{"report_id":"56000041-47c7-4208-84c3-f761d26f2e35","version":6,"status":"done","tags":[],"date":"2026-02-14T08:15:03Z","url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"172.67.206.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"title":"Розыгрыш призов","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"172.67.206.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T08:15:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":8,"received_data":346480,"sent_data":4324,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":9481,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ncwgl.cfd","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-20","domain_rank":0,"first_seen":"2026-02-13T11:15:13.28865Z","last_seen":"2026-02-13T11:15:13.28865Z","alert_count":0,"request_count":57,"received_data":2079431,"sent_data":27730,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e36f64d739061b7285fd7a24d24b5aea","sha1":"7929f82616de3f8a82c1b0395fd562b1745f2c25","sha256":"6b9c7e1d5ad922a39de436c6d3126603438bd73108571b93b0445c5898218aa5","sha512":"49c92edee1aefd2fe5681e63d6623649f4b18869a5cb175bbad8bcef3e8762f361f8beb8398bf05ecc8b186c899c70259998c4a6ebe3fc604c7ce6d07f6c4f7d","ssdeep":"","tlshash":"47c08c14f92222348b32c87a323b6d096a7234c684000064322bc19c0b8e02d473aa1d","size":159,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-05-23T14:35:05.751967Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e36f64d739061b7285fd7a24d24b5aea","sha1":"7929f82616de3f8a82c1b0395fd562b1745f2c25","sha256":"6b9c7e1d5ad922a39de436c6d3126603438bd73108571b93b0445c5898218aa5","sha512":"49c92edee1aefd2fe5681e63d6623649f4b18869a5cb175bbad8bcef3e8762f361f8beb8398bf05ecc8b186c899c70259998c4a6ebe3fc604c7ce6d07f6c4f7d","ssdeep":"","tlshash":"47c08c14f92222348b32c87a323b6d096a7234c684000064322bc19c0b8e02d473aa1d","size":159,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-05-23T14:35:05.751967Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7debcfe9e19320037cd20ececa85ac4c","sha1":"3cb07f4606a07826065d5ec216106e52bfe9a38a","sha256":"9e63a260ac89aba12c8e8d4ef12f0afe5d4af0cf90b35aba9c3c377317ad8318","sha512":"1fb23d6a2f7a7a42867185451e2abb01c5a51f63045a31f3801a5109d4b556c8b0ec6d6657daea046bdc3417d373467f17fe5f78f5ca10ad43c89b4100867448","ssdeep":"192:+h413co86r/LpyoKHBDaI6EjJZXpMwt1LlDuf2I0QO+1W5LYu1sS8/ji9J6vBhR2:+C1o8zDIdIUXpvnP/fD8/bM/skH2CqA","tlshash":"3d82dc89bad304799727a93a8f1f4600a77e5943210cc945b81ca398bf4563943fefe9","size":18492,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-06-02T14:45:49.505377Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e36f64d739061b7285fd7a24d24b5aea","sha1":"7929f82616de3f8a82c1b0395fd562b1745f2c25","sha256":"6b9c7e1d5ad922a39de436c6d3126603438bd73108571b93b0445c5898218aa5","sha512":"49c92edee1aefd2fe5681e63d6623649f4b18869a5cb175bbad8bcef3e8762f361f8beb8398bf05ecc8b186c899c70259998c4a6ebe3fc604c7ce6d07f6c4f7d","ssdeep":"","tlshash":"47c08c14f92222348b32c87a323b6d096a7234c684000064322bc19c0b8e02d473aa1d","size":159,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-05-23T14:35:05.751967Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec7f615a40fbfafd3a8d0ffc0efb3e8a","sha1":"cb11ec1007328b2ff65e1b7aaff864e5826d0741","sha256":"593b9d3d3219ac5dc82