b0","sha256":"093b59a62087de70cda153b98ca03415f0b04e3b283cb4107c8c57dc52fdcf0e","sha512":"842ee6db2b89220f3ecaf5b571f8ff710addcdaeb20396531907f93abca3124507d6cb34cc2a5ba5097f6e3e18fd5d68dbbebe056159f4ad5f27c99c33494191","ssdeep":"1536:+A/0M/UBWJRVKoY2r9WBIcTAMa45yVVFllR1i5sCFya37oiHWS8sj+tFhIOMohyP:+3UMa4ySyq","tlshash":"048320d4a29ae15f2b8c5d43fe78aede50b5972790c5b347c398fa4d04ad24bc29c8c4","size":87823,"data":"","first_seen":"2026-06-16T16:46:18.105218Z","last_seen":"2026-06-16T16:46:18.105218Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/zh/90GAME.shtml?t=20260616","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b44438534a616f51e4473ff9e1e7ea91","sha1":"bea6c7cb8b8f8b68a238ffde2f9b21e714cd4d0d","sha256":"51f3b59c618a44ce03648b404c0c7fa539d9835aa13c22b7a6f7f5803304ffed","sha512":"91a7c114f042594c3bb69d2c13f3a503f064947b8c9591f81879b4f582637f3a481fba19c72c66459d29d92cbf6c8dbc6d36da84f370a32a42cfee143366ce38","ssdeep":"384:AKvetVmZ2GwpToLIFzXejJk2rb52xs/TaTC3iigsv/UnX57:AKImZ+ToLIFzOjOw0YTF3L7S57","tlshash":"f2a2b5a96961192a98bb32e56fbf714cb07321133d19ca06bb1cd1708f61075217bdfa","size":21946,"data":"","first_seen":"2026-06-16T16:46:18.136248Z","last_seen":"2026-06-16T16:46:18.136248Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/verify/7a7fb455?t=1781627799896\u0026host=ngw740.com\u0026redirect=%2F90GAME.shtml","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3eb541a5f36a78d1e555623b3a084ba0","sha1":"839d11ee0d70192f198795e931c5143115a90aeb","sha256":"47f7cc9b1db142be8e96fefe146e50de8dffce7ec5a29198b16fb1b3e01f56dd","sha512":"42694d236b508aebb53121d0c25ee7fb8f2126ee18a78c97ba577e36e3fbca97a8713e4d6b3f301090d4ef49321a41bc7762e78acacb727ccf5e8947a57eb785","ssdeep":"","tlshash":"d841e1ca31a740104223547f0fdfd585f0b798176449c484fd5e8356af9566e93227fd","size":2088,"data":"","first_seen":"2026-06-16T16:46:18.137438Z","last_seen":"2026-06-16T16:46:18.137438Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"2","filename":"https://ngw740.com/js/lianmeng.js?1781628340677","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"h58ggg.com/4/104717622804i?_=1781628341223","fqdn":"h58ggg.com","domain":"h58ggg.com","tld":"com"},"ip":{"addr":"43.198.113.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.225Z","timestamp":1781628341225,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h58ggg.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Sat, 01 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:24:66:85:E8:65:1B:14:BE:79:D2:4E:9F:8C:D1:59:04:7E:EA:27","sha256":"00:43:E8:5E:58:5C:EA:F6:B3:02:45:DD:0B:A2:F9:D1:5E:0F:12:69:3C:27:55:C6:AE:8B:FD:6C:43:9C:D4:9F"}}},"request":{"raw":"GET /4/104717622804i?_=1781628341223 HTTP/1.1\r\nHost: h58ggg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 16 Jun 2026 16:45:42 GMT\r\nContent-Type: text/html\r\nContent-Length: 154\r\nLocation: https://h58ggg.com/b//4/104717622804i?_=1781628341223\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":1319,"timings":{"blocked":0,"dns":303,"connect":251,"send":0,"wait":252,"receive":0,"ssl":513},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.hbz8v.com/b8mp2e.js?sid=2804i?_=1781628341224","fqdn":"b.hbz8v.com","domain":"hbz8v.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.229Z","timestamp":1781628341229,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /b8mp2e.js?sid=2804i?_=1781628341224 HTTP/1.1\r\nHost: b.hbz8v.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9pbWcuYWxpY2RuLmNvbS9pbWdleHRyYS9pNC9PMUNOMDFudjU4dncxbUg0eFJhRGFETV8hITIyMjEzMjgyMzQ5MjgtMS1mbGVhbWFya2V0LmdpZg==.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.409Z","timestamp":1781628341409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9pbWcuYWxpY2RuLmNvbS9pbWdleHRyYS9pNC9PMUNOMDFudjU4dncxbUg0eFJhRGFETV8hITIyMjEzMjgyMzQ5MjgtMS1mbGVhbWFya2V0LmdpZg==.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kq1h4r%2BrUipHJrom1%2Bn2r8UwL%2F1zQ9XvKUmyvucTQEHchAMjyzpvLbHIRGoq%2BFnjfvnAvBh9fidBC5Y6S0Q9pRUdghh3uUxg9s7QhCGmkZzlw65jNk5oahlYb49Wb6DKDlk%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncf-polished: format_not_supported\r\ncf-bgj: imgq:100,h2pri\r\nage: 347057\r\nlast-modified: Fri, 12 Jun 2026 16:29:37 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\ncf-ray: a0cb494dec725fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":137957,"size_decoded":83742,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"1d52960ea04e34595dff9fc65fc64d28","sha1":"25c44794a2480f8d622a44b185daa51e951c8d13","sha256":"2f0b3212037178466f9c14957b9335879321e785acf662a1a1c4339f9a30de38","sha512":"42727eb50b0eed6bcc35083bf163762d849a0a7c2614860c39793936b374cfc117ebe6366abd2d04091df6cacd2f3f1942a6779893ae9923a0821028731df744","ssdeep":"3072:kl1wBchchchch4leXkozCUWQTaQKZcmcmsmWgWgWND/veveXLqOLqOLq9:klqBchchchch4cXkozUQ+Jvv8E","tlshash":"88d3027ef518c150b89d2db128563ffa1e1705c00fcba53679367a1e02af5da2299f32","first_seen":"2026-06-12T08:49:08.295328Z","last_seen":"2026-06-16T16:46:18.093849Z","times_seen":11,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":24,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9kM3BzdHZwdngwMXp4LmNsb3VkZnJvbnQubmV0L2kvMjAyNi8wNS8xOS8xMjE1NTYuZ2lm.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.421Z","timestamp":1781628341421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9kM3BzdHZwdngwMXp4LmNsb3VkZnJvbnQubmV0L2kvMjAyNi8wNS8xOS8xMjE1NTYuZ2lm.