{"report_id":"480624d4-6f6b-4c38-ad84-c6844aaf206b","version":6,"status":"done","tags":[],"date":"2025-11-01T16:50:54Z","url":{"schema":"http","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"title":"놀쟈 - 성인들의 파라다이스","dom":{"size":9982,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e328112d65b1b7775965a5cbcffa5a26","sha1":"5d0ff3145ce136e33f10a0d4947ec14ffc6f745c","sha256":"aef0eaa6e238526328969f886b1e1c926a89bc306bfde1ef1d6d0c890a650d5b","sha512":"15b7b62a7f7566d8046f510e2ebe221c52092a95c058d81784aefbbfcddb849a870e000ed54f5a28ff4ac4604dfe1d11df7fcc4ea8b673cf2d1023eb387c6d96","ssdeep":"192:cAXMGfCARiphIFBII1UOU/cIIcQCrgGMc6AZq+:cAXMGfCARPFBII1URE5cQCrMc6AZq+","tlshash":"8422a8b35843c0055116d4047ebbf30cd1f28457eac6cd64faac96a9afc0ad7887bb99","dom_hash":"domhash6729279fe57f5c1b01a23cf47ae8eb2c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-06T16:50:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-26T22:13:34.663946Z","alert_count":0,"request_count":1,"received_data":428324,"sent_data":401,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.nz131.com","ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-10-30T15:54:00.061347Z","last_seen":"2025-10-30T15:54:00.061347Z","alert_count":18,"request_count":19,"received_data":513676,"sent_data":13181,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-26T22:16:47.70733Z","alert_count":0,"request_count":1,"received_data":204454,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e56767923cbaa7f6b883e21cf3ec652b","sha1":"2b30d2f9e4429b7e15b4c93a3e73c23eb899e72c","sha256":"1dff2f4e7b2a3571dc6c289b4d4775e4fe6bc80fd8570b4204057a79f644cd6e","sha512":"b48310cca53010b024a063e3a4783d47b9587bb62fe9901c4497ea723ce500272fc6b9b626e987074d67a4afba554b4fec819cf41c885ed8f5a1a7cf2e45d8c0","ssdeep":"","tlshash":"0fc02bcc210a0cb041fb37008f3fb600f002321cd4d06931882d2384cd30e03d744810","size":153,"data":"","first_seen":"2023-08-02T19:10:55Z","last_seen":"2025-12-22T09:50:19.031589Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/jquery-migrate-1.2.1.min.js","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-04T09:42:51.411712Z","times_seen":19802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"81bc35f73e09736b99772050b3c47be2","sha1":"2cb2e19093fc3b3ddc1d8bc43951587aaa4c7e32","sha256":"8c1d323128773ba92d7572d8594b9dd12a8d0290fa6375369608ced45f7eb0bf","sha512":"9066215ea5ff676f652d216bb90b9bb4144cc424a03d0b65fc36d66172701c92873516e9e6ba76fe9bd2a654c0e0ea5280be8d2ce6c8658bdf912456aed190dd","ssdeep":"","tlshash":"a39002e570c75654965a11b408562885542846b0144c8f40405494d21899130551d45c","size":48,"data":"","first_seen":"2025-01-16T15:47:52.794793Z","last_seen":"2025-12-22T09:50:19.02995Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"81bc35f73e09736b99772050b3c47be2","sha1":"2cb2e19093fc3b3ddc1d8bc43951587aaa4c7e32","sha256":"8c1d323128773ba92d7572d8594b9dd12a8d0290fa6375369608ced45f7eb0bf","sha512":"9066215ea5ff676f652d216bb90b9bb4144cc424a03d0b65fc36d66172701c92873516e9e6ba76fe9bd2a654c0e0ea5280be8d2ce6c8658bdf912456aed190dd","ssdeep":"","tlshash":"a39002e570c75654965a11b408562885542846b0144c8f40405494d21899130551d45c","size":48,"data":"","first_seen":"2025-01-16T15:47:52.794793Z","last_seen":"2025-12-22T09:50:19.02995Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"81bc35f73e09736b99772050b3c47be2","sha1":"2cb2e19093fc3b3ddc1d8bc43951587aaa4c7e32","sha256":"8c1d323128773ba92d7572d8594b9dd12a8d0290fa6375369608ced45f7eb0bf","sha512":"9066215ea5ff676f652d216bb90b9bb4144cc424a03d0b65fc36d66172701c92873516e9e6ba76fe9bd2a654c0e0ea5280be8d2ce6c8658bdf912456aed190dd","ssdeep":"","tlshash":"a39002e570c75654965a11b408562885542846b0144c8f40405494d21899130551d45c","size":48,"data":"","first_seen":"2025-01-16T15:47:52.794793Z","last_seen":"2025-12-22T09:50:19.02995Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"81bc35f73e09736b99772050b3c47be2","sha1":"2cb2e19093fc3b3ddc1d8bc43951587aaa4c7e32","sha256":"8c1d323128773ba92d7572d8594b9dd12a8d0290fa6375369608ced45f7eb0bf","sha512":"9066215ea5ff676f652d216bb90b9bb4144cc424a03d0b65fc36d66172701c92873516e9e6ba76fe9bd2a654c0e0ea5280be8d2ce6c8658bdf912456aed190dd","ssdeep":"","tlshash":"a39002e570c75654965a11b408562885542846b0144c8f40405494d21899130551d45c","size":48,"data":"","first_seen":"2025-01-16T15:47:52.794793Z","last_seen":"2025-12-22T09:50:19.02995Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/mention-highlight.js?v=20251102015216","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"86f6b520a31489af84cf285b9f7d850d","sha1":"55be8565adac901f8bc2ac16b735723ed422f6f5","sha256":"3d8674bba230910aa2b1260d2467d9d3b1919b53361302b477a0ff1dd886af79","sha512":"3037bcc89a4036f1b853f904abe9a0ac189e4fad3b987bd414d57a18f0644889e1723822ccea9fa1c3df9635ad99742ef2b4db6d996571ea7014b6ce435a88a4","ssdeep":"192:hs2tErFD9JDLVC9V4FxdLgYt03wtJWh/Ms/CVdv79lb:WtK22p6Xb","tlshash":"c4d15f8820f6013249b3649eafeff0687a30e1937409c550bd9c4f594fe1e2a65d3be9","size":6254,"data":"","first_seen":"2025-09-28T09:57:51.149672Z","last_seen":"2025-12-22T09:50:18.977519Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/mention-autocomplete.js?v=20251102015216","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fb819dd2703e762da9366e1230f8844","sha1":"6e9239ac114d1cdf2ef9ffd1edece05b8675d941","sha256":"5acbb4f72f5eb81a3e04cb9c4f072606165a92b2c679d0f64d725291f5068e8f","sha512":"ff310515ed4caf6fa606c41ff8b337160cedb1f06435bad5122e05775c0ef82ae884601e0856be7b050ad590a2c9c24853c392a7f837ba353305fda8255b8372","ssdeep":"192:sSZ0RL95l73sZPFKQdQa9gIp6pWFgiHQJH3oB0Hkh2AC4FfYP4wYSBOR/MWCiQ98:4sDKatH4YasC23LUu","tlshash":"f3123d2529f7001786b3b03e1feb6240a439960b6644cfcc3d9d5a581fd2a5427fbbe9","size":9184,"data":"","first_seen":"2025-09-28T09:57:51.280744Z","last_seen":"2025-12-22T09:50:18.983007Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"bc472797acad73ba4237990a1cec0eb7","sha1":"4c21a317f80c9d7bb598d921a5f8145da8ff75dc","sha256":"6e08810093ed8ed044d30e5446697e49a65b9160386dc959380cd0cc16c38819","sha512":"c70b2bf39c71809a75d96215dd999ae9133ff409c76aab8aa205df79bfb5299feff60c339ba988ef006a5edfcc837f42ce4a2e646ec0cad928a0c817462a86d4","ssdeep":"","tlshash":"339002e9a1c35454965611b8005618855468467018468f444048a5911859430511d45d","size":48,"data":"","first_seen":"2025-01-16T15:47:52.803028Z","last_seen":"2025-12-22T09:50:19.030758Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"81bc35f73e09736b99772050b3c47be2","sha1":"2cb2e19093fc3b3ddc1d8bc43951587aaa4c7e32","sha256":"8c1d323128773ba92d7572d8594b9dd12a8d0290fa6375369608ced45f7eb0bf","sha512":"9066215ea5ff676f652d216bb90b9bb4144cc424a03d0b65fc36d66172701c92873516e9e6ba76fe9bd2a654c0e0ea5280be8d2ce6c8658bdf912456aed190dd","ssdeep":"","tlshash":"a39002e570c75654965a11b408562885542846b0144c8f40405494d21899130551d45c","size":48,"data":"","first_seen":"2025-01-16T15:47:52.794793Z","last_seen":"2025-12-22T09:50:19.02995Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"81bc35f73e09736b99772050b3c47be2","sha1":"2cb2e19093fc3b3ddc1d8bc43951587aaa4c7e32","sha256":"8c1d323128773ba92d7572d8594b9dd12a8d0290fa6375369608ced45f7eb0bf","sha512":"9066215ea5ff676f652d216bb90b9bb4144cc424a03d0b65fc36d66172701c92873516e9e6ba76fe9bd2a654c0e0ea5280be8d2ce6c8658bdf912456aed190dd","ssdeep":"","tlshash":"a39002e570c75654965a11b408562885542846b0144c8f40405494d21899130551d45c","size":48,"data":"","first_seen":"2025-01-16T15:47:52.794793Z","last_seen":"2025-12-22T09:50:19.02995Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"86da3f545977a7a29ef71fcd17c89dbb","sha1":"966465aff87da5a01ac4d930791979f6a4e468f4","sha256":"5f02b4f4a820e25438097bcb99dda75a687ce86cba7c90bf17145a8a9c754e22","sha512":"be9997c5863bf1e2906ef69e219eb8a2efac9f0c61f3d7f853b5a1d531397cde24265217f0be5eb09a0e5d76a32c72a7046592e4f5ec1efd9f7db3e05c0285ef","ssdeep":"","tlshash":"f651afe6b9c100f6d1336228597febc73532a087350b8440bb8d93c04fa5d2a865e5e9","size":2834,"data":"","first_seen":"2025-06-25T14:41:58.544401Z","last_seen":"2025-12-22T09:50:19.038698Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7260c069dc10daff34b0029090f0d9d","sha1":"a90b9ef9878915cb02289a7db03a9feb22d07116","sha256":"138eb9d89fb160781a3db39bcbabdc32667d300ffe6f3fb2d86bcedd4b79af56","sha512":"df230cdc7a7fc6d06c4c67ccbfabff8ea72b42b5bd67e8b188c45a6d5d3a84008a6d12760a04c53e97d761233c7b8a465ea9ca6835cedc9102b809c02ae86b96","ssdeep":"","tlshash":"2df0b4d3e85fd81642437449adcf6605eec64864a5d2c3af794dc3885b014ab45fea1c","size":527,"data":"","first_seen":"2025-11-01T16:51:00.40366Z","last_seen":"2025-11-01T16:51:00.40366Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/apms.js?ver=197468","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"84e5c9208d87109494dc0072989226c3","sha1":"17e780c67f62e7e5665daa2d6d64df62c3c7b430","sha256":"72fd254a4f0c6ee7c9f9f8124bf9c70c3460c72a6e5093d2b096a2d82c9c7462","sha512":"28e301988c1a97bbb920025c79ebdde08ca29417c80408bc11fc528790d2dbfe9265c133fe8e2a69008a45c0c4533e4cf4da6e5f82bb69fcdd95284d00ab08f9","ssdeep":"384:tf0SvLj97DDsW8RXEUHP6wQZTNms6YjCetq88BPXYp:GSzj97DDsWUEUHP6xZF6Yntq87p","tlshash":"95b2a349e7d939a5652275364f8f76446178a0131d4acc147e0c92e82fada3c20bbffd","size":23456,"data":"","first_seen":"2025-09-28T09:57:51.36241Z","last_seen":"2025-11-30T21:14:51.367398Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZHFDS683VP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"abf9e2bf6cc4b3232bbe6ca4eb6eda19","sha1":"f48c358a403a1f47c4fc1464f3d8cb2cc26134a5","sha256":"71dd1f70836349d6d8713e6d29375c54bdcdae959cc9b4c22684af21aa45436a","sha512":"6d13979d417f4bdeae98ac3f08e005f0572004a0528443ace480a79cf069861be67253db37375c921691299fa67e7dfe87d36f6dc2b3666e23c15b7d8eb4db1b","ssdeep":"6144:LBR5HIy2n8fud75KGq6A0RI6TLiYYg/FOY9ftLHAJpaAmn/xS2GqH:NrHITiud75KGq6hvLiYlAJ6D","tlshash":"109419ce73c670269396f078503f118ba57b29a2b45cc896f189cce42d74a9a4277f7c","size":427720,"data":"","first_seen":"2025-11-01T16:51:00.366936Z","last_seen":"2025-11-01T19:01:08.349074Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"13111b235658ebf2207dc6ba67c9031f","sha1":"8694590589ea408b5f928eea6aa338b5dbe7cec1","sha256":"84e947ef4f27140d174254ee96f1172224498db