ba574d0f96fc6a5c216f6238ccef4db809b9daf413781","sha512":"4d18659af2f6efabd1709fd380520a55ff245eceaa45028cead472c292bda930207ba31865bc6ed83f55c5a07f8d404c2146f0182496969101e96fc15a5a9ed2","ssdeep":"","tlshash":"c26000000f30c00c3003cc30f30000000c30300333003000c00c00cc00c00c3003300f","size":16,"data":"","first_seen":"2023-03-13T02:46:47Z","last_seen":"2026-02-14T08:15:07.66313Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/js/lottie-player.js","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66cf0fd61268474bae61cba169dd320e","sha1":"cce70f6b832321841133a5ebad09fadce7412d47","sha256":"4de3fa56fb32389cae36f15738825bbf1d3f73412fb0c0eccb968d824f2b4f8d","sha512":"399ddd81cc4e9eb14e619a119dca9d969273b79b8ef4c1d5eabc84e9e7a621d5504936170c7d0c795ba650fc1b0ca1ff29765a882fb22c701ee5087278c94c39","ssdeep":"6144:a4oQYPIJgY/btDQ3PSIoPabTzf/W8tpgsQ5cDo4D1:SPIJCh+p5c3x","tlshash":"6d8419597254743905c54069803f090bf636292e246ac09cb76cf4ffa8bde8d32beb79","size":381932,"data":"","first_seen":"2025-01-20T03:02:36.911211Z","last_seen":"2026-02-14T08:15:07.643835Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e36f64d739061b7285fd7a24d24b5aea","sha1":"7929f82616de3f8a82c1b0395fd562b1745f2c25","sha256":"6b9c7e1d5ad922a39de436c6d3126603438bd73108571b93b0445c5898218aa5","sha512":"49c92edee1aefd2fe5681e63d6623649f4b18869a5cb175bbad8bcef3e8762f361f8beb8398bf05ecc8b186c899c70259998c4a6ebe3fc604c7ce6d07f6c4f7d","ssdeep":"","tlshash":"47c08c14f92222348b32c87a323b6d096a7234c684000064322bc19c0b8e02d473aa1d","size":159,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-05-23T14:35:05.751967Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e36f64d739061b7285fd7a24d24b5aea","sha1":"7929f82616de3f8a82c1b0395fd562b1745f2c25","sha256":"6b9c7e1d5ad922a39de436c6d3126603438bd73108571b93b0445c5898218aa5","sha512":"49c92edee1aefd2fe5681e63d6623649f4b18869a5cb175bbad8bcef3e8762f361f8beb8398bf05ecc8b186c899c70259998c4a6ebe3fc604c7ce6d07f6c4f7d","ssdeep":"","tlshash":"47c08c14f92222348b32c87a323b6d096a7234c684000064322bc19c0b8e02d473aa1d","size":159,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-05-23T14:35:05.751967Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/js/jquery-3.3.1.min.js","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78683430ce9217a8149dfa67d6876b97","sha1":"0c8c623b575da80dba9759f4143602993afe32ec","sha256":"ed650371d2e0e1f53b0979594dcc8b0788749463cce9bd8e168415420ecf84c0","sha512":"a9b7d9187287c91a6c7051b09d55b96051fca8fc7f8f35dc37f76b27a5b8198be205cbb94763836913aef7407303a16e70ca5547398487e4e21e353228c67a59","ssdeep":"1536:+LiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:qkn6x2xe9NK6nC69","tlshash":"c38309dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86842,"data":"","first_seen":"2023-03-07T12:24:17Z","last_seen":"2026-04-09T20:38:36.770553Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7debcfe9e19320037cd20ececa85ac4c","sha1":"3cb07f4606a07826065d5ec216106e52bfe9a38a","sha256":"9e63a260ac89aba12c8e8d4ef12f0afe5d4af0cf90b35aba9c3c377317ad8318","sha512":"1fb23d6a2f7a7a42867185451e2abb01c5a51f63045a31f3801a5109d4b556c8b0ec6d6657daea046bdc3417d373467f17fe5f78f5ca10ad43c89b4100867448","ssdeep":"192:+h413co86r/LpyoKHBDaI6EjJZXpMwt1LlDuf2I0QO+1W5LYu1sS8/ji9J6vBhR2:+C1o8zDIdIUXpvnP/fD8/bM/skH2CqA","tlshash":"3d82dc89bad304799727a93a8f1f4600a77e5943210cc945b81ca398bf4563943fefe9","size":18492,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-06-02T14:45:49.505377Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e36f64d739061b7285fd7a24d24b5aea","sha1":"7929f82616de3f8a82c1b0395fd562b1745f2c25","sha256":"6b9c7e1d5ad922a39de436c6d3126603438bd73108571b93b0445c5898218aa5","sha512":"49c92edee1aefd2fe5681e63d6623649f4b18869a5cb175bbad8bcef3e8762f361f8beb8398bf05ecc8b186c899c70259998c4a6ebe3fc604c7ce6d07f6c4f7d","ssdeep":"","tlshash":"47c08c14f92222348b32c87a323b6d096a7234c684000064322bc19c0b8e02d473aa1d","size":159,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-05-23T14:35:05.751967Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/js/app.js","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbbaf6d9585f9b156bd3776b19e1c5db","sha1":"7ee00cfb16d3badb9ccf02f550e8fb18188e632e","sha256":"9ff0ecfa1cfcd8eb3b0ae895937f5108ac85108b7a211a114b772930a150c98d","sha512":"9c95d64ca27e7b2048978f012ba4962c11d6a7a4d0c29e01569ee8aad86bee60b651e1aad78d06353dcef7ce5da38c2f8541fc55556caf0682fed6356c828126","ssdeep":"1536:XMLXTBGJTNeKCrwXylxUoxoYWkvu6n8tjLRjCorksEYxRr9B:8Lti0dAy9P8/jVjCgksEYVB","tlshash":"59437b61069e649a0006f117e8097a0d6de744ffbf5e67b629681c7f3ee3038c67862d","size":59933,"data":"","first_seen":"2025-01-26T04:47:27.734862Z","last_seen":"2026-02-14T08:15:07.663774Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7debcfe9e19320037cd20ececa85ac4c","sha1":"3cb07f4606a07826065d5ec216106e52bfe9a38a","sha256":"9e63a260ac89aba12c8e8d4ef12f0afe5d4af0cf90b35aba9c3c377317ad8318","sha512":"1fb23d6a2f7a7a42867185451e2abb01c5a51f63045a31f3801a5109d4b556c8b0ec6d6657daea046bdc3417d373467f17fe5f78f5ca10ad43c89b4100867448","ssdeep":"192:+h413co86r/LpyoKHBDaI6EjJZXpMwt1LlDuf2I0QO+1W5LYu1sS8/ji9J6vBhR2:+C1o8zDIdIUXpvnP/fD8/bM/skH2CqA","tlshash":"3d82dc89bad304799727a93a8f1f4600a77e5943210cc945b81ca398bf4563943fefe9","size":18492,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-06-02T14:45:49.505377Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e36f64d739061b7285fd7a24d24b5aea","sha1":"7929f82616de3f8a82c1b0395fd562b1745f2c25","sha256":"6b9c7e1d5ad922a39de436c6d3126603438bd73108571b93b0445c5898218aa5","sha512":"49c92edee1aefd2fe5681e63d6623649f4b18869a5cb175bbad8bcef3e8762f361f8beb8398bf05ecc8b186c899c70259998c4a6ebe3fc604c7ce6d07f6c4f7d","ssdeep":"","tlshash":"47c08c14f92222348b32c87a323b6d096a7234c684000064322bc19c0b8e02d473aa1d","size":159,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-05-23T14:35:05.751967Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7debcfe9e19320037cd20ececa85ac4c","sha1":"3cb07f4606a07826065d5ec216106e52bfe9a38a","sha256":"9e63a260ac89aba12c8e8d4ef12f0afe5d4af0cf90b35aba9c3c377317ad8318","sha512":"1fb23d6a2f7a7a42867185451e2abb01c5a51f63045a31f3801a5109d4b556c8b0ec6d6657daea046bdc3417d373467f17fe5f78f5ca10ad43c89b4100867448","ssdeep":"192:+h413co86r/LpyoKHBDaI6EjJZXpMwt1LlDuf2I0QO+1W5LYu1sS8/ji9J6vBhR2:+C1o8zDIdIUXpvnP/fD8/bM/skH2CqA","tlshash":"3d82dc89bad304799727a93a8f1f4600a77e5943210cc945b81ca398bf4563943fefe9","size":18492,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-06-02T14:45:49.505377Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e36f64d739061b7285fd7a24d24b5aea","sha1":"7929f82616de3f8a82c1b0395fd562b1745f2c25","sha256":"6b9c7e1d5ad922a39de436c6d3126603438bd73108571b93b0445c5898218aa5","sha512":"49c92edee1aefd2fe5681e63d6623649f4b18869a5cb175bbad8bcef3e8762f361f8beb8398bf05ecc8b186c899c70259998c4a6ebe3fc604c7ce6d07f6c4f7d","ssdeep":"","tlshash":"47c08c14f92222348b32c87a323b6d096a7234c684000064322bc19c0b8e02d473aa1d","size":159,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-05-23T14:35:05.751967Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7debcfe9e19320037cd20ececa85ac4c","sha1":"3cb07f4606a07826065d5ec216106e52bfe9a38a","sha256":"9e63a260ac89aba12c8e8d4ef12f0afe5d4af0cf90b35aba9c3c377317ad8318","sha512":"1fb23d6a2f7a7a42867185451e2abb01c5a51f63045a31f3801a5109d4b556c8b0ec6d6657daea046bdc3417d373467f17fe5f78f5ca10ad43c89b4100867448","ssdeep":"192:+h413co86r/LpyoKHBDaI6EjJZXpMwt1LlDuf2I0QO+1W5LYu1sS8/ji9J6vBhR2:+C1o8zDIdIUXpvnP/fD8/bM/skH2CqA","tlshash":"3d82dc89bad304799727a93a8f1f4600a77e5943210cc945b81ca398bf4563943fefe9","size":18492,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-06-02T14:45:49.505377Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/js/app.min.js?_v=54854852266069","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"942f433526441a8fc85247d12a94fab2","sha1":"a9ba888f144bce0965e8ea75342bf73f96550805","sha256":"8931ad33707325b785a96e31aa2f5816216360f4189b363b953a50fbffecbca6","sha512":"9f0c0487713575b168ed64a12be6fd13575d688f1d930c9b498bfdeabd064d6315fe72b3b26c153d5b8eaa3997aaa6dc6d3749603b090cd71328b6d335f90937","ssdeep":"384:48piPaYNuCyPAmiVwqMoUfN+MkRFPn4N33A+7U3v8OBg:48piyi6wxA+MkLw3wP3vFBg","tlshash":"24a273052e812e592b879fffb633a0e0c87959af7648844fe4247d04799271bf9e3835","size":22246,"data":"","first_seen":"2025-01-26T04:47:27.731619Z","last_seen":"2026-02-14T08:15:07.589146Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e36f64d739061b7285fd7a24d24b5aea","sha1":"7929f82616de3f8a82c1b0395fd562b1745f2c25","sha256":"6b9c7e1d5ad922a39de436c6d3126603438bd73108571b93b0445c5898218aa5","sha512":"49c92edee1aefd2fe5681e63d6623649f4b18869a5cb175bbad8bcef3e8762f361f8beb8398bf05ecc8b186c899c70259998c4a6ebe3fc604c7ce6d07f6c4f7d","ssdeep":"","tlshash":"47c08c14f92222348b32c87a323b6d096a7234c684000064322bc19c0b8e02d473aa1d","size":159,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-05-23T14:35:05.751967Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e36f64d739061b7285fd7a24d24b5aea","sha1":"7929f82616de3f8a82c1b0395fd562b1745f2c25","sha256":"6b9c7e1d5ad922a39de436c6d3126603438bd73108571b93b0445c5898218aa5","sha512":"49c92edee1aefd2fe5681e63d6623649f4b18869a5cb175bbad8bcef3e8762f361f8beb8398bf05ecc8b186c899c70259998c4a6ebe3fc604c7ce6d07f6c4f7d","ssdeep":"","tlshash":"47c08c14f92222348b32c87a323b6d096a7234c684000064322bc19c0b8e02d473aa1d","size":159,"data":"","first_seen":"2024-03-19T22:05:18Z","last_seen":"2026-05-23T14:35:05.751967Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c1afd2e0cedfefa61e91cf796b11256","sha1":"0339cb7b1e8ffa8b76a045b7b7e22d91b9eb4a14","sha256":"3697b3f096b71e3a3fb2805b1a115eee585d8cc8d4b99f48423a8950100bb72a","sha512":"f76f72be40af92a8871b4c94d479c701f013e8f64f021be8608d61cc5f310da69312dccfb1d47e0ce1f6f2ea1abd18108ddbe6e631665136957702d7403492dc","ssdeep":"","tlshash":"24b01218a547106cc6339033313f290a423730c304804014031e82cc0f9906c5a3e55c","size":94,"data":"","first_seen":"2025-01-26T04:47:27.739138Z","last_seen":"2026-06-06T14:16:47.967837Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ncwgl.cfd/img/electronics.90c6x769usblb0g.