{"report_id":"4f646b8c-a521-4f1d-b0e7-e69a1a2687d5","version":0,"status":"done","tags":[],"date":"2026-08-31T08:10:38Z","url":{"schema":"http","addr":"dpd.ggzpe.cyou/com","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/#/index","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"title":"DPD Local","dom":{"size":31481,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29025)","md5":"7a586841c90c8bdb2260874e589dd737","sha1":"5654c6f7474487b9b9313839d8c446abff109024","sha256":"5e067c014868038cb1276656dac1ef46c09b40a88f5720b36150b49f9199d954","sha512":"873e24cac9901e5959a3fff092ec2b529fddbed5e359fe931e5abd3afc1c26851e06ee96048db33ddc9006a9fcbc2f5cb05cffc9f9d459437ac8f8f7f2ab507d","ssdeep":"768:dRRb2Ir9B5lepJbKTT7uVf/BXTY/8MGeCree+tlm8/idoloBNT:Q8Hle7eT7ul/BXTY/BGe8eeUI2oBd","tlshash":"fde25235a70510eed16b81c8d224bf5532e7e36bc02880a47eaf06766fc7d61f6129e7","dom_hash":"domhashf7e5c5c8f1d5012a8974906feb32c96e","first_seen":"2026-08-31T08:10:42.839143Z","last_seen":"2026-08-31T08:10:42.839143Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dpd.ggzpe.cyou/com","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T08:10:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"dpd.ggzpe.cyou","ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-22","domain_rank":0,"first_seen":"2026-08-30T22:32:31.367607Z","last_seen":"2026-08-30T22:32:31.367607Z","alert_count":24,"request_count":13,"received_data":1263834,"sent_data":6998,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/DhqmAzot.js","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a1b4c52e6b45ca5bdba668c5b4cf187","sha1":"98950ae12d79ca781a696b3c67e39a11c7e7faa9","sha256":"65273d6f816e11b8e846c3dbeae4fdbeb9c48523951665e9835b33f0087c9915","sha512":"8b206123c7c0a63d9ccd17d44e5b6bcf3845d4306e540b7f7faa6d61c6a221cb33d062e490d4641e722c40afc2ef68c7f16ef79368764dc66a24279c56f25f8f","ssdeep":"3072:PLpSe/aSjhXSSS+SQ2UDPMaWTTLy5x294dRy:1//7j0SdxjMVTHy5xa4a","tlshash":"3b043bc53251b0a253fa15e3407b1007f3396925380d899cb25cfdef6c6a98a61b7f7a","size":183340,"data":"","first_seen":"2026-08-05T07:13:51.96529Z","last_seen":"2026-08-31T12:18:54.746552Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/E8Ho6ETs.js","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5a950181b724cfe0c9c41e59d96f7a","sha1":"98c4b8694dbe285631cdd0ae5496e7553065b212","sha256":"4d54663f07ede37a41652214289ca67f13402ddad24b165f2fc18173e7d4570b","sha512":"c3863ff083b8ab92492ed0f0ac1f8758aa6457f4c2c6f644cc92e7ad37179f1686f5863deb449d7a19d4638d5fb82412c6dc100a2a84473a6569bd58100009bf","ssdeep":"1536:mwhVcjgFk3x6T5m9TATCLTaT4cTJprFZDbn4AJoAT4nNYnaHP9UYhh9bzF4BxJBQ:mwhVigFk3xEm9TAToTaT4cTJRF1n4MoP","tlshash":"7083080d5e01bdbe204b272934fb10e7346d2d97e056dbf089f18d785b1cea8a1dea94","size":84945,"data":"","first_seen":"2026-08-30T09:26:57.99213Z","last_seen":"2026-08-31T12:18:54.748958Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/DQdO6SN9.js","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60e31f1c280c649ef902a76aaf94b175","sha1":"7034589d5ca7ab40262f5914f7c7d04b8af5c1ce","sha256":"8345cd86d15339dfc488a22f0533cc1b2d16553ea37098cae43aec8fcd5c112e","sha512":"164439754dff313c1b22ff49815d43dd33324a828c2ff851f666cdb634ef98bada3dc4417c04cc954e38aed8b46d1dcf0733a466788dad036d8a18936b528962","ssdeep":"6144:opw8G9FXkYxS8NM0r0O0Nrkb/Ew1a+XA9DPnYjHwLd+A7xAdSErehHWODhg7J49Z:op2kYx3B3Y35AUvoQTYK+9u","tlshash":"f1c418d22b4ff2ca016208a7439b30c6b10e7bab380ce5057ff4f5941ea5769796e934","size":554094,"data":"","first_seen":"2026-08-30T09:26:57.986512Z","last_seen":"2026-08-31T12:18:54.747225Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:10:06.612Z","timestamp":1788163806612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com/ HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:06 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb; Path=/; Expires=Mon, 