9c8d97d9ecc61bdc62b4b3484","sha512":"e5da496d8a0dd5bd239f10a3c78e8d5498e2a927c5b1c96c0a9ae8f551f8d9ae0b0254c1ed354c8ab0d96210d6f3520afee738ad81d5b43c7dc0babe17e4bd3b","ssdeep":"","tlshash":"9fe0d8a778da656909daa5bf187f9bcd74b3400e7d05a21418688460746df8f0133e8d","size":378,"data":"","first_seen":"2025-10-30T15:54:07.42604Z","last_seen":"2025-12-22T09:50:19.034822Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"bc472797acad73ba4237990a1cec0eb7","sha1":"4c21a317f80c9d7bb598d921a5f8145da8ff75dc","sha256":"6e08810093ed8ed044d30e5446697e49a65b9160386dc959380cd0cc16c38819","sha512":"c70b2bf39c71809a75d96215dd999ae9133ff409c76aab8aa205df79bfb5299feff60c339ba988ef006a5edfcc837f42ce4a2e646ec0cad928a0c817462a86d4","ssdeep":"","tlshash":"339002e9a1c35454965611b8005618855468467018468f444048a5911859430511d45d","size":48,"data":"","first_seen":"2025-01-16T15:47:52.803028Z","last_seen":"2025-12-22T09:50:19.030758Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"81bc35f73e09736b99772050b3c47be2","sha1":"2cb2e19093fc3b3ddc1d8bc43951587aaa4c7e32","sha256":"8c1d323128773ba92d7572d8594b9dd12a8d0290fa6375369608ced45f7eb0bf","sha512":"9066215ea5ff676f652d216bb90b9bb4144cc424a03d0b65fc36d66172701c92873516e9e6ba76fe9bd2a654c0e0ea5280be8d2ce6c8658bdf912456aed190dd","ssdeep":"","tlshash":"a39002e570c75654965a11b408562885542846b0144c8f40405494d21899130551d45c","size":48,"data":"","first_seen":"2025-01-16T15:47:52.794793Z","last_seen":"2025-12-22T09:50:19.02995Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"81bc35f73e09736b99772050b3c47be2","sha1":"2cb2e19093fc3b3ddc1d8bc43951587aaa4c7e32","sha256":"8c1d323128773ba92d7572d8594b9dd12a8d0290fa6375369608ced45f7eb0bf","sha512":"9066215ea5ff676f652d216bb90b9bb4144cc424a03d0b65fc36d66172701c92873516e9e6ba76fe9bd2a654c0e0ea5280be8d2ce6c8658bdf912456aed190dd","ssdeep":"","tlshash":"a39002e570c75654965a11b408562885542846b0144c8f40405494d21899130551d45c","size":48,"data":"","first_seen":"2025-01-16T15:47:52.794793Z","last_seen":"2025-12-22T09:50:19.02995Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/placeholders.min.js","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0203a3f2329c7375e057bcab052149","sha1":"3158adabd1844b531abf5bf9d196a9b08d0e24b9","sha256":"980b7c3657c19191a6eec108682f5d3dcb01c1c30a6ce4d379ab53db82549b13","sha512":"11761a83754d468e84d92aeb318de22e5ac4564780c7c5c51442fe8a6b8c4b9423228fa8ecae2307632611c4f9ada97b582f8aa288f48db19bd22fdb23dc2f25","ssdeep":"96:LeFKvsJcQH3ojWadgRA7C3rMpZtgPrUGvERRjPMvG:Le7cQH3Hadg/3GzavERhPMvG","tlshash":"56b1947e324677731da305e9f8abdc85b870a3f6b50b4c60e0a4e452393cce956b6d48","size":5103,"data":"","first_seen":"2023-03-07T01:16:17Z","last_seen":"2026-04-03T18:26:30.754534Z","times_seen":1632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/jquery-1.11.3.min.js","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"895323ed2f7258af4fae2c738c8aea49","sha1":"276c87ff3e1e3155679c318938e74e5c1b76d809","sha256":"ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8","sha512":"c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf","tlshash":"3b93d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95957,"data":"","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-04-04T09:11:27.960696Z","times_seen":13761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/common.js?ver=197468","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"aea534a95e21fb0e68793f78d08a0fba","sha1":"dd90f7eccfa495ca6c6e83105853c5439385bee3","sha256":"42181d5d4b53e9a73a48d89f7a3eacb5fb3ffc176fb0e6bcaac9ce69c1247a86","sha512":"d9ac0a38f859e0612da1f6b8e67c1ef11152d9f4ee08b228a516a9a6e9c7eed9f6ab4f5bf92f49b8c520065f89e3c36b9847848972a39d13cf1d19d69b9e27f8","ssdeep":"768:RBfLvYb0WP1f2/3djf3E6cey2kR0RXRiR7RjRvRwRORwRKR5RxrRERVRCR5qRiR5:ffTYb0+f2/3djf3E6cey2kR0RXRiR7RF","tlshash":"fcf23f1be4f3b367016338287a6b40793c74d48f524dee943d0cc6ac6fa91dc606aad9","size":35653,"data":"","first_seen":"2025-06-25T14:41:58.473576Z","last_seen":"2025-12-22T09:50:18.976189Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"38f1217e54ea1cdd1274515ba1bb51b6","sha1":"c723433dc9d244cba7c377f4864a89645154f323","sha256":"9280678d3ce13593dd17c528eeb5318c92d53c0664f54824caf6198f9b891be5","sha512":"1b42d6d45ec969e3586904f909711549bedd81902a6c9c27d02204be8cfcc42a1ca1781072b2a07fe5396d4f90266ecb2983581fe634e0b0cf870cdd0a22a9c3","ssdeep":"","tlshash":"32216dee9963202d603b756b0f7f8419357258631189d920bf0cc3527fa0d5ba924f7a","size":1308,"data":"","first_seen":"2025-11-01T16:51:00.406961Z","last_seen":"2025-11-01T16:51:00.406961Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/lang/korean/lang.js?ver=197468","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"de4900a0956b5c0ff3da64050f99a5f3","sha1":"f320abb6105fc968cf9f24d39bd52a9e695cdbe0","sha256":"0441fe6605bdf1703772a5b6fc4251813ef8312984384b4cc50f636ccd2dee6c","sha512":"ef4e9cc2219d7d911c3aeabcd4203667bbfab9e45f6d4fb93c294dcb4e98f071bdef842dd6742e2a3ea3c910d062b42a1f0de320b0f51fc44d2a3983773604dc","ssdeep":"","tlshash":"dd518af67407069641d7c68f98e0ed8983949302fb2ee0d88f8dedc89c