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/electronics.90c6x769usblb0g.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 11085\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-2b4d\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FOblNxSpcnB2AmJ0y3QYqgaRePMumcPwi%2B7scaVVP9YXhAP%2B0B5s1D%2BUm7urJqoWi5l0vj5pMZScGyb7xzcpghUWsUQybnrgGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d053d0a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11085,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 240, 8-bit colormap, non-interlaced","md5":"2d3b231038a91a15f4c7b57db5940e30","sha1":"a891f0424f79e998e2be2e8543caf37a3d1e5c97","sha256":"e7aa934569005974cae86677212158bbf4a1c0fc3f5a2c22a856a51b4cc709f5","sha512":"e2a9f128d64aebc5634012a9683dce0549183b9f70067a29ca0709e975fb00903a660d7aa5e98e101a41f414c80686739537b7c6172f76545cc648c7613f0729","ssdeep":"192:lamUTO7O4Iid6VB3S+VKT2L4uHljEz4iBF+s8b6sz0HI2WsI2hlPiOzjxyL+y3SN:laVTO7YSys7z4OF+stszVP2DiOz9yyy+","tlshash":"dc32cfff6b544fc0375671a9c16bc5aa5363f145b818bd38265fe549c06201be2a704b","first_seen":"2025-01-26T04:47:27.663865Z","last_seen":"2026-02-14T08:15:07.56921Z","times_seen":27,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/anim/giftbox.sqytg6g1bwvkc8q.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/anim/giftbox.sqytg6g1bwvkc8q.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"10b20-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEeOI%2F5Wdx82BFJ1LqtVLwgkFgv80oBvW3Yq9AySQbSy%2F3Tl%2B7GxBBjvb0NFWlRpxcpMHEq4y1huKCvzkHdWwYkVtEXPEW2GPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d07a9954c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f07d07bb5824f757e2b3e1c2fb32d50","sha1":"bb7dfe207cb16beec01615d1c78aabcfa21590e2","sha256":"0d518a3d50f5d88b8788b2785f8bf3ff045837e865aa9c017f7db9e19ea46733","sha512":"fbca9e5003da54f166ad1aec7c41d0ee14d343f1602539a3eebfe3334d7a40b7dace49d27b517f5fb0d989795570cd020dd9f2bfd9c992e2ced3fc0ebca6c8b2","ssdeep":"1536:rKxfNXN6RU4nhvD8Lbmiqf9gIhCmiqf9gIhCy13KekTvivFvnv5vfv8v+vI:r+Vd6RU4hvD8LbmH+IhCmH+IhCy13Keu","tlshash":"9763788a467102ecfb0a65d0cb4375d5dfc488967fc505aaeffa5c188ba569e2302f13","first_seen":"2026-02-13T11:15:18.322134Z","last_seen":"2026-02-14T08:15:07.574911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/anim/giftbox.sqytg6g1bwvkc8q.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/anim/giftbox.sqytg6g1bwvkc8q.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ncwgl.