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XfwJPq2bWAIrCKp2QS8mp5tsFOYCIXNt2cF2pgn%2Bwr6DyHODIzRwiAEsfxTB%2BuBGqaQ28xbzPomZzdr%2F90rbJPAGIW1G5Y0NjZY0n4kKzOYT4DGYG3oOYhqUWYRrtV%2B7Ukk%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: format_not_supported\r\nage: 2462316\r\nlast-modified: Thu, 04 Jun 2026 05:09:18 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\ncf-ray: a0cb494dec735fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":635479,"size_decoded":632315,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"a74cf39e452eff11129a57f576dc32a4","sha1":"6cfa8af8532f9395f685e8e3ef0a7caff608f388","sha256":"c7d9b90859a73b3a27a795af0a5fe29fc81b537c1f25609f6993605548d80e1e","sha512":"f2d188ab99be1ed3330701342be4fbb822f7ddd34a2bc04bea580e09e590dc1ff32cf0b665a22618707147e01945856298da5d526b27aa0b4339075b190b6c42","ssdeep":"12288:RQCqVogCbWj3EUYGrRf2gEE/KzIQRFVo6DtLY3EDDGj:RMmg73J3REEe3m6Dtc32k","tlshash":"70d4234a0d3a0491f53ee93918466fdc54879ec24697e02919be3e91b1a7c1f337b3b8","first_seen":"2025-10-04T19:13:49.431134Z","last_seen":"2026-06-16T16:46:18.09838Z","times_seen":116,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/90GAME.shtml?t=20260616","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-16T16:45:39.858Z","timestamp":1781628339858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /90GAME.shtml?t=20260616 HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/verify/7a7fb455?t=1781627799896\u0026host=ngw740.com\u0026redirect=%2F90GAME.shtml\r\nCookie: _slide_passed=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nx-powered-by: Express\r\nlocation: /zh/90GAME.shtml?t=20260616\r\nvary: Accept\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8hGFuVei5h%2BpVMlNZFa%2FmTEE65wotZoCQh76qm8zThdQoyDF5m1D9QFtiIoTPFK3d%2ButWqHEJ1%2FUMLYBJdBGFtWBy5WWR8UWeEqz99FhgwMW3Le6uksLiAmQ1uMk\"}]}\r\ncf-ray: a0cb494418efb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/zh/90GAME.shtml?t=20260616","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-16T16:45:40.080Z","timestamp":1781628340080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /zh/90GAME.shtml?t=20260616 HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ngw740.com/verify/7a7fb455?t=1781627799896\u0026host=ngw740.com\u0026redirect=%2F90GAME.shtml\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _slide_passed=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIyq1HLAx7IafuBnGmE5wO0yThr29AmnT01US5F0YrgGGJbHSa%2BAEa4xPF1SR40%2BWuVbKZfZzdDZEIUKYwbScW1V%2FVLxaKasqOBFuc8M2Wa7tU5opGf75DoUi47q\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a0cb494588feb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":80871,"size_decoded":8240,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"14e46c42ff4ec20f6ac479bb767e1005","sha1":"b71c1371d718b514e8530bfeb06fe39c691e68b3","sha256":"48dcd21072f9054a841ef1e927610162ff3aa66cc168cb540650d5af98dda51f","sha512":"3ec2576f9f385b285ff13b961418f2392d07c8bfb4eab694ce5f0934506da7acf2623f357f27d952e69cf315d371a3027d1399337edc6f442edd55bb092feee3","ssdeep":"1536:YxhvCJF0TA4TvWgExddRKomXQkdAF1mtdE/jpaaMNxv0ufPNiA9hzCATQ7vKeSBj:YzKJF0TA4TvWgExddRKomXQkdAF1CSbM","tlshash":"96837b956383dae4e7a9591887c8df414e732f8bd3512e90bb0cf88561d9620f2fd18e","first_seen":"2026-06-16T16:46:18.099145Z","last_seen":"2026-06-16T16:46:18.099145Z","times_seen":1,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/js/main.js?t=2","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:40.509Z","timestamp":1781628340509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /js/main.js?t=2 HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/zh/90GAME.shtml?t=20260616\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Mon, 30 Mar 2026 08:55:55 GMT\r\netag: W/\"5fdf-19d3df4ed78\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JnJWcVxGGQ0%2Bdqpv%2F27OJjEWVs2JHhQchCs6YYFLhYxEnihyTCWxuWdAFuBlT3nL9YjkkjVfrdqV0sVwCsnTD%2FA59TJfA9udAEuTV2X8YAlfRN2OnG4IB3JXVFPo\"}]}\r\ncf-ray: a0cb49482916b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":24543,"size_decoded":7343,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8da959fa063ef06640624e131c1ba921","sha1":"c54ef4f3b6b8f1b2789c4a9c5c34e881f9f0eb12","sha256":"5509f3bdce1116a3b990d2bfce065c3884d4bbbe7843fc69532159be81f051f9","sha512":"603975fbbd6f36fe2355335483f23f6b711b4cd19dee6887f59c26a6a5dcecc6a3b65119a22441a96c3d42f1f9dd086f915d16448aab6324fa8fd28aa5d523ff","ssdeep":"192:Sls/WRlsEpT3yynRj1vy3PLt/4coXMubWp/G5GzgyryXOPkdKqPT06Cylr/Okxvc:UsGsEfRGptIpjI6/HlfW5Ug","tlshash":"2bb2972926fb003285e361be5fcb52487235a01ba84bcd4dbe6cc7850f91f2459b2fe5","first_seen":"2026-03-31T06:28:36.567162Z","last_seen":"2026-06-16T16:46:18.101029Z","times_seen":46,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"czguii.com/4/104717622804i?_=1781628341224","fqdn":"czguii.com","domain":"czguii.com","tld":"com"},"ip":{"addr":"47.116.14.146","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.227Z","timestamp":1781628341227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.czguii.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Sat, 02 May 2026 10:10:14 GMT","end":"Mon, 16 Nov 2026 10:10:14 GMT"},"fingerprint":{"sha1":"90:81:78:94:B4:5E:5E:91:01:35:A7:C7:DD:47:02:96:1D:7D:3A:B3","sha256":"38:D8:49:65:34:B1:30:02:16:06:12:CA:4E:85:0D:0B:DB:3C:1B:CE:CA:95:D3:76:8A:45:44:6A:04:CA:3D:B0"}}},"request":{"raw":"GET /4/104717622804i?_=1781628341224 HTTP/1.1\r\nHost: czguii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 16 Jun 2026 16:45:42 GMT\r\nContent-Type: text/html\r\nContent-Length: 154\r\nLocation: https://czguii.com/b//4/104717622804i?_=1781628341224\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":1167,"timings":{"blocked":0,"dns":194,"connect":215,"send":0,"wait":227,"receive":0,"ssl":531},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9kM3BzdHZwdngwMXp4LmNsb3VkZnJvbnQubmV0L2kvMjAyNi8wNS8xOS8xMjE1NTZfMS5naWY=.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.424Z","timestamp":1781628341424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9kM3BzdHZwdngwMXp4LmNsb3VkZnJvbnQubmV0L2kvMjAyNi8wNS8xOS8xMjE1NTZfMS5naWY=.