598e155c67ae","size":2957,"data":"","first_seen":"2025-06-25T14:41:58.520485Z","last_seen":"2025-12-22T09:50:19.000416Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"81bc35f73e09736b99772050b3c47be2","sha1":"2cb2e19093fc3b3ddc1d8bc43951587aaa4c7e32","sha256":"8c1d323128773ba92d7572d8594b9dd12a8d0290fa6375369608ced45f7eb0bf","sha512":"9066215ea5ff676f652d216bb90b9bb4144cc424a03d0b65fc36d66172701c92873516e9e6ba76fe9bd2a654c0e0ea5280be8d2ce6c8658bdf912456aed190dd","ssdeep":"","tlshash":"a39002e570c75654965a11b408562885542846b0144c8f40405494d21899130551d45c","size":48,"data":"","first_seen":"2025-01-16T15:47:52.794793Z","last_seen":"2025-12-22T09:50:19.02995Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"81bc35f73e09736b99772050b3c47be2","sha1":"2cb2e19093fc3b3ddc1d8bc43951587aaa4c7e32","sha256":"8c1d323128773ba92d7572d8594b9dd12a8d0290fa6375369608ced45f7eb0bf","sha512":"9066215ea5ff676f652d216bb90b9bb4144cc424a03d0b65fc36d66172701c92873516e9e6ba76fe9bd2a654c0e0ea5280be8d2ce6c8658bdf912456aed190dd","ssdeep":"","tlshash":"a39002e570c75654965a11b408562885542846b0144c8f40405494d21899130551d45c","size":48,"data":"","first_seen":"2025-01-16T15:47:52.794793Z","last_seen":"2025-12-22T09:50:19.02995Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"81bc35f73e09736b99772050b3c47be2","sha1":"2cb2e19093fc3b3ddc1d8bc43951587aaa4c7e32","sha256":"8c1d323128773ba92d7572d8594b9dd12a8d0290fa6375369608ced45f7eb0bf","sha512":"9066215ea5ff676f652d216bb90b9bb4144cc424a03d0b65fc36d66172701c92873516e9e6ba76fe9bd2a654c0e0ea5280be8d2ce6c8658bdf912456aed190dd","ssdeep":"","tlshash":"a39002e570c75654965a11b408562885542846b0144c8f40405494d21899130551d45c","size":48,"data":"","first_seen":"2025-01-16T15:47:52.794793Z","last_seen":"2025-12-22T09:50:19.02995Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/wrest.js?ver=197468","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0030dab0d69c28bbdf0867f48d342c1","sha1":"299fcf77f0c5eef6373f453d6f39bab5d456c10a","sha256":"8714816861a183f15e8c9c562d20e6c4e235a6cd9cbb3504c4eba3a568f52c5c","sha512":"a7f6bbe4f52d59b7da37d74e9c9e081d0d56d37568de3c31023e75132d18346887844218315fdd8518d39a52ba948b6f3c8ca9cdf3501b84a544ddb8a3c941ee","ssdeep":"192:SGz1IUaH4ZKNWNAsQK25KIOKDfKSUKaDaypKznK7vF4BP9DsUKkxAKocBCKHNKqx:v/w0cTnvBlr","tlshash":"2d222069e8bb28b5ab87143d4afa54996a25d7730408d5407d0dc341cfa0f7212f6bfe","size":10811,"data":"","first_seen":"2023-08-02T19:10:55Z","last_seen":"2025-12-22T09:50:18.980634Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZHFDS683VP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"GET /gtag/js?id=G-ZHFDS683VP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 01 Nov 2025 16:50:32 GMT\r\nexpires: Sat, 01 Nov 2025 16:50:32 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142087\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":427720,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"abf9e2bf6cc4b3232bbe6ca4eb6eda19","sha1":"f48c358a403a1f47c4fc1464f3d8cb2cc26134a5","sha256":"71dd1f70836349d6d8713e6d29375c54bdcdae959cc9b4c22684af21aa45436a","sha512":"6d13979d417f4bdeae98ac3f08e005f0572004a0528443ace480a79cf069861be67253db37375c921691299fa67e7dfe87d36f6dc2b3666e23c15b7d8eb4db1b","ssdeep":"6144:LBR5HIy2n8fud75KGq6A0RI6TLiYYg/FOY9ftLHAJpaAmn/xS2GqH:NrHITiud75KGq6hvLiYlAJ6D","tlshash":"109419ce73c670269396f078503f118ba57b29a2b45cc896f189cce42d74a9a4277f7c","first_seen":"2025-11-01T16:51:00.366936Z","last_seen":"2025-11-01T19:01:08.349074Z","times_seen":2,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":171,"dns":0,"connect":25,"send":0,"wait":44,"receive":61,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/css/default.css?ver=197468","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /css/default.css?ver=197468 HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 27 Mar 2023 15:13:08 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3922\r\nKeep-Alive: timeout=3, max=499\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16103,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"bd7919ae15593b57f1603fd0e990a86a","sha1":"3076701955c9b0421023218563533bd387a61063","sha256":"b16bc56d91c35cdc5786f82807a996526b256f6820bbd76012af4aec7d46d503","sha512":"5ab3d42ceec2ea124741374ec64e825c596981c1406e7bc4cd06f85cec3745771c664e80bec31349b28431b4885baac0201131b43a311dc9ab7ced2d81982908","ssdeep":"192:orj5mwHiT8Q/cDfc82CySwC1Rvu/HSpDosj3gNIDHaY2jqD7W:CmfP/C1k03gNsHa1ODi","tlshash":"4172c672a3c06018f03fc571be90eace70589076f4972a75df92a775c94e4de2d22b89","first_seen":"2025-06-25T14:41:58.483633Z","last_seen":"2025-12-22T09:50:18.997201Z","times_seen":34,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/jquery-1.11.3.min.js","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /js/jquery-1.11.3.min.js HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 31 Oct 2021 21:28:54 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 33279\r\nKeep-Alive: timeout=3, max=500\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":95957,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"895323ed2f7258af4fae2c738c8aea49","sha1":"276c87ff3e1e3155679c318938e74e5c1b76d809","sha256":"ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8","sha512":"c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf","tlshash":"3b93d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-04-04T09:11:27.960696Z","times_seen":13761,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":29,"dns":0,"connect":16,"send":0,"wait":20,"receive":19,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/common.js?ver=197468","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /js/common.js?ver=197468 HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 31 Oct 2021 21:28:54 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 7935\r\nKeep-Alive: timeout=3, max=500\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":35731,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (13365)","md5":"aea534a95e21fb0e68793f78d08a0fba","sha1":"dd90f7eccfa495ca6c6e83105853c5439385bee3","sha256":"42181d5d4b53e9a73a48d89f7a3eacb5fb3ffc176fb0e6bcaac9ce69c1247a86","sha512":"d9ac0a38f859e0612da1f6b8e67c1ef11152d9f4ee08b228a516a9a6e9c7eed9f6ab4f5bf92f49b8c520065f89e3c36b9847848972a39d13cf1d19d69b9e27f8","ssdeep":"768:RBfLvYb0WP1f2/3djf3E6cey2kR0RXRiR7RjRvRwRORwRKR5RxrRERVRCR5qRiR5:ffTYb0+f2/3djf3E6cey2kR0RXRiR7RF","tlshash":"fcf23f1be4f3b367016338287a6b40793c74d48f524dee943d0cc6ac6fa91dc606aad9","first_seen":"2025-06-25T14:41:58.473576Z","last_seen":"2025-12-22T09:50:18.976189Z","times_seen":34,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":30,"dns":0,"connect":20,"send":0,"wait":18,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/mention-autocomplete.js?v=20251102015216","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /js/mention-autocomplete.js?v=20251102015216 HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 17 Sep 2025 16:36:26 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2734\r\nKeep-Alive: timeout=3, max=499\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9184,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2fb819dd2703e762da9366e1230f8844","sha1":"6e9239ac114d1cdf2ef9ffd1edece05b8675d941","sha256":"5acbb4f72f5eb81a3e04cb9c4f072606165a92b2c679d0f64d725291f5068e8f","sha512":"ff310515ed4caf6fa606c41ff8b337160cedb1f06435bad5122e05775c0ef82ae884601e0856be7b050ad590a2c9c24853c392a7f837ba353305fda8255b8372","ssdeep":"192:sSZ0RL95l73sZPFKQdQa9gIp6pWFgiHQJH3oB0Hkh2AC4FfYP4wYSBOR/MWCiQ98:4sDKatH4YasC23LUu","tlshash":"f3123d2529f7001786b3b03e1feb6240a439960b6644cfcc3d9d5a581fd2a5427fbbe9","first_seen":"2025-09-28T09:57:51.280744Z","last_seen":"2025-12-22T09:50:18.983007Z","times_seen":25,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/data/file/nz1/www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /data/file/nz1/www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Oct 2025 10:22:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 152372\r\nKeep-Alive: timeout=3, max=499\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":152372,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1200x800, components 3","md5":"dc7b1911e94f579c8d889aec1903307c","sha1":"5bf935cfc36e8c5a29d861968d53165402928783","sha256":"8c7e317c8571b14aefb71d8057ff13a0fe8bd8137001b49895ea8d85b06ce86a","sha512":"e54950052cab35a4d85811c6aa61e4639c3ab7db7fd57dbc27498a1a16cd2fe021cbe9804b0df7f7bcefaaa901f313c203325b6d7eb173f495b799fc1fe1645f","ssdeep":"3072:C/IylDL9TJ7YmNn6ENofoPFV3/ErOvR761qHH8P+oQnfnvPqG:n2VJ7Y8xbP8OvRW1qn8P+bf6G","tlshash":"d7e3120e2a0755ddaf2a0fc8c53b7f9f7c53aa5458087918b401537ddf9267b20a07da","first_seen":"2025-11-01T16:51:00.377348Z","last_seen":"2025-11-01T16:51:00.377348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":18,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/apple-touch-icon.png","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 08 Jun 2021 01:23:36 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4974\r\nKeep-Alive: timeout=3, max=498\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4974,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"c419cf592883517d7e5e4fb7fe3b24b9","sha1":"5444ca1a25331f02984be04874444a9e92ca9a19","sha256":"81661cbd4d7c8e23f2e34d16617bbe6c8c066b3fd3568f19d93bd621b10c2f44","sha512":"2d258892f452071bb5d08f464df9db615bd823f15ccf4e0872f58c3148a914131490c2f5ee861436cd46aaa91fa72c1f852105289db3adbf451cc17493000fcb","ssdeep":"96:EXDKejjiBrkcwF889QaKPYBDHJPrVci2e7fdwA3y2C91bnoize7itMAjk:4nsrhaMY5xwM53y22jzeSDjk","tlshash":"e8a18fbb6ac48fc77f168d75200d6c23799024ef6c7bd4a97101d5a2ef026d50d2851a","first_seen":"2023-08-02T19:10:56Z","last_seen":"2025-12-22T09:50:18.985454Z","times_seen":39,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-01T16:50:31.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:15 GMT\r\nServer: Apache\r\nP3P: CP=\"ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC OTC\"\r\nExpires: 0\r\nCache-Control: pre-check=0, post-check=0, max-age=0\r\nPragma: no-cache\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://www.nz131.com:8443 https://www.youtube.com https://youtube.com https://youtu.be https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https://nz131.