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"10b20-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8%2F%2F%2FHBnysnGhMynAPIKnUKgSGjevpmc36NKDR%2B03ohGVya32%2F7Y7msekLV3mUg5Mp7AClvT5eHvjgtEuDFN%2FK6M6g2eAy9f%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d07a9a94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f07d07bb5824f757e2b3e1c2fb32d50","sha1":"bb7dfe207cb16beec01615d1c78aabcfa21590e2","sha256":"0d518a3d50f5d88b8788b2785f8bf3ff045837e865aa9c017f7db9e19ea46733","sha512":"fbca9e5003da54f166ad1aec7c41d0ee14d343f1602539a3eebfe3334d7a40b7dace49d27b517f5fb0d989795570cd020dd9f2bfd9c992e2ced3fc0ebca6c8b2","ssdeep":"1536:rKxfNXN6RU4nhvD8Lbmiqf9gIhCmiqf9gIhCy13KekTvivFvnv5vfv8v+vI:r+Vd6RU4hvD8LbmH+IhCmH+IhCy13Keu","tlshash":"9763788a467102ecfb0a65d0cb4375d5dfc488967fc505aaeffa5c188ba569e2302f13","first_seen":"2026-02-13T11:15:18.322134Z","last_seen":"2026-02-14T08:15:07.574911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/css/style.min.css?_v=54854852266069","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /css/style.min.css?_v=54854852266069 HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=2,i=?0\r\netag: W/\"67a88814-ce16\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdmLcFbryzF64PKYEg48a4lmJwMTNEJTt0TZOU6zwtgsJhFccHbaFwiegD1uYpog1wY%2F19skHgB9LL7qfqTtrKKkfqBc9qyGHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052c994c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52758), with no line terminators","md5":"9e109a7c4a3fd1c86d397ea718b19bc3","sha1":"fd9ad84cc182bb403250b4bda77f6cf70b31cffb","sha256":"af895f5bb2599d7b040b12a60ecd0fef69d46e904bc9bb0111dc3860bc7d4623","sha512":"96e4f4871473195789fad18452bba33179334c2de069c0b9eb5112ebe09d3d3e4ea0a69506884d546f6f0724fb0708dc6b5c9f76b70478633dedf8b5850fb31a","ssdeep":"768:lPwVUv5JBT9XsLjAT5X5s6d6q6L6q69br:lIVUv5JBT9cLjAtX5s6P","tlshash":"5b33853b5d561208f0278da267d867dc153c8527e1224faee2677ca5cfc3ada163630b","first_seen":"2026-02-13T11:15:18.290932Z","last_seen":"2026-02-14T08:15:07.578605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/icon5.wp25vw133jhrwpv.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/icon5.wp25vw133jhrwpv.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 12051\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-2f13\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ps49lG036MrnpK5hGBXqZnDUqF7isLCMHbELSHgZSCCFwEHDWIDNKhtZv8FkK55kT84X1S9%2BlVCHfs9uflvi24TLJTZFLgUf5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052cbe4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12051,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1338 x 693, 8-bit colormap, non-interlaced","md5":"f448b899ec577c9e7677a4021124ade0","sha1":"a1d23cefa3e247f7a3bb583c837f2e205f655303","sha256":"73624e62d600b703b9535e9ea765518e62f73580af8111628f193090b8959705","sha512":"1417c7b0ebf707248a3876705eee4489c1ce3b7bbee27054c2d6cee6bfa27a2da7651d3c1b1963633008884835de3a4f371ec5305f5a6de0586332da3b19d3ce","ssdeep":"192:aZS+LUsuLnv2d08YeAImcuJbWwlW+zJzsIjLy8jfyZKXdNvwYKLCImhB:aA+LU1Lv29AJlfI+Ly8j6OLINh4","tlshash":"2042afa57de8fc40f99513b32481ba74e6fb52a6c21de0a05a11ba285613581df84af3","first_seen":"2025-08-19T15:33:10.081147Z","last_seen":"2026-02-14T08:15:07.581838Z","times_seen":23,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/gift.akyxvbxu3bdynly.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/gift.akyxvbxu3bdynly.