31-Aug-2026 08:20:06 GMT; Max-Age=600\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmOKk0JJIem937dyM9bjygTBnGQhKKmrM9wtW5K4Jfyr11WDmgQHHiShwl%2FaYJzsBe02O%2FSPxWz4GwY6OyOdNy%2BjvkPKakFdRm%2B1aN1JnuTFYFQT0zKVtYQhLOvLe9kBnQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a8e8f5c8ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_vt","value":"50ec6d93-337c-4acc-a39c-9a1f5b27b5bb","quoted":false,"path":"/","expires":"2026-08-31T08:20:06Z","raw_expires":"Mon, 31-Aug-2026 08:20:06 GMT","max_age":600,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb; Path=/; Expires=Mon, 31-Aug-2026 08:20:06 GMT; Max-Age=600"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2386,"size_decoded":1738,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"8bd131267af0372651771a75eb4ced76","sha1":"5e36a2f79023423e281a5f05662b2962f58ddc01","sha256":"b7fbe1e796e21d2e51bbd8c9296eefac4c393c05a33de90b2b00964b4ae04916","sha512":"ffdc4daca62dad0b621d6381341efcdfe09d933c75e1b982ff27abcf4bfeef30d9e8a01c45ca4f4aed8877d29d85a0dc8d3c9cdee82864504721e1815231fe86","ssdeep":"","tlshash":"8b41259205930c16132343a2dfd6a201d2f1d603c14ffc4479fd10ae4fa4a8599e7f38","first_seen":"2026-08-30T09:26:57.975241Z","last_seen":"2026-08-31T12:18:54.745166Z","times_seen":19,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/DhqmAzot.js","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.ggzpe.cyou/com/","date":"2026-08-31T08:10:07.036Z","timestamp":1788163807036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com/assets/DhqmAzot.js HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ggzpe.cyou/com/\r\nCookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:07 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 31 Aug 2026 08:10:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoCTF1piCoZxup7lVKr8Hpe4j5mfcNg%2Bo7u8LTYXwen5tN60UU%2FQviaCUlmAfkjkxXM5mn3%2BndFm9LqZNYAwhg5W9FIXCGfl9BYXk5%2F37p0sH3Y2NRYdc7OpHmMqhvq9Lw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a8e91fce2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183340,"size_decoded":67206,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2a1b4c52e6b45ca5bdba668c5b4cf187","sha1":"98950ae12d79ca781a696b3c67e39a11c7e7faa9","sha256":"65273d6f816e11b8e846c3dbeae4fdbeb9c48523951665e9835b33f0087c9915","sha512":"8b206123c7c0a63d9ccd17d44e5b6bcf3845d4306e540b7f7faa6d61c6a221cb33d062e490d4641e722c40afc2ef68c7f16ef79368764dc66a24279c56f25f8f","ssdeep":"3072:PLpSe/aSjhXSSS+SQ2UDPMaWTTLy5x294dRy:1//7j0SdxjMVTHy5xa4a","tlshash":"3b043bc53251b0a253fa15e3407b1007f3396925380d899cb25cfdef6c6a98a61b7f7a","first_seen":"2026-08-05T07:13:51.96529Z","last_seen":"2026-08-31T12:18:54.746552Z","times_seen":28,"resource_available":true,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":364,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/Dw2Q-3X1.css","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dpd.ggzpe.cyou/com/","date":"2026-08-31T08:10:07.039Z","timestamp":1788163807039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com/assets/Dw2Q-3X1.css HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ggzpe.cyou/com/\r\nCookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:07 GMT\r\ncontent-type: text/css;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 