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4aEPL%2BnPuQ3ViKsRyTgcXh1rP5tT7rIzsizD5oQ07RN59WJNpxL8OjJUzYL9l1gE%2Fnsb5XVd7pngbERajPNeag3ITo3QKRVouDx5kfqSDeW9rgjB%2F6PBwEOg%2FxyxT2FJdVw%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncf-polished: format_not_supported\r\ncf-bgj: imgq:100,h2pri\r\nage: 2462039\r\nlast-modified: Sat, 06 Jun 2026 03:44:59 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\ncf-ray: a0cb494dec775fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":448975,"size_decoded":449162,"mime_type":"image/gif","magic":"GIF image data, version 89a, 333 x 333","md5":"9d9265a25e67afe34a043597ca9b3793","sha1":"a3b793f56e92b78a66ad9a5fdba5a86aec324c0a","sha256":"6b273abae94196bc0a39454287c6544261aab10d3afbd4a67d8b8ad5aa90ffc3","sha512":"31751249b0f76bcafc781aabde09fa85a954d4280d2571f0aa704bae8312170d6405879fe5e53fdfec1098469c983dfbc56e92c8d4cc4af7bb12e0482c749830","ssdeep":"12288:Dq2aYK1v1szGTplaZTtbmIe1tdDwkIsUJo9WpGIlU:xw5wol+mIelTIsx9Wp3U","tlshash":"84a423c1e2b3d0729023aa709ad2794b16cf9f2915f2faa1c2f793a62d974095fc0754","first_seen":"2025-07-16T01:19:08.109277Z","last_seen":"2026-06-16T16:46:18.10183Z","times_seen":49,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/90GAME.shtml","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-16T16:45:38.694Z","timestamp":1781628338694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /90GAME.shtml HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nlocation: /verify/7a7fb455?t=1781627799896\u0026host=ngw740.com\u0026redirect=%2F90GAME.shtml\r\nvary: Accept\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjYOG5%2BbyFAigoTlNooyoA8fOBrHzP4%2BGG4Hp17%2FX9nM3GCru4xH1fE9ikkmwHUpSFaY%2B5E286RycstIOq3u4swi9VLWbvLzLEsu02nBCdkoH4FQ41oA52XBf4ol\"}]}\r\ncf-ray: a0cb493cf8b0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/js/petite-vue.iife.0.4.1.js","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:40.505Z","timestamp":1781628340505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /js/petite-vue.iife.0.4.1.js HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/zh/90GAME.shtml?t=20260616\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Thu, 05 Feb 2026 15:30:14 GMT\r\netag: W/\"4205-19c2e6ce370\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebRl56HpUv2tzqhnzQCyTSzo%2FDgWYo9sBJu1xMOvTBtl7bKtFAe%2BqpIgCFLoPgxuqWmc%2BCuTSZqwbGiddYk3sxzWlTdVhxzynFpd896Npb6OjiVhk3rUn8cCJ51U\"}]}\r\ncf-ray: a0cb49482913b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":16901,"size_decoded":8131,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16900)","md5":"a7db3244c9a6704a3159a38c82207f66","sha1":"cc3b2bf9d2fcc718c86b1ed2ac7d9cd5ba12ef43","sha256":"774bb8e88b09936246a57f0dfed88a375258a8235b893561c96880411dabc4d5","sha512":"3197ffb1055735a329d122d6c8edfa9c12fccd54e8f22f579a4e79b3c6ae0163391e790429a3f680434309aaecce1572941ea47dee321ac080feaada2de3f3b6","ssdeep":"384:56N7rvrXsqsgs94SzHhjVBvGg0Rr15uH9oSbH9XRZrclZprFjCx9VXU5G7Cqbt/p:AN7brXT3gfzHhjVBvL0RrTujhZrclZpy","tlshash":"6672e6b63346b53253e919d740321054f3255458380aa899f6bc6ea7387fc8692fbf3b","first_seen":"2023-03-08T14:25:21Z","last_seen":"2026-06-16T16:46:18.102543Z","times_seen":765,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9pLm1lZWUuY29tLnR3L2xJdGJacWYuZ2lm.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.425Z","timestamp":1781628341425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9pLm1lZWUuY29tLnR3L2xJdGJacWYuZ2lm.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-polished: format_not_supported\r\ncf-bgj: h2pri,imgq:100\r\nage: 4275946\r\nlast-modified: Fri, 08 May 2026 01:15:20 GMT\r\ncf-cache-status: HIT\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkjolM0fS52dWHPBio9hgxdEEKa0vZvL75bnhw3sMN9UigW9Pi9TVR2qek%2F5NGR2cp%2BB%2FIwi3Rd0rvXfrEh88jcb2pDnwi%2BoeyLTGRLuTUmaH0V7Av3H1XwcT7iWMVQdSAg%3D\"}]}\r\ncf-ray: a0cb494dfc795fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":513009,"size_decoded":512845,"mime_type":"image/gif","magic":"GIF image data, version 89a, 350 x 350","md5":"c79405679940499d996607369334e0de","sha1":"f0ed5794d4a4091adb85560dfd8e894b48170802","sha256":"51499c6fdf6e3d636e208e6dbd045626dd8da4a592b0dacc07ecaca11fe05e50","sha512":"b5d03368f4a496e473e41f1c6fb9276faa5af4f8e00978e0581485a00af06cec650a0037f1089d708dd71ff3755875f94ea0ba33c38458debdc819635c6f685c","ssdeep":"12288:2ZEa999mXqlXx/YPHDoh24hMc4qfQd1Y0co1Uo20+lD:2ZEg9mXqJxYHCM04koJ20U","tlshash":"5cb4230fc04f68a43aa19ab8075492c93a1cc185f7f38767ecdaf8717796bdeac02155","first_seen":"2025-01-26T05:13:11.283013Z","last_seen":"2026-06-16T16:46:18.103252Z","times_seen":112,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"czguii.com/b//4/104717622804i?_=1781628341224","fqdn":"czguii.com","domain":"czguii.com","tld":"com"},"ip":{"addr":"47.116.14.146","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:42.402Z","timestamp":1781628342402,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.czguii.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Sat, 02 May 2026 10:10:14 GMT","end":"Mon, 16 Nov 2026 10:10:14 GMT"},"fingerprint":{"sha1":"90:81:78:94:B4:5E:5E:91:01:35:A7:C7:DD:47:02:96:1D:7D:3A:B3","sha256":"38:D8:49:65:34:B1:30:02:16:06:12:CA:4E:85:0D:0B:DB:3C:1B:CE:CA:95:D3:76:8A:45:44:6A:04:CA:3D:B0"}}},"request":{"raw":"GET /b//4/104717622804i?_=1781628341224 HTTP/1.1\r\nHost: czguii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 16 Jun 2026 16:45:42 GMT\r\nContent-Type: application/octet-stream\r\nLast-Modified: Tue, 16 Jun 2026 16:30:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a317a0b-1570f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87823,"size_decoded":12426,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f54aba8bfd34d1fd6f58495e9d6cbbaf","sha1":"3ba360d8e9094009070b5b1533c92f8c5f1cb3b0","sha256":"093b59a62087de70cda153b98ca03415f0b04e3b283cb4107c8c57dc52fdcf0e","sha512":"842ee6db2b89220f3ecaf5b571f8ff710addcdaeb20396531907f93abca3124507d6cb34cc2a5ba5097f6e3e18fd5d68dbbebe056159f4ad5f27c99c33494191","ssdeep":"1536:+A/0M/UBWJRVKoY2r9WBIcTAMa45yVVFllR1i5sCFya37oiHWS8sj+tFhIOMohyP:+3UMa4ySyq","tlshash":"048320d4a29ae15f2b8c5d43fe78aede50b5972790c5b347c398fa4d04ad24bc29c8c4","first_seen":"2026-06-16T16:46:18.105218Z","last_seen":"2026-06-16T16:46:18.105218Z","times_seen":1,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9yM3c2OGhrLmhlcmUxODE4LnRvcC8yMDAtMy5naWY=.