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 517\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-205\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scyQU0k5c%2FJynCzQk0g5kA6VTyeA1iVVNSIvRzpQ%2FNXA%2BEriaPNsjmN9JsBVKnj7cPpWZ1mJ1urtOV5jigjscUd1CfZmEvfIog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052d004c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"f0a305b7346240ae84727e0b7fdcf238","sha1":"c6b34df46015e80d4ac11c5e01348ba281585d72","sha256":"3115f02a1548ead069a39e9501aee6f63da512d56d8e864b045570aec3f60ef4","sha512":"bf252d062ac84c3193f9e52e9f2da7d13f17b345a40f76b7d1c4b60dcc7e842dc4a1f9649faeebdc819296b62180a33e3bb1e316481a3be83bfcce18fab73c2e","ssdeep":"","tlshash":"82f054aa9522cd21053c2a88d0cf928289329e58148e4acb13bdb87120f43705f82380","first_seen":"2025-01-26T04:47:27.660065Z","last_seen":"2026-02-14T08:15:07.584429Z","times_seen":4,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCm3FwrK3iLTcvnUwAT9mIzF59cK0sL.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:42.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCm3FwrK3iLTcvnUwAT9mIzF59cK0sL.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ncwgl.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32004\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:38:28 GMT\r\nexpires: Sat, 13 Feb 2027 03:38:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:34:56 GMT\r\ncontent-type: font/woff2\r\nage: 102973\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32004,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32004, version 1.0","md5":"5567165a00409ca40a61d1768cd3cbc8","sha1":"dfb9560f38f20aabb84b1eef069e7cbc50070891","sha256":"b033601663692d9a029772845a64744ddf593d01c18860b06ddd5d0b680f4a00","sha512":"6914162f047848c74654e6b4f15b19d875ab7893eb47087213f32d91b76d346ce863a9d29295569497bb090b317bdfc43d9baae768f0707c1801acc64cc6d64a","ssdeep":"768:rJai5DMatnHaMORanpDpTSHJHJc0iggibzv4ZG7NDrcnkNEh:rJhvsJRapDQxZRgiPv4ZGpXNEh","tlshash":"fce2f1103609cda1e2feff745e8e21a6f7b08512b46e721e51e45a35da742cc0efc296","first_seen":"2025-09-14T21:40:46.055993Z","last_seen":"2026-06-03T15:47:41.487978Z","times_seen":63,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/icon3.ye8xwqq37hjb785.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/icon3.ye8xwqq37hjb785.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 5760\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-1680\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQ7u1N1rYTp1xqkl0tKSpQYgyNj4RyczEmL4IUqr3bUmkQM60%2Fz5ZPeiHHO04OOKw8K%2BCdI3TFaFbZ0ZkDmkUhSuL9EEz5Zdog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052cb74c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5760,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1338 x 693, 8-bit colormap, non-interlaced","md5":"c2009e8557827d973ae88ac61afcdfd2","sha1":"bcc2c900fb17faa1418f562b56147462b68b5203","sha256":"938cf368ced01f985f3b5f47682ce79105863a55ae39ebb6035e3ae61b0409c0","sha512":"4f8b3b6b20cbc2607d318c2503f0cf306da9a91c144f2c861f04a4da6e051a77b1c9dcd23975d2698d9764957645ab806ac0e87aae7b04f0f50d903a398dd166","ssdeep":"96:eybd3vnt99ojKUJ1+N1xhjwz411ZBdXb+XQ31AD6Q1SF8:eAVvb9ozJ1+xhjDBdX62ADB1SF8","tlshash":"03c17cc728a56a65fb6aa472ced016a8db544c9503cd7ecc72e2316396f650f346c2c4","first_seen":"2026-02-13T11:15:18.282868Z","last_seen":"2026-02-14T08:15:07.586704Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/js/app.min.js?_v=54854852266069","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /js/app.min.js?