08:10:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGqm3HyyxFZOR4c%2BH7T5VrHqvPxXiDNlONLcpBSahe9Wi%2BzwnuF%2FLabfKRjSmjPfAkIkNqEr6AAdfQpcF5Yws%2FnKqJHpPT0SA8IYYfugRyNwOKqmfOLp3t92b%2B6DO%2FZIbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33a8e91fce5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8208\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60381,"size_decoded":8947,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (60380)","md5":"b68d450f564fa4095b39a4b7c57a0978","sha1":"58a3ea9eb890327d9c3a2e567eb0795ec5fbd376","sha256":"6a9cf39ffa1d41a393da1e5030b9b46c98bd11c4fe778081710dc6fbbbd0ed10","sha512":"0589959a1c2d7ef261fbc90d12ba4daa951e6bc1a786d0b33170561e739dd855252f9861f8cf1ff66e19ad2d8a7eeeb9125a7b471c5bf6f6cb87c3a68e2cac15","ssdeep":"768:1/fGmmVAL0uVYXEAFAtCbRgVaXp9jC8FpKdDm0pC59PwL3yVe0FpJvY:QOAuVYXt/tggP7a","tlshash":"de439561362c2038f97bd955b8d09bae3109f313d5235aeeee65a535cc870933b3269c","first_seen":"2026-08-22T02:48:44.572728Z","last_seen":"2026-08-31T12:18:54.74781Z","times_seen":27,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/BOnPfxxG.woff","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dpd.ggzpe.cyou/com/","date":"2026-08-31T08:10:08.791Z","timestamp":1788163808791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com/assets/BOnPfxxG.woff HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ggzpe.cyou/com/assets/Ysl5gP_N.css\r\nCookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:09 GMT\r\ncontent-type: application/octet-stream;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=604H%2FrFBaYQiRyUqLZcpxxQtfRGzSYwCzT2JiXVT9%2BE4ap18i8H4N%2FcGQzOSK4QozAkTfRjgqTXYqTBt0CuEuVglWh2NJScd9KTJVozhl7jjthmNjY0QQ7Stigw3lFbhag%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nlast-modified: Mon, 31 Aug 2026 08:10:09 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a8e9cfe63a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60781,"size_decoded":61462,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format, TrueType, length 60781, version 1.0","md5":"20398ebf2986259c88014178d7044844","sha1":"02422f7f86e44268579b2b3694ca72eaaa8a301a","sha256":"9e462606602d426b676f2b6f9c0b6629b02f91204214898f7d4a56749c4e00d0","sha512":"e353fbce67c1e46ecfc04c74e56d06f8916149d071700fee9cce2976987f2c5a5878dcd434590beeb02c417e9da0379696695f49ac9561ac423eb3d592438133","ssdeep":"1536:/mNyBIPLRqPeSDzYi5G0ChYnizF7Bz/bad7bSByIdPSE9:+VzRqbHT000iwz/bO7bjo9","tlshash":"3053026d635f1330ad5cb62770e8ea782d16fdbc61c2e9020351b2ca0e7a265e72d35d","first_seen":"2023-04-21T20:51:14Z","last_seen":"2026-08-31T12:18:54.749552Z","times_seen":2116,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/fS-WSyLf.jpg","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.ggzpe.cyou/com/","date":"2026-08-31T08:10:08.796Z","timestamp":1788163808796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com/assets/fS-WSyLf.jpg HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ggzpe.cyou/com/\r\nCookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:09 GMT\r\ncontent-type: image/jpeg;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nlast-modified: Mon, 31 Aug 2026 08:10:09 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGoEBl0vIfR%2FndhExIuNmZjqvFIImGdbOjL%2BtvHaA%2Fwl46W1O9eYEtuDVzgJj0Wc4NU%2BKIaxZn%2F4NmdtTzFzz0Kw%2Bsvn%2BT4OkUg7KLoYGTer0zjOG9qzI%2BDOe070hIehwg%3D%3D\"}]}\r\ncf-ray: a33a8e9cfe67a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134719,"size_decoded":135370,"mime_type":"image/jpeg; charset=utf-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x853, components 3","md5":"c9366d3c96a7e0b114309b0c71cf2ba0","sha1":"582b2fea1bd70cc908b82e33d07ffbafeb7a303a","sha256":"7e166c9fb31e3358ced873ed61e59da1e2e849a5193e27d5c4dab3a5a8ed1e44","sha512":"77d145beed6247975a6e419bf3606e9336fb06f22e552546b01ef82e34e5b7fc278113c49848d3f25148bf2fb772b4fbb4a381d4d0faff177727e61a78473909","ssdeep":"3072:JRiYiMREGUNgNtLewB/jxzWxE4Zn9T/JVIt6XnuG4D2zHCOr:aYiMqGAsCIFzWxE+9Nytkr","tlshash":"0bd312e45ea45412f401ee7a4cf05943c2423ee77bc5da48b38b3f10baa41619eeb8d7","first_seen":"2026-08-22T02:48:44.583554Z","last_seen":"2026-08-31T12:18:54.750854Z","times_seen":27,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":513,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:10:06.142Z","timestamp":1788163806142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:06 