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.youtube.com https://youtube.com https://youtu.be https://i.ytimg.com https://img.youtube.com; connect-src 'self' https://www.nz131.com:8443 wss://www.nz131.com:8443 http://localhost:8443 https://www.google-analytics.com https://stats.g.doubleclick.net https://cdn.jsdelivr.net; media-src 'self' https://www.nz131.com blob:; object-src 'none'; frame-src 'self' https://www.youtube.com https://youtube.com https://youtu.be; frame-ancestors 'self';\r\nReferrer-Policy: same-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nSet-Cookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; path=/; secure; HttpOnly; SameSite=Strict\ne1192aefb64683cc97abb83c71057733=bnox; expires=Sun, 02-Nov-2025 16:52:15 GMT; Max-Age=86399; path=/\n2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0; expires=Sun, 02-Nov-2025 16:52:15 GMT; Max-Age=86399; path=/\r\nLast-Modified: Sat, 01 Nov 2025 16:52:16 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3176\r\nKeep-Alive: timeout=3, max=500\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9735,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"9f2c726ef30e6d52b70bea023745daed","sha1":"819af003511929528edf70b7847e2b1583ef432a","sha256":"689318c585a3f3a473eb86f241dbda4964684f7a6909842feeb547cbae863b8d","sha512":"4055aa80dca10dca7dc65c1d0c5fb9e5a2da18a632de6d643dfa5177caafcf4a982467543220e8658018ceaed739e01ada5849af396a84e7402e2399bda175e4","ssdeep":"192:rXMGfCARiphIFBII1UOU/aIIcQivgGMc6A6:rXMGfCARPFBII1URy5cQCrMc6A6","tlshash":"331298a3ad4380151116d4047dbbf20cd1f38457dac6cd64faac96a9afc0ad7886bbc9","first_seen":"2025-11-01T16:51:00.381839Z","last_seen":"2025-11-01T16:51:00.381839Z","times_seen":1,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":119,"dns":79,"connect":15,"send":0,"wait":299,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/jquery-migrate-1.2.1.min.js","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /js/jquery-migrate-1.2.1.min.js HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 31 Oct 2021 21:28:52 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3063\r\nKeep-Alive: timeout=3, max=500\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7199,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-04T09:42:51.411712Z","times_seen":19802,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":28,"dns":1,"connect":16,"send":0,"wait":16,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/wrest.js?ver=197468","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /js/wrest.js?ver=197468 HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 31 Oct 2021 21:28:54 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2838\r\nKeep-Alive: timeout=3, max=500\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10811,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"d0030dab0d69c28bbdf0867f48d342c1","sha1":"299fcf77f0c5eef6373f453d6f39bab5d456c10a","sha256":"8714816861a183f15e8c9c562d20e6c4e235a6cd9cbb3504c4eba3a568f52c5c","sha512":"a7f6bbe4f52d59b7da37d74e9c9e081d0d56d37568de3c31023e75132d18346887844218315fdd8518d39a52ba948b6f3c8ca9cdf3501b84a544ddb8a3c941ee","ssdeep":"192:SGz1IUaH4ZKNWNAsQK25KIOKDfKSUKaDaypKznK7vF4BP9DsUKkxAKocBCKHNKqx:v/w0cTnvBlr","tlshash":"2d222069e8bb28b5ab87143d4afa54996a25d7730408d5407d0dc341cfa0f7212f6bfe","first_seen":"2023-08-02T19:10:55Z","last_seen":"2025-12-22T09:50:18.980634Z","times_seen":39,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":34,"dns":1,"connect":20,"send":0,"wait":17,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/placeholders.min.js","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /js/placeholders.min.js HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 31 Oct 2021 21:28:54 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2250\r\nKeep-Alive: timeout=3, max=497\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5103,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3907), with CRLF line terminators","md5":"7d0203a3f2329c7375e057bcab052149","sha1":"3158adabd1844b531abf5bf9d196a9b08d0e24b9","sha256":"980b7c3657c19191a6eec108682f5d3dcb01c1c30a6ce4d379ab53db82549b13","sha512":"11761a83754d468e84d92aeb318de22e5ac4564780c7c5c51442fe8a6b8c4b9423228fa8ecae2307632611c4f9ada97b582f8aa288f48db19bd22fdb23dc2f25","ssdeep":"96:LeFKvsJcQH3ojWadgRA7C3rMpZtgPrUGvERRjPMvG:Le7cQH3Hadg/3GzavERhPMvG","tlshash":"56b1947e324677731da305e9f8abdc85b870a3f6b50b4c60e0a4e452393cce956b6d48","first_seen":"2023-03-07T01:16:17Z","last_seen":"2026-04-03T18:26:30.754534Z","times_seen":1632,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/apms.js?ver=197468","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /js/apms.js?ver=197468 HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 18 Sep 2025 17:38:37 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 6313\r\nKeep-Alive: timeout=3, max=496\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23572,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, Unicode