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.401Z","timestamp":1781628341401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9yM3c2OGhrLmhlcmUxODE4LnRvcC8yMDAtMy5naWY=.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncf-polished: format_not_supported\r\ncf-bgj: h2pri,imgq:100\r\nage: 1232919\r\nlast-modified: Wed, 03 Jun 2026 02:04:32 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7C5WTGi48fmrXNMIna0yIktU%2B%2FrqOmxtQDxZ8hdM4NEPnVkwbiiaXN2EjEOE8l%2F83lFN7Pf9Crds%2BwIYvFNTJYerpK1EZPySek%2FXrdoCbzvyV9NlrGV0Uyt9gXKrGv963A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0cb494dece25689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":347391,"size_decoded":343719,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"1dc7b445c8f9b0d289840f40704c50fc","sha1":"4e60fe05e73095c70b0670b3101eaf1ee17847de","sha256":"dd7d53ca4f7059777b1802949ace775fe6415bcbee96ef28494e974105ed5b56","sha512":"4cc98a3cde753e342c5e93c5fe099a53ed9a2f31082c0a4a978819ed0d52fe0866ad32473512c30cc723bbd4c4c9161d17e7d044fd14a87045565edde94fa662","ssdeep":"6144:RxZ4y7rLXy3tXn3oiLaI6bDyiVT/pnbE373JsE+aQrB4MYUNYH:Rxr7rLuN3DfIhnbEL3qnsMbYH","tlshash":"697423bd88a902d56ee03bf8c9564cd86d1df01feaf538379d68e7b75a12418c09ca31","first_seen":"2026-06-07T22:19:21.928547Z","last_seen":"2026-06-16T16:46:18.106463Z","times_seen":21,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":14,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9hZGVoMzM0Zy51d2NuZy5jb20vMTUweDE1MC5naWY=.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.404Z","timestamp":1781628341404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9hZGVoMzM0Zy51d2NuZy5jb20vMTUweDE1MC5naWY=.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mVzUNG%2Bqi4x%2BdQ4DyzHWFM3KW%2FGrfKDr3tZ04pfAX5sbjgZGgHa3jrzMOOxMbZqsMom9PnuBPOGvslUTyyEOeHGiwb67f102RtONl99ZYhMwAH%2FUcXoyvBUoCGQRrE%2BSGYc%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: format_not_supported\r\nage: 2950696\r\nlast-modified: Thu, 04 Jun 2026 02:00:53 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\ncf-ray: a0cb494dec705fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":107501,"size_decoded":107182,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"ebf164121af8db8a254341b046375d11","sha1":"4ae64825afa7ca0e0bd484c80b022985e1bdbe96","sha256":"2f26f95679ac7ed1a38b6d032c2f568efaaf8f9d14e080fcedfa967677f9762a","sha512":"387aa8579ec7bdff980ff9105aca68b5a2ffbcb1f82db19aeb52f0e9a72f5395e575b4449b633a82b6436d86af068d474f674fea53d2936b8dab9ba817e32b6e","ssdeep":"1536:P6eQwNUj13unMSLE+/zAh7zDMBT5JjsPYPYeMSsm/LbLlLnwWOosF5DxQQJc:nNUBaLEw8tIBTFa0DHtnUosF5xbJc","tlshash":"92b3024f097b99896dd9983dc68a1c60661d4f9be3b881dbdef9374b3b46872e044303","first_seen":"2026-01-17T16:57:36.509335Z","last_seen":"2026-06-16T16:46:18.10802Z","times_seen":461,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":5,"connect":19,"send":0,"wait":23,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly8wNzR0dS5lb3l0Z2VtLnRvcC8xMDB4MTAwLmdpZg==.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.414Z","timestamp":1781628341414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly8wNzR0dS5lb3l0Z2VtLnRvcC8xMDB4MTAwLmdpZg==.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=izuUPM2i5g9Bxc1AeKBlJxJysMDQJToSwdZUyrwmpgcuEIY1wIca6FhjZdxZqoakiJuHeMxnHhoBz%2Fd7sut31%2FMX3arAX1Q84S8BU3lVwn3KOfrnktSD1VKYv9q0qiqyvAU%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncf-polished: format_not_supported\r\ncf-bgj: imgq:100,h2pri\r\nage: 2868368\r\nlast-modified: Thu, 04 Jun 2026 02:01:50 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\ncf-ray: a0cb494dec785fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":104196,"size_decoded":103096,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"31829cb54a8302ad72e3111d2895c3d4","sha1":"4af33e041a4644cb3a5a3ec0838ed9d36479a5eb","sha256":"c14804be7e8b919240e3e934670a2157b80fd77832561be485a9c83d763e63f1","sha512":"cc0ee0aa8998cb20e4b2f0e6a6f41d10421339a995fae6d4c1aa76c91caf31ce1d46f7727d84452ac1908ff97482e93aec85a4f67845893227d2ba2bc10d07b6","ssdeep":"1536:/VcerwFEGiWVbYZyIXSpNBS7C3kw8WltYdm6ZPZ349Smuz/DjBrqgUw11tUbSSj:dcaGlWUcm98W0dm6ZA1YrHUw1PUbV","tlshash":"19a31210d8e8a492fdb01decaf24ce4d09383a3d5767c829bcc65d59b7b166c8018f76","first_seen":"2026-06-07T22:19:21.916415Z","last_seen":"2026-06-16T16:46:18.108727Z","times_seen":21,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9kM3BzdHZwdngwMXp4LmNsb3VkZnJvbnQubmV0L2kvMjAyNi8wNS8xOS8xMDM4MDEuZ2lmCg==.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.422Z","timestamp":1781628341422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9kM3BzdHZwdngwMXp4LmNsb3VkZnJvbnQubmV0L2kvMjAyNi8wNS8xOS8xMDM4MDEuZ2lmCg==.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0V%2FDcRQPeDpnC3i7id7SGZJeTXSvQDGkki%2BcPzno0hIWccgCjuNwLm4EBkFbuetximUs7Wggyp264vT%2FkTGYQaAy5BopsV8vDrw9wfMg8ztXedk5Rbhep3ph%2F4%2FHtNXoUbU%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: format_not_supported\r\nage: 2462720\r\nlast-modified: Wed, 27 May 2026 02:01:54 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\ncf-ray: a0cb494dec745fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":994749,"size_decoded":979416,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 180","md5":"788959088655d6833a6c86c22f2325f2","sha1":"ee9fb962496ee0df3a38ba5dacc0c3490afdc7b5","sha256":"bba4267fd016b67331898eb1b8e047f876f30882cd3371b9505cabdf74190633","sha512":"23356c3898d2df02805ac30e4805c6e74fc7f5a4058342436a8845c7a3b35125bb952ede518f0b867af8e439c4f4ad992e8557faeeb1a59ddbe298d12744d6f6","ssdeep":"24576:XdclQ2wpKJ4SOYAT6fZRCopRercQMDNd9OEY4hg:XdcQnKNO83pReKfW4hg","tlshash":"982523efc32a0988f9bf14bcccfd65ee9456ecb8610375a369398467e0452c7ca9b510","first_seen":"2026-06-07T22:19:21.926382Z","last_seen":"2026-06-16T16:46:18.109228Z","times_seen":21,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9pbWcuYWxpY2RuLmNvbS9pbWdleHRyYS9pMS9PMUNOMDFpNTR6aUgxbUg0eE1MUHRWbF8hITIyMjEzMjgyMzQ5MjgtMS1mbGVhbWFya2V0LmdpZg==.