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=0,i\r\nlocation: /com/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwmUtS0tFCFjBB9%2F1KM9VF3gTa4%2Bkivs4sPImeomZ%2BJ1VNZIMzStJ2c0rqU3Ghnb2VFYz5L%2F07crR7zFxoQIJ%2F4yBRPLaShqib%2BI0ifLvX17lRPQ31rCeIyx8YU7H4ax7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a8e8d1c32a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":94,"connect":10,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/E8Ho6ETs.js","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.ggzpe.cyou/com/","date":"2026-08-31T08:10:07.034Z","timestamp":1788163807034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com/assets/E8Ho6ETs.js HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ggzpe.cyou/com/\r\nCookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:07 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 08:10:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gq4BWBITZX9mfApJOTXB61Z%2FMzRN9mbPDmRwJShCf8sfY5S2UCiPUgF6QWtI98%2BxxGU8l3X1Gij%2B6BOPARCQxZ4hIUn8jkmTxFZtF9a9l18k7C6zK2gEy35PkP0Yd%2FjGQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33a8e91fce0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84945,"size_decoded":30478,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65523), with no line terminators","md5":"dc5a950181b724cfe0c9c41e59d96f7a","sha1":"98c4b8694dbe285631cdd0ae5496e7553065b212","sha256":"4d54663f07ede37a41652214289ca67f13402ddad24b165f2fc18173e7d4570b","sha512":"c3863ff083b8ab92492ed0f0ac1f8758aa6457f4c2c6f644cc92e7ad37179f1686f5863deb449d7a19d4638d5fb82412c6dc100a2a84473a6569bd58100009bf","ssdeep":"1536:mwhVcjgFk3x6T5m9TATCLTaT4cTJprFZDbn4AJoAT4nNYnaHP9UYhh9bzF4BxJBQ:mwhVigFk3xEm9TAToTaT4cTJRF1n4MoP","tlshash":"7083080d5e01bdbe204b272934fb10e7346d2d97e056dbf089f18d785b1cea8a1dea94","first_seen":"2026-08-30T09:26:57.99213Z","last_seen":"2026-08-31T12:18:54.748958Z","times_seen":19,"resource_available":true,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/DQdO6SN9.js","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.ggzpe.cyou/com/","date":"2026-08-31T08:10:07.037Z","timestamp":1788163807037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com/assets/DQdO6SN9.js HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ggzpe.cyou/com/\r\nCookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:07 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 31 Aug 2026 08:10:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xuhI1iDp05drTRRh5uhWz8JJgioIqhAfBxOsiCHPOiNudTknbn3qkli%2Bo3LDjhYrx%2BQs3Z5zDC2yUYH6o9osDl1XNyAzqaSKwu9XlT2sjeEhaa%2BWl3meeLEfCjFGNlFJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a8e91fce3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554094,"size_decoded":183556,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"60e31f1c280c649ef902a76aaf94b175","sha1":"7034589d5ca7ab40262f5914f7c7d04b8af5c1ce","sha256":"8345cd86d15339dfc488a22f0533cc1b2d16553ea37098cae43aec8fcd5c112e","sha512":"164439754dff313c1b22ff49815d43dd33324a828c2ff851f666cdb634ef98bada3dc4417c04cc954e38aed8b46d1dcf0733a466788dad036d8a18936b528962","ssdeep":"6144:opw8G9FXkYxS8NM0r0O0Nrkb/Ew1a+XA9DPnYjHwLd+A7xAdSErehHWODhg7J49Z:op2kYx3B3Y35AUvoQTYK+9u","tlshash":"f1c418d22b4ff2ca016208a7439b30c6b10e7bab380ce5057ff4f5941ea5769796e934","first_seen":"2026-08-30T09:26:57.986512Z","last_seen":"2026-08-31T12:18:54.747225Z","times_seen":19,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":495,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/D6WjOvV9.png","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.ggzpe.cyou/com/","date":"2026-08-31T08:10:07.890Z","timestamp":1788163807890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com/assets/D6WjOvV9.png HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ggzpe.cyou/com/\r\nCookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:08 