text, UTF-8 text","md5":"84e5c9208d87109494dc0072989226c3","sha1":"17e780c67f62e7e5665daa2d6d64df62c3c7b430","sha256":"72fd254a4f0c6ee7c9f9f8124bf9c70c3460c72a6e5093d2b096a2d82c9c7462","sha512":"28e301988c1a97bbb920025c79ebdde08ca29417c80408bc11fc528790d2dbfe9265c133fe8e2a69008a45c0c4533e4cf4da6e5f82bb69fcdd95284d00ab08f9","ssdeep":"384:tf0SvLj97DDsW8RXEUHP6wQZTNms6YjCetq88BPXYp:GSzj97DDsWUEUHP6xZF6Yntq87p","tlshash":"95b2a349e7d939a5652275364f8f76446178a0131d4acc147e0c92e82fada3c20bbffd","first_seen":"2025-09-28T09:57:51.36241Z","last_seen":"2025-11-30T21:14:51.367398Z","times_seen":24,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/fonts/custom-font.css","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /fonts/custom-font.css HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 12 Aug 2024 17:48:00 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 137\r\nKeep-Alive: timeout=3, max=499\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":175,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"09e93b40ad5b9c480d842e7ae7a8f442","sha1":"616d386cd1110fc524d6d8b782709eb16a0b273a","sha256":"ff3770fe5d5ed6b1d9f802c2d36524fd1a83a178ff52fae88c89c37917dafa0e","sha512":"c61b8249fa7a0929a66546ac27657ff128313599dbeb2864544aeb2cdcba05f0e7e3191a89bc45cf0ea52eeeb80c93214bafef8dd9eda481cd83ec3a71abb5d4","ssdeep":"","tlshash":"ffc08c50285b6240e6220c0f338f5724682e00832042d8317f242f588ef78a10381f1f","first_seen":"2025-06-25T14:41:58.5132Z","last_seen":"2025-12-22T09:50:18.981825Z","times_seen":34,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/css/mention-highlight.css?v=20251102015216","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /css/mention-highlight.css?v=20251102015216 HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 17 Sep 2025 17:27:08 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 709\r\nKeep-Alive: timeout=3, max=499\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1735,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"28e85aa7b8b16ffb5ed32174e6df2e17","sha1":"ac92af40bfeb4e30d32023f0e33cac0ea5bfd5d7","sha256":"f7057c8db8c023b86d259272c1604352b878d7011612c43fc94f184974d4f8f8","sha512":"5a1061ec35ae26135c6302f43b79cebbad90ef05c0ec864cb0ab7cff733b0fdfbfaa88829296ee0db63645390dc7c0384cfbc678c175d967e25f00382b528854","ssdeep":"","tlshash":"a731ced88bf75b80b87f85574b92e24e5b744ac3a003ca5cba8c69205f016d8c1427d8","first_seen":"2025-09-28T09:57:51.220177Z","last_seen":"2025-12-22T09:50:19.003131Z","times_seen":25,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/mention-highlight.js?v=20251102015216","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /js/mention-highlight.js?v=20251102015216 HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 17 Sep 2025 16:41:47 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2049\r\nKeep-Alive: timeout=3, max=495\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6254,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"86f6b520a31489af84cf285b9f7d850d","sha1":"55be8565adac901f8bc2ac16b735723ed422f6f5","sha256":"3d8674bba230910aa2b1260d2467d9d3b1919b53361302b477a0ff1dd886af79","sha512":"3037bcc89a4036f1b853f904abe9a0ac189e4fad3b987bd414d57a18f0644889e1723822ccea9fa1c3df9635ad99742ef2b4db6d996571ea7014b6ce435a88a4","ssdeep":"192:hs2tErFD9JDLVC9V4FxdLgYt03wtJWh/Ms/CVdv79lb:WtK22p6Xb","tlshash":"c4d15f8820f6013249b3649eafeff0687a30e1937409c550bd9c4f594fe1e2a65d3be9","first_seen":"2025-09-28T09:57:51.149672Z","last_seen":"2025-12-22T09:50:18.977519Z","times_seen":25,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/img/logo_login.png?=6","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /img/logo_login.png?=6 HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 21 Jun 2023 09:47:43 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 19043\r\nKeep-Alive: timeout=3, max=494\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 180, 8-bit/color RGBA, non-interlaced","md5":"2a2afb83130a1a105b13e56a72892163","sha1":"8891815bc61793c6fb789fdb615b2e8aac50b4b0","sha256":"2c059628d4da0539615c20d2fc2d43302204900821a4936ff085874488ec9939","sha512":"30d6e673ddd2f45f9b11214e2f9d782aeaaca05fe9962b80d50017ae95c58545bc5377b09fa2aac3a88914fb2bbb262dcefe7448fee8d170da2dd1835f93d8ab","ssdeep":"384:lIs0d01DWv28UBz2795CTBQKyC3fFedXwhaO+EgfmHQbET2dq7pS:lp0d8WVTCtaC3fUdAhTnwbBdEpS","tlshash":"1682d018a0a5eb91152383226ff1411e4bafd28097a1c5cdb79d8a5fde88a1cdc6325f","first_seen":"2023-08-02T19:10:56Z","last_seen":"2025-12-22T09:50:18.987397Z","times_seen":32,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/favicon-16x16.png","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 08 Jun 2021 01:23:36 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 415\r\nKeep-Alive: timeout=3, max=493\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"57c6c9bf53c986494cd10b50352b9143","sha1":"e930ac76edf207d806232e408957be556477d0e3","sha256":"c1918c26de53dc1a77eb8b7d33d9ff1f9d8132a4a95207668f2e120f9ff6cdd9","sha512":"c49de987230f5c99084e7cb52ad6a6cddb777a4cb9714f68b963fe0752ed5e042733bfd59187455481918c38674611cfd85dee67dca45f7f4e947b30035fca12","ssdeep":"","tlshash":"42e02bae91627cbaed899035861a2113e10a2198d0a8278804c03d6e27ee20aa83a803","first_seen":"2023-08-02T19:10:56Z","last_seen":"2025-12-22T09:50:19.009937Z","times_seen":39,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/css/apms.css?ver=197468","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /css/apms.css?ver=197468 HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 16 Nov 2022 13:26:44 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 11611\r\nKeep-Alive: timeout=3, max=498\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":74120,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"86b09141490243a7f796dfdbca9666ca","sha1":"5683e810bfc829175d7f30f28798205157a1c787","sha256":"43927699ac5c2db4e9aeed2de27486d5b30cc6db4c2ad6b6ef85b8931ab947aa","sha512":"ca756bd7c74c60376051e581c7966a09bfaa4d558210bdeb320e9efb3e7e80dcad07f9e57068da7f2982357ff25a3474d6ccdbdcbf75cfe30fd2d3c8205f5579","ssdeep":"1536:EV7BWGKZ9ho7/LPk2vqmXW7CaCocRz/k7Ugg:/Z9a/RvqmXWagg","tlshash":"3a735523bdc124c9310ae2ccaee9aedae73d5142860ddefe714225acdb8c4dc942f555","first_seen":"2024-12-04T06:59:25.93673Z","last_seen":"2025-12-22T09:50:19.006773Z","times_seen":35,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/lang/korean/lang.js?ver=197468","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /lang/korean/lang.js?ver=197468 HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 30 Mar 2025 14:14:03 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1159\r\nKeep-Alive: timeout=3, max=500\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2957,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"de4900a0956b5c0ff3da64050f99a5f3","sha1":"f320abb6105fc968cf9f24d39bd52a9e695cdbe0","sha256":"0441fe6605bdf1703772a5b6fc4251813ef8312984384b4cc50f636ccd2dee6c","sha512":"ef4e9cc2219d7d911c3aeabcd4203667bbfab9e45f6d4fb93c294dcb4e98f071bdef842dd6742e2a3ea3c910d062b42a1f0de320b0f51fc44d2a3983773604dc","ssdeep":"","tlshash":"dd518af67407069641d7c68f98e0ed8983949302fb2ee0d88f8dedc89c598e155c67ae","first_seen":"2025-06-25T14:41:58.520485Z","last_seen":"2025-12-22T09:50:19.000416Z","times_seen":34,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":29,"dns":1,"connect":21,"send":0,"wait":16,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nz131.com/js/font-awesome/css/font-awesome.min.css","fqdn":"www.nz131.com","domain":"nz131.com","tld":"com"},"ip":{"addr":"93.123.72.200","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nz114.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 14:39:29 GMT","end":"Wed, 28 Jan 2026 14:39:28 GMT"},"fingerprint":{"sha1":"72:BE:05:89:27:E5:84:2A:EE:4D:2A:E5:DC:55:3C:3B:99:03:23:53","sha256":"8C:10:A4:4C:87:C6:BF:E1:E1:A1:39:54:95:E7:A3:2E:CA:98:A6:25:D0:A0:1F:B4:C9:DD:B5:0D:EA:A8:E0:F7"}}},"request":{"raw":"GET /js/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: www.nz131.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=YF-npnkXovoWvvmmfT5lfJy9RgynMiH8RKOZlIIejtc3Lpjl; e1192aefb64683cc97abb83c71057733=bnox; 2a0d2363701f23f8a75028924a3af643=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 01 Nov 2025 16:52:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 17 Sep 2019 09:39:26 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 7053\r\nKeep-Alive: timeout=3, max=499\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-04T09:42:51.594663Z","times_seen":236561,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"www.nz131.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tabler/icons-webfont@latest/tabler-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nz131.com/bbs/view_image.php?bo_table=nz1\u0026fn=www.nz114.com_Vlku2XKt_d357393824d0d11a311380b39d2ce1de621879e4.jpg","date":"2025-11-01T16:50:32.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@tabler/icons-webfont@latest/tabler-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.47.0\r\nx-jsd-version-type: version\r\netag: W/\"31bad-JWlZFV97h69ICfrHgoGy5Zr3pMA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 01 Nov 2025 16:50:32 GMT\r\nage: 21611\r\nx-served-by: cache-fra-etou8220096-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 34372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203693,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65407)","md5":"d83ff27ade5defe8986f80df880e43c1","sha1":"256959155f7b87af4809fac78281b2e59af7a4c0","sha256":"f14b2b4013c344184f8698bd7f7300c9d76fa7088a16c104e038bcfe1ee3085b","sha512":"01857485ad37739afe0b7fd683d53ff871461099d214d9ca4cb7838245f61aea4473ef242298bcb445e94100c3b02ef6111913ace67381e2d61e7f217dcfccc0","ssdeep":"1536:5gkSj0i6N06yvAI+We+MIOxhYGTfcII7qVQ4fUlwql6B8znYSI:CkUZkb+MIOXlvI7Oc/6B8o","tlshash":"47143cb8e54d44d4b736c04beb91b29d6192f238e6910dbdf11f500e2ee2a6506c9f7c","first_seen":"2024-03-03T16:53:43Z","last_seen":"2026-04-04T07:49:46.268855Z","times_seen":130,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":1,"connect":29,"send":0,"wait":30,"receive":12,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}