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.411Z","timestamp":1781628341411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9pbWcuYWxpY2RuLmNvbS9pbWdleHRyYS9pMS9PMUNOMDFpNTR6aUgxbUg0eE1MUHRWbF8hITIyMjEzMjgyMzQ5MjgtMS1mbGVhbWFya2V0LmdpZg==.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V6cYMOlsp%2FHkjKbeR5H8CATJBZIDZJHITfTPDiXXjakmbjSxBLfDY4NezWMQdX05NhyidPpKHiw1B6pmCeLJ26sHYNRyL3ATwVQ2jQPygxWrStN2RD48Iojy4jXvp3INF4U%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: format_not_supported\r\nage: 1315149\r\nlast-modified: Thu, 04 Jun 2026 02:01:50 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\ncf-ray: a0cb494dec715fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":91110,"size_decoded":67378,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"72d1fa480c3caf61f73d30f9936083f2","sha1":"bb72082720bfa507746679e0c42c09ff7f78a3db","sha256":"394bbc394b444c7bfe3bcd3d74a79fbc8b4ea39d95f8f6eb476c4c7c3f442008","sha512":"f00e29720efd19c744257d9867db35724465a2b9d4a0ec38b259dcb3ec1e95380e3e77020eb041d303d041efe14f4f81237120fbf2a6f20b663609367f7f4a6c","ssdeep":"1536:2+/rWa6edFEwh/zVNmTOuD7m7rnU1dYAxkNe97OHSdEoWKMDKSdEoWKMDKSdEoq:2ifgwh/XmT7D0DUMAqKzNBMDNBMDNq","tlshash":"9b9302a3169b3dc2fb4060b5dc5707ed2d560c69c66b4ae2508c48af39e723bc161fe9","first_seen":"2026-06-07T22:19:21.929299Z","last_seen":"2026-06-16T16:46:18.109886Z","times_seen":21,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":24,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9pY28uZGFnZS50b3Avc3RvcmFnZS91cGxvYWQvMjAyNjA2MTIvNmEyYWYzODg0MDFiZS53ZWJw.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.431Z","timestamp":1781628341431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9pY28uZGFnZS50b3Avc3RvcmFnZS91cGxvYWQvMjAyNjA2MTIvNmEyYWYzODg0MDFiZS53ZWJw.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfLd3SrOOXX2un1t6X6315ekoAqjRw%2BYF%2FekVZpUfVq4iEk%2BS49w%2FggLnOF1LOHufoiNrtMAXIElTO4D%2B8lVKJu0pfGXMtpPEVc0t%2FRXZUMLcS6ZOjOfXbc5sqoPdVtnYLo%3D\"}]}\r\npriority: u=4,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nage: 428588\r\nlast-modified: Thu, 11 Jun 2026 17:44:11 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\ncf-ray: a0cb494dfc7c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10764,"size_decoded":11709,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"328f047b9c038281e003d992f3981ad6","sha1":"218d32063e72d2e4176329f88cbd25c30734243d","sha256":"bdd0d4d4658c5b18c2de633ef23a250d303f8c358fc6105c04a57519fcb16053","sha512":"3fb02bfe26fb529a1952f0223b475d539f628a9708f197e50b1719e3b210157b71b63d80be307ba54307a18aaf55ae0fd4f4a908798f4b83fd3790a7a69d7f85","ssdeep":"192:I1pEC4wmkFgtpTubGJtASSRLJCvnMz1uy+9X9W0VAMye9XBoM:IgTwFUPtASwYvnWsy+1oIyett","tlshash":"5b22b0b716f5426d5bc4c5aefd2bd456e50c8206c00ac22b86616c422b7ed515d3367b","first_seen":"2026-06-12T06:50:07.152194Z","last_seen":"2026-06-16T16:46:18.110573Z","times_seen":7,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/js/bootstrap.5.3.0.min.js","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:40.508Z","timestamp":1781628340508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /js/bootstrap.5.3.0.min.js HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/zh/90GAME.shtml?t=20260616\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Thu, 05 Feb 2026 15:31:14 GMT\r\netag: W/\"13a25-19c2e6dcdd0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FRUlhk2LFYNCbeqL2Mm8o0LHBx2EBt26EIJsMbSr0%2FJS9RrhNdu1297fgZuFvhj2x11DrKTKTRnKfjV7y48jhbMRZuY7%2Bs753dfWkkk2lZiPwCoP5I28%2BqKARGqv\"}]}\r\ncf-ray: a0cb49482915b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":80421,"size_decoded":24557,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-06-16T17:12:35.067494Z","times_seen":16561,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/js/lianmeng.js?1781628340677","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.008Z","timestamp":1781628341008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /js/lianmeng.js?1781628340677 HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/zh/90GAME.shtml?t=20260616\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: private, max-age=14400\r\netag: W/\"1d1a-Cawepw7o18gO2QR7OlUksYJwKUE\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UDCGzwBBTpZrjX86P6CurkMkfdw%2F9xlJqQO%2BRQvbcquiBNgtyNa7iB4UabHxM7LOVbTPA1SddIsgMA2zUF%2BsmDH%2BiUZOrBLWEwjXF60F0SJX9uZMR3A4skHNIHrK\"}]}\r\ncf-ray: a0cb494b493bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7450,"size_decoded":4861,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4824)","md5":"d6c8d4a7cbfd1f43b875ab4a004545b2","sha1":"09ac1ea70ee8d7c80ed9047b3a5524b182702941","sha256":"5db33a7711b16fe5bc87f45306c4ef9ab7b098378d6e839279df7d8bb5cd37d5","sha512":"122a8496ef4096971a046557b8ac335f9f40837644cd1648f42f76421b3295a8ccd200f7af936efcc345c0a0821447360a1172ef0b321a0320817be29e94498d","ssdeep":"192:jJz8GzCgQ743UBtvOJ/1embbStCtAPvI0r4Bz5AhMoC:C0J3UP2/1embWU2hMoC","tlshash":"61e1fa28579b21642913e034a67b2198a89eb3b3b355f85c3f0f5ad21fc0d8dd4d79b4","first_seen":"2026-05-31T06:08:46.841128Z","last_seen":"2026-06-16T16:46:18.112628Z","times_seen":36,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/site.json?timestamp=1781628340687","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.015Z","timestamp":1781628341015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /site.json?timestamp=1781628340687 HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ngw740.com/zh/90GAME.shtml?t=20260616\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\netag: W/\"457c-3qQrvMNLH1lRPtocJ6kh9JFoNuw\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fx7hrATDjjRMwklAqd5vlrKxTjCsukONzJSmL4%2FcOgrwYe9evztm61qnBqkCY4YVUkpFnlD86ZyLtd0IcvkR6LpH8CeTFBD9vuUDI33oQcOykPo6ncBa86h2Rx1y\"}]}\r\ncf-ray: a0cb494b593db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17788,"size_decoded":4851,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (17788), with no line terminators","md5":"ac1389aca7dbedeeeaba9d936526e89c","sha1":"dea42bbcc34b1f59513eda1c27a921f4916836ec","sha256":"210e83f7101bcdf3a50d999906be5f18fc6eb6c43aec3610079f042780020c64","sha512":"e23d130e3fbf9ed2768f20f6303ca5a4907d0a4bff10d3d76257f13ef1de414952f01fb19ac5a883b6f54b878b361cf53d1687323fa343ff448fe006f4df4ea1","ssdeep":"192:RMNmplg3YAj6VwR++3q7B9OTbhKq7B9OTbhn:mNY4YI6VwR++67BwXh17BwXhn","tlshash":"b4826792ee86cdf8d1421da59fec0a4a5da481859b633b313240b7b9dcc9978f4ad834","first_seen":"2026-06-16T16:46:18.113477Z","last_seen":"2026-06-16T16:46:18.113477Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9pbWcuYWxpY2RuLmNvbS9pbWdleHRyYS9pMS9PMUNOMDFjNGpXZ08xbUg0eFNZSGZ4Ql8hITIyMjEzMjgyMzQ5MjgtMS1mbGVhbWFya2V0LmdpZg==.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.417Z","timestamp":1781628341417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9pbWcuYWxpY2RuLmNvbS9pbWdleHRyYS9pMS9PMUNOMDFjNGpXZ08xbUg0eFNZSGZ4Ql8hITIyMjEzMjgyMzQ5MjgtMS1mbGVhbWFya2V0LmdpZg==.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwH0JZpE4ALx%2FV%2B2Ircx4HSp6l%2BywzcWlW4adpWSz%2BN8%2BYlJ4bQkysYXV9SAM46TBmdUubi8RGVxZlmhGCNMZY0VaLEluDhVxR14tithaNYPhYwzwy5b%2F8ayjvka3cqPiJM%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: format_not_supported\r\nage: 454868\r\nlast-modified: Thu, 11 Jun 2026 10:29:38 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\ncf-ray: a0cb494dec755fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":168493,"size_decoded":71858,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"7cc7dceb6f9989343d38aea517bddbe7","sha1":"b7460fc0699fbf11ff728aae96aecb8217d91e27","sha256":"ac0d08f2fbf8f4244de7027bbd8dabdd656d36e6e32bdc02c31aae59d906221f","sha512":"cb59881e71d0e6fd628d39be6bd9da193fedda94daf88b69b3c47d817ec42c31a6094d06d672da99cd71ae736cee84451da59110f625c004de4342f97e7c4f32","ssdeep":"3072:GdsIIIII4GFmMpxsMpxsMpx+elllOZvavav8:GdZ8MpxsMpxsMpx+XyyU","tlshash":"b1f30276b34d0777336128bb324aa0d70c8b0c1c65a0d69ceca5ad015628fef7669edd","first_seen":"2026-06-12T06:50:07.327751Z","last_seen":"2026-06-16T16:46:18.114917Z","times_seen":10,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9pbWcuYWxpY2RuLmNvbS9pbWdleHRyYS9pMi9PMUNOMDFTNlRZWHAxbUg0eFVoRE4zVV8hITIyMjEzMjgyMzQ5MjgtMS1mbGVhbWFya2V0LmdpZg==.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.419Z","timestamp":1781628341419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9pbWcuYWxpY2RuLmNvbS9pbWdleHRyYS9pMi9PMUNOMDFTNlRZWHAxbUg0eFVoRE4zVV8hITIyMjEzMjgyMzQ5MjgtMS1mbGVhbWFya2V0LmdpZg==.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5rDuUVMlMyGAxVm%2FkZLTmHLwrSdzaah0jbIkzXhCKvfY0hXx7hoSVgJ%2FqSdJ0m%2BZ2MH8VOJEDGuH8CieT%2FT66OoiExgjCGUuRdSFVqyJKeZ7aNDVmucbh6bueb305ACBmU%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncf-polished: format_not_supported\r\ncf-bgj: imgq:100,h2pri\r\nage: 14717\r\nlast-modified: Tue, 16 Jun 2026 12:41:32 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\ncf-ray: a0cb494dec765fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":131217,"size_decoded":111522,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"f68bba70d53faa89a4a002f2c3a92b2a","sha1":"a9a8dbd16e5af28b13ff7ae270a6bbcecca46571","sha256":"c08f09dee2b0a8f681ad1aaff0fd4daebfb3bf455a6e4d22cb2e025a44c1a5b6","sha512":"6f3fc1442aeb507131232ba1db27fd35ee222da70a50d2be54a67025034d082b41f2a90047181f8dfad7812bc3e150d980086a413e9202ef6455f2b6556c1e8a","ssdeep":"3072:NHRRb9V3wOHFsBv3Se9YrFAdNUIimEs2y/edvdI2ZVI2ZDylix105MyldldX:RJVAOCb9YrF6NbfLIVjZVjZDylix1cMs","tlshash":"b7d3022f7a19146109fd6bd44869c5d62a346fb8e209d0794ccdbafef31314c61e8b8b","first_seen":"2026-06-16T16:46:18.115628Z","last_seen":"2026-06-16T16:46:18.115628Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9pLm1lZWUuY29tLnR3L1NGWkE3Z0guZ2lm.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.427Z","timestamp":1781628341427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9pLm1lZWUuY29tLnR3L1NGWkE3Z0guZ2lm.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtbvgfMRChnGimtt6dlsbatz%2BFAdgKxmx%2BuOTk1UyAENdW3h6cjXQC61Y6yB8pJ60dYc8ZS4i5y2doa1ckzAqqt5aRha%2FH17qS0JkRwRV1cRJfaPCuAbOxYAaV1xCsyCT40%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncf-polished: format_not_supported\r\ncf-bgj: imgq:100,h2pri\r\nage: 2703122\r\nlast-modified: Thu, 04 Jun 2026 04:04:24 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\ncf-ray: a0cb494dfc7b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":228356,"size_decoded":225493,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"b7768a72cd7e011f0cd9272dc3fcf141","sha1":"81110e4a6ac9e0dcaed887e4e7ee3101efe44375","sha256":"6bcd1deb860efc71c420b586185555cee1f86da033b6d0b17eb78d622faecd3c","sha512":"9d1640a09a07417958b1ab153dfba6389491ed901ab2eed811a9455aef10a20ed4c575056e3c6a57c40bc76608c92539f718be682505e0d235898259aaa2ac46","ssdeep":"6144:yfh6n4BaPeOg+IRZyMyJR8hDDuE7B/XSGr3xxC7z:Q64BaLg+a8XwDDu2/CGHez","tlshash":"0b24238cd70c45c0f61b97e0e137716a5e01ce9a1edc349b1a7abd3ae9a942c0b59ccd","first_seen":"2026-06-07T22:19:21.9301Z","last_seen":"2026-06-16T16:46:18.11775Z","times_seen":21,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/verify/7a7fb455?t=1781627799896\u0026host=ngw740.com\u0026redirect=%2F90GAME.shtml","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-16T16:45:39.098Z","timestamp":1781628339098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /verify/7a7fb455?t=1781627799896\u0026host=ngw740.com\u0026redirect=%2F90GAME.shtml HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: max-age=14400, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2FMZAkpzwfyAbc%2FKqjAlkQ%2Bqze5kTE80E9xcsN08%2Fe1bimc41vfstWWBZVjoVZAtxNVkQwnRpGtLFfY%2FY74yD5TyRd70RkKzwaDagaubMkKlUF8cYNDPLJBhuqwI\"}]}\r\ncf-cache-status: MISS\r\ncf-ray: a0cb493f58c8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4916,"size_decoded":3514,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4d0f58bfc49d2d23107015108fdde4fe","sha1":"cd59cd1afe659d2cc9ebb60e55e971d8e821dcee","sha256":"47e87960a0f06dc9f00dc87a885adfc5629f39c7959a3eff823ae2ed1b27c3dc","sha512":"7b8ebafa18803a80debc649fd9efef28db7507b637d29c305d545f2f1d75a129a866dee28aae49dd031db2228fe44e9a48045deb6b7ebe349916730bf346d493","ssdeep":"96:2VIhpEgtSPyUcyVkFIhu4ep7YLMt7fELFX:lheVKUbVkFf4LCELZ","tlshash":"a5a1e6aa21d640045133c1ab6ea2f70cfa3288078402cb45f8ee63576ff941f0663bad","first_seen":"2026-06-16T16:46:18.119032Z","last_seen":"2026-06-16T16:46:18.119032Z","times_seen":1,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/css/common.css","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:40.499Z","timestamp":1781628340499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /css/common.css HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/zh/90GAME.shtml?t=20260616\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Mon, 30 Mar 2026 08:34:30 GMT\r\netag: W/\"4d44-19d3de151f0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AibC6pLSwLjP7ulYIIRcrxVmAxG2H0KqZM3XjYKVsUL9nJlc6vVf3jlduatsqRt2lRQQqiaYoL5juG%2BaLhr9HGvEBDgvUQtKOPP0vqL3IufVkWlM9OhsCDs12vO8\"}]}\r\ncf-ray: a0cb49482911b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":19780,"size_decoded":5329,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"677c6dfcd409b3edbe9a606d149d7543","sha1":"79a6f9f20366dbe62f53a55681a2e008df8eaea7","sha256":"2fb21dfe9028f52cd24b1b9bdc0cd881e929f386bd7a96bed8fa0734c02d4775","sha512":"a17270bc553c36fd848db4b767b19a5f1f4a44e0127a6868065fd52bdad1ddf3199e8d2bb84f87a019b67689bb40d43b0126574b38280fc7611818eef92a9d1b","ssdeep":"192:SMixp7y+/td7s2a202ORxX89wgYlHdBzoYwK/SAMZLv1Omw:1iD7Rs202ORxXzhkZLv1Bw","tlshash":"80926264a989012af027c76d6c88fe98132cf6a1d7c14b3df92f76f1459148a3673f86","first_seen":"2026-03-31T06:28:36.548676Z","last_seen":"2026-06-16T16:46:18.121001Z","times_seen":46,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/css/main.css","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:40.501Z","timestamp":1781628340501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/zh/90GAME.shtml?t=20260616\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Thu, 05 Feb 2026 10:09:18 GMT\r\netag: W/\"1634-19c2d4710b0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=92NViN2T3AwxzM1qMlqtMdLsvtNV0lAJ%2FX66GIa0yib9kRHQ9PR54iQPibrYatLXm657Gge4v7xahIHVG%2FzOPaJZngBcR%2Bbbelt1Ri%2Fdm%2FOC2UsRRDzjT%2B8Dvy2A\"}]}\r\ncf-ray: a0cb49482912b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5684,"size_decoded":3168,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"14928d6bcf8cbec852c852a98345a886","sha1":"3a040570abcb52912f56344cfc26b7dd0017a1e6","sha256":"1d6e2e0ca198ce03a97fc4469364e14bcd944845ab56f00b4cba091344bcce3c","sha512":"d234940b9c129307bfeaf5039da06edfba5e7afd8ed05195d5fa382f5511654f98e8d24b166baac1a94c45c28b2eb6f55cf6a3964d34f641e0601f69618c0609","ssdeep":"96:MADJiektbIXAN6IQsMFp6PFa6a3OTsYFkt3gsD4MPeAYpeU4XJO:MYYekVIXA6IQsMFpqF7/TsYFkt3glMPw","tlshash":"15c166869d133e45741bd2342f79424bb229d20fd38ed9e97e8932484fcd554c8b2bda","first_seen":"2025-12-23T22:55:01.576109Z","last_seen":"2026-06-16T16:46:18.122802Z","times_seen":94,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/js/tongji.js?t=1","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:40.514Z","timestamp":1781628340514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /js/tongji.js?t=1 HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/zh/90GAME.shtml?t=20260616\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\netag: W/\"105-RIngbib8YfyG1tqDRu7bISb+IMk\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTm6em0IJHl9H0oklzJ%2FbBs9Du0jqamAlAQGPYgiwtFzvxufhlXk6vXvxA9TGsdIfuZSkSsfLLNd1cy1jglKk9jGwUssyIWUJ%2Bu2K%2FJf5oAsCqZ2TgnHgExJ9NEf\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0cb49483917b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":261,"size_decoded":1169,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9b1a7eb6337d1687906de68e0220c8a2","sha1":"4489e06e26fc61fc86d6da8346eedb2126fe20c9","sha256":"fe4a43e59cd908934f18e31cf6d6cbcb1d95244920b6bf5dc82666c9738e7086","sha512":"83aef6525e2277dd63530616aec59be3e3832ec6d3b5d1dc0ea00056bcc94638d524a2673007d5bc8a86b27af2f56853133fed82b867695e1452e17f7e8d3216","ssdeep":"","tlshash":"8cd02b4a28c008e5e27600a80b6dc1497022512519cac10174ccc4955c20dd004ad9cc","first_seen":"2025-06-23T16:23:53.30232Z","last_seen":"2026-06-16T16:46:18.124324Z","times_seen":33,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/images/icons.svg","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:40.607Z","timestamp":1781628340607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /images/icons.svg HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/zh/90GAME.shtml?t=20260616\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:40 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Thu, 05 Feb 2026 15:14:37 GMT\r\netag: W/\"2f92-19c2e5e9748\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\nage: 77558\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxpOQm7CaJDeEFRTOzDTRXbk%2BkQGqX8s95I%2FHbXeVDBZrWrPCGangp%2BSe%2FTQXp1USAtL6RzUTCoOVVPdHrFTiyVs7pML7YEInE%2FWb6Im2LP4ZV%2BdyfGAeZj2pPfQ\"}]}\r\ncf-ray: a0cb4948c91fb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12178,"size_decoded":4711,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7862b7e6344aba8e7457c34896724205","sha1":"5383464a2b3101b35e8fcbc62a2e97c9b57014af","sha256":"fdc5648d4261e7cff585f59586037f5b0f2deba9f71871b01bc0b562dcffdbbf","sha512":"299e28f6dcc6b533c1a3a26e9a585e2776d46bfea1ff4470bdaae8bf04fbb73adfbb9c7f7427ba933f3752dc84bd10c52ee3f54d98b1c222fd6a7434beed37cc","ssdeep":"192:tM1353a2P/74K8CCvCkqCUNLLzl0DSjd7amAGIDRs9kQ:tu3nPT41CCvCHCUJLziGJqGID+kQ","tlshash":"6142eabd477c13aca783c775772684b5671ed0bd3aa9c5b008af9ab016ab001e5cb8d0","first_seen":"2026-02-05T18:39:58.076552Z","last_seen":"2026-06-16T16:46:18.125553Z","times_seen":81,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9pY28uZGFnZS50b3Avc3RvcmFnZS91cGxvYWQvMjAyNTEwMTQvNjhlZDg3NWU2NTM2Zi53ZWJw.