GMT\r\ncontent-type: image/png;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 31 Aug 2026 08:10:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pKy2DlUAcIjc0aSUYRjwLfW4GaJjOihoe9BJvGWeMzHXOB%2BRkWOERhbdgqKfKbjybUSONH1CypWC5jKqCnFZjIlNp7W78WFWYqDCoh2cI2y7zj133PhAsyBd0NHL3YhBA%3D%3D\"}]}\r\ncf-ray: a33a8e975dbaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20781,"size_decoded":21420,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 141 x 67, 8-bit/color RGBA, non-interlaced","md5":"7fd40f3f20acbd2fdc7f81a77534ad38","sha1":"d55bfd5300bb1cb29316481db93002ed52dd00df","sha256":"6dcfd3f9716c0b3a5305ba18bcf64214c0b19b950f154e3c7a32bb51833a4ed6","sha512":"4eb176028f309ec5d3b608e15518add59fb854d0c69701973bdf9a2018c1628c8cd254729c48279db23937f1d2fc10d4bedbe29ebb189723757fca4863f2ef44","ssdeep":"192:vSNktOMOO0JLsMJ7bH+xwCOsb/w2T3X5erxHsk+m4:autOrNPexss42T3cdCm4","tlshash":"00926c60feb0319550cac2700dd97c188852aec788d28d07baec5a152f54fbc6e8f2e7","first_seen":"2025-10-14T22:06:20.884098Z","last_seen":"2026-08-31T12:18:54.744476Z","times_seen":840,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":384,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/OwDWr5DG.woff","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dpd.ggzpe.cyou/com/","date":"2026-08-31T08:10:08.793Z","timestamp":1788163808793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com/assets/OwDWr5DG.woff HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ggzpe.cyou/com/assets/Ysl5gP_N.css\r\nCookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:09 GMT\r\ncontent-type: application/octet-stream;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXihamqCrOUr7pfZuto19Pc7MMP8SpZpSn2ao2QzZYIK7JKOhYPK2P2PyPmBusMViJOQaQGJ3r0nETtI8r9VuwOlYCdx%2F5uh%2FAgCqFKEFimoSiPow79cCa7En4q1I1OANw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nlast-modified: Mon, 31 Aug 2026 08:10:09 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a8e9cfe66a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60042,"size_decoded":60721,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format, TrueType, length 60042, version 1.0","md5":"32319d6149e2659c974fef61dfd5cc42","sha1":"e2aedccccdbad3f63b14e27941c59e7ba533cc51","sha256":"c99d0b5a290e48d4e4cbb86c29dd12436f465696702a81ded130a411f1e98cd3","sha512":"93a8d50361921549721c1313a53b122fd14fa7470c801bb1a785a72d0c022da4db26b650eb776ce0f9a2e4971363efc84095f0a8a30e57751d9a580454295e9a","ssdeep":"1536:yqdSnqzzEYachE4HiGuwH9wxpzLDFV6aP:yGKch0GFH9AxDH6G","tlshash":"7d4302dad28b50059c2ed4b12acdf4d8fe0516f58cdd75688eb4d1a823efddd9949030","first_seen":"2023-04-21T20:51:14Z","last_seen":"2026-08-31T12:18:54.745901Z","times_seen":2129,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/Ysl5gP_N.css","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dpd.ggzpe.cyou/com/","date":"2026-08-31T08:10:07.040Z","timestamp":1788163807040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com/assets/Ysl5gP_N.css HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ggzpe.cyou/com/\r\nCookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:07 GMT\r\ncontent-type: text/css;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 08:10:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dl58WWpaeJ32tVzykbcBVyThS%2Bu91q%2FsoE11yolvdy4IOIer6y6vrIU%2BpEaSoNBnF9g7Cf1wPng3R%2FNXFVFZVKGUIbE50w%2FNYwSsx%2FeKRa9LujkGzLDCG3fjbECUEyzv7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33a8e920ce9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11921\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72646,"size_decoded":12661,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"24bbaa2d9a54ac50885af44427e3f442","sha1":"f8d69b5393ba572ccec98e09d1673c2bd0037f25","sha256":"d625a8a7223f626b8f0ed13fd8d9c3c4f21f0b29555ee1412c0459fb3ead42ba","sha512":"4692960f383cefe5e8c1b2ddfc43fcb24ac2ff16099bd2edbebd0ef881e05a37412b80b1389f352f098b5965be45d4033e591d7dca7fa1c2175f26746bbecb87","ssdeep":"768:rltO/xR1ySZjKKl1Qq5cZ+lMiRhONG1dJkG34mqWPlz/hBhcaa+V2:rlg/Hll1Qq5cZ+M+AG1f3IWPlz8","tlshash":"0b63c7b9775c2014f87bc99716e466cd01246326f113439cea27ba358ecf6933e72ad8","first_seen":"2026-08-30T09:26:57.979502Z","last_seen":"2026-08-31T12:18:54.748388Z","times_seen":19,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dpd.ggzpe.cyou/console/?uuid=0649cce3-4e73-4e68-a595-e1223d300bd9\u0026shopHost=\u0026EIO=4\u0026transport=websocket","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dpd.ggzpe.cyou/com/","date":"2026-08-31T08:10:08.517Z","timestamp":1788163808517,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /console/?uuid=0649cce3-4e73-4e68-a595-e1223d300bd9\u0026shopHost=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dpd.ggzpe.cyou\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0ksK2+eKRMqydHq3C/KU2Q==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 31 Aug 2026 08:10:08 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nupgrade: websocket\r\nsec-websocket-accept: 2eWTsRXIbSCBxv5vE7o4fqFM/Pk=\r\nsec-websocket-extensions: permessage-deflate\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZd1PwXQO0kr9kpwUNoxkNxGWlg%2B8S%2FLMUSmR2yAlZoKnMc0Oxd8IXAFqgsdyE0e4A4sEDIWW%2BIerEJyE3hjD%2F%2Fq4qb%2Bp6AkPgl0n5rDWvlu9Zq%2F9lMlBs8FJ6EqbsQcPA%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a33a8e9b5d4bb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":651,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":10,"connect":11,"send":0,"wait":386,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ggzpe.cyou/com/assets/D6WjOvV9.png","fqdn":"dpd.ggzpe.cyou","domain":"ggzpe.cyou","tld":"cyou"},"ip":{"addr":"172.67.217.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.ggzpe.cyou/com/","date":"2026-08-31T08:10:08.788Z","timestamp":1788163808788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggzpe.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:21:25 GMT","end":"Fri, 27 Nov 2026 12:20:03 GMT"},"fingerprint":{"sha1":"D9:8B:51:89:49:EF:68:64:54:52:D3:D7:16:C5:E8:FF:7C:D9:EF:B7","sha256":"5B:55:A4:47:16:5B:35:CD:69:27:B1:DE:03:A6:8D:EC:49:57:CF:FF:61:54:9B:BE:C5:7B:AF:A5:D5:12:10:2B"}}},"request":{"raw":"GET /com/assets/D6WjOvV9.png HTTP/1.1\r\nHost: dpd.ggzpe.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ggzpe.cyou/com/\r\nCookie: _vt=50ec6d93-337c-4acc-a39c-9a1f5b27b5bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:10:08 GMT\r\ncontent-type: image/png;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nage: 0\r\nlast-modified: Mon, 31 Aug 2026 08:10:08 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86rcQwOjBOQZ22EATTw07BvzpaOtPvbnF7dY%2F5i7l%2BUjTz7vTxitILxdzUeRB3RbNoT%2BDsggEvZbOZiDVrTJZ4XnO9JUNAfOA%2BRycehNuURxambYl3lIbfWVyPKPpD9PDw%3D%3D\"}]}\r\ncf-ray: a33a8e9cee61a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20781,"size_decoded":21427,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 141 x 67, 8-bit/color RGBA, non-interlaced","md5":"7fd40f3f20acbd2fdc7f81a77534ad38","sha1":"d55bfd5300bb1cb29316481db93002ed52dd00df","sha256":"6dcfd3f9716c0b3a5305ba18bcf64214c0b19b950f154e3c7a32bb51833a4ed6","sha512":"4eb176028f309ec5d3b608e15518add59fb854d0c69701973bdf9a2018c1628c8cd254729c48279db23937f1d2fc10d4bedbe29ebb189723757fca4863f2ef44","ssdeep":"192:vSNktOMOO0JLsMJ7bH+xwCOsb/w2T3X5erxHsk+m4:autOrNPexss42T3cdCm4","tlshash":"00926c60feb0319550cac2700dd97c188852aec788d28d07baec5a152f54fbc6e8f2e7","first_seen":"2025-10-14T22:06:20.884098Z","last_seen":"2026-08-31T12:18:54.744476Z","times_seen":840,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.ggzpe.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ggzpe.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}