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.1.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.429Z","timestamp":1781628341429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 May 2026 11:43:23 GMT","end":"Fri, 31 Jul 2026 12:43:18 GMT"},"fingerprint":{"sha1":"7A:23:C5:63:92:B1:63:18:7C:7E:4E:09:D7:4C:6A:54:F0:F9:D3:70","sha256":"A6:BC:E0:6B:38:50:0C:CD:5E:30:CB:24:82:BE:67:66:AE:73:E4:DC:46:66:F2:55:AA:EF:D2:E0:7C:97:BE:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9pY28uZGFnZS50b3Avc3RvcmFnZS91cGxvYWQvMjAyNTEwMTQvNjhlZDg3NWU2NTM2Zi53ZWJw.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:41 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Range\r\ncache-control: public, max-age=86400\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4275946\r\nlast-modified: Tue, 28 Apr 2026 05:01:57 GMT\r\ncf-cache-status: HIT\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69gAgX2S7%2FQSV6YaCl4jLjTyQ7X3av3CXmE4vba%2BvybcZNQPUeAf7vE0I2F0gZz6GRCQaRhv%2B4RNORbfA5QuwV3R36j1hnDxfApHeLgUQt9%2BxZ6T8UIXYqD4324RjB%2B722A%3D\"}]}\r\ncontent-length: 370098\r\ncf-ray: a0cb494dfc7a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":370098,"size_decoded":371099,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba5294e0dbd9c056bf862bbf804f0825","sha1":"bbfb9dfc5d99efc11bed25fb288413b3bcd9d8d2","sha256":"67793cecf1697c39662317c801101d3c45747d76562bdaf1c744af78dc9b2ed7","sha512":"abf8d4157906c80ea82ecd62dda23a65bbb55c94117bddf5dc6d2c46e58062df468c29db72553f1c7ffc7472121666f6c1c8b76afd414a2dee6aedebcf0670da","ssdeep":"6144:yjZPMQ4Q+tQ+tQ4Q+tQ+tQ4Q+tQ+tQ4Q+:gZP","tlshash":"bd74d1ef06009aeee59a6a798e8c7115b9020c5bb3290834e23577765efc1d5eb473c3","first_seen":"2025-10-14T10:55:33.506495Z","last_seen":"2026-06-16T16:46:18.127021Z","times_seen":1445,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h58ggg.com/b//4/104717622804i?_=1781628341223","fqdn":"h58ggg.com","domain":"h58ggg.com","tld":"com"},"ip":{"addr":"43.198.113.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:42.548Z","timestamp":1781628342548,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h58ggg.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Sat, 01 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:24:66:85:E8:65:1B:14:BE:79:D2:4E:9F:8C:D1:59:04:7E:EA:27","sha256":"00:43:E8:5E:58:5C:EA:F6:B3:02:45:DD:0B:A2:F9:D1:5E:0F:12:69:3C:27:55:C6:AE:8B:FD:6C:43:9C:D4:9F"}}},"request":{"raw":"GET /b//4/104717622804i?_=1781628341223 HTTP/1.1\r\nHost: h58ggg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 16 Jun 2026 16:45:42 GMT\r\nContent-Type: application/octet-stream\r\nLast-Modified: Tue, 16 Jun 2026 16:30:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a317a0b-1570f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87823,"size_decoded":12426,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f54aba8bfd34d1fd6f58495e9d6cbbaf","sha1":"3ba360d8e9094009070b5b1533c92f8c5f1cb3b0","sha256":"093b59a62087de70cda153b98ca03415f0b04e3b283cb4107c8c57dc52fdcf0e","sha512":"842ee6db2b89220f3ecaf5b571f8ff710addcdaeb20396531907f93abca3124507d6cb34cc2a5ba5097f6e3e18fd5d68dbbebe056159f4ad5f27c99c33494191","ssdeep":"1536:+A/0M/UBWJRVKoY2r9WBIcTAMa45yVVFllR1i5sCFya37oiHWS8sj+tFhIOMohyP:+3UMa4ySyq","tlshash":"048320d4a29ae15f2b8c5d43fe78aede50b5972790c5b347c398fa4d04ad24bc29c8c4","first_seen":"2026-06-16T16:46:18.105218Z","last_seen":"2026-06-16T16:46:18.105218Z","times_seen":1,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ngw740.com/css/bootstrap.5.3.0.min.css","fqdn":"ngw740.com","domain":"ngw740.com","tld":"com"},"ip":{"addr":"172.67.133.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:40.497Z","timestamp":1781628340497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ngw740.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 21:42:36 GMT","end":"Sat, 05 Sep 2026 22:40:09 GMT"},"fingerprint":{"sha1":"0A:6D:58:07:42:6A:BA:DB:C3:27:46:AF:A3:05:90:B0:D2:89:3A:BC","sha256":"2D:50:63:9A:6D:67:34:CE:9F:15:11:A8:43:F1:05:B7:35:3D:A1:A1:D5:ED:3F:9D:29:18:D8:44:A8:67:04:48"}}},"request":{"raw":"GET /css/bootstrap.5.3.0.min.css HTTP/1.1\r\nHost: ngw740.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/zh/90GAME.shtml?t=20260616\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 16:45:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=604800, immutable\r\nlast-modified: Thu, 05 Feb 2026 15:29:33 GMT\r\netag: W/\"38dd2-19c2e6c4348\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHxktqVHFuKPEiNOay941OGOyY7hILuJBgazRNMNX5%2B4FCrnbKF75j0S1vZJs0hg2CaqND47fr32%2Fv9CT2t2Na7CpLhhkHSlMuWKUsvUW6wNtAOBukRKL7b8hunc\"}]}\r\ncf-ray: a0cb49481910b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":232914,"size_decoded":32702,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-06-16T17:42:52.240308Z","times_seen":23779,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"ngw740.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node92.aizhantj.com:21233/tjjs/?k=f895ld4tcvj","fqdn":"node92.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ngw740.com/zh/90GAME.shtml?t=20260616","date":"2026-06-16T16:45:41.010Z","timestamp":1781628341010,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tjjs/?k=f895ld4tcvj HTTP/1.1\r\nHost: node92.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ngw740.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}