_v=54854852266069 HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=3,i=?0\r\netag: W/\"67a88814-56e6\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cot8aZ8NcYfkldC294SRuFdPijwBxplPg%2BKDmccGHF7OxGecRDVSREUJyGOGcJmgnP3qTmbm75z0q1veZj6Nuv32FYb36MAYUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d054d394c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22246,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22125), with no line terminators","md5":"942f433526441a8fc85247d12a94fab2","sha1":"a9ba888f144bce0965e8ea75342bf73f96550805","sha256":"8931ad33707325b785a96e31aa2f5816216360f4189b363b953a50fbffecbca6","sha512":"9f0c0487713575b168ed64a12be6fd13575d688f1d930c9b498bfdeabd064d6315fe72b3b26c153d5b8eaa3997aaa6dc6d3749603b090cd71328b6d335f90937","ssdeep":"384:48piPaYNuCyPAmiVwqMoUfN+MkRFPn4N33A+7U3v8OBg:48piyi6wxA+MkLw3wP3vFBg","tlshash":"24a273052e812e592b879fffb633a0e0c87959af7648844fe4247d04799271bf9e3835","first_seen":"2025-01-26T04:47:27.731619Z","last_seen":"2026-02-14T08:15:07.589146Z","times_seen":4,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRzS7m0dJ9pQOik20.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRzS7m0dJ9pQOik20.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ncwgl.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 21:26:40 GMT\r\nexpires: Tue, 09 Feb 2027 21:26:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 384481\r\nlast-modified: Thu, 04 Sep 2025 17:08:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24552, version 1.0","md5":"1d2942721184d3c09d98dd00f7f07282","sha1":"b10b1f8cba1dcc43dcb5c1363d044ce2c2da5f9f","sha256":"d93bccbe46505fdf4022cbcd99d094c666673d712a3c1e5c5cbc46aba3db1e66","sha512":"de53a8d0bfc9909faa1e04e7f8cb9a34b31ac48974d1512892988f53521a27ae1bb3a4cc486a9fe15e52b42f3fd9bcbce502b036fc8d025f14923fe41cc38df6","ssdeep":"384:iVHrbRqWU+90oXvX/B9r3Wnn+Qv18EG+PQDSskU4J15n7s7/77navQyJ1BDKUIen:iBg/+9VvPB9r3Cp3GqskpJTqabvBDKSp","tlshash":"bcb2e1ccdbf3c84ad4c4fbb29a9467148b64edbcbd207290d5281b84381fa04eac2917","first_seen":"2025-09-05T11:33:38.388922Z","last_seen":"2026-06-03T18:29:10.241138Z","times_seen":254,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":128,"dns":2,"connect":11,"send":0,"wait":10,"receive":2,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/ppl/002.jpeg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/ppl/002.jpeg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1934\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-78e\"\r\nexpires: Sun, 15 Feb 2026 08:14:42 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBtFTm5gYikRIqc3l3x%2F%2B24856VhojfPPalLPizBAwXmleitjAaNp%2FB6gDgI8%2BAaCohx%2Fr2QsIiraYWn7iy8I2u6OWLA6tPE1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d083c4d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1934,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 64x64, components 3","md5":"78558b75d368e101ac3499f5f0ba9540","sha1":"51bd04616d42c0628f56297ce75b4b37367bf58c","sha256":"1f0ad52f54cd52cc9110305678d21f3a2a7334384d8d90c0de42c40b589020f0","sha512":"2f174c71b7ce9e59f8cc9bc6e794fede9e12f249726ed11bb51ca1222af9b600b1aaf9d6d7e340861e3ae9fbf6bda7d178bf4c7cd341ed3649295f054a0b8002","ssdeep":"","tlshash":"d441f7026b9713a24f03aa7a7a1f395f22df51a73a20967548736370cc34cb1e49e71e","first_seen":"2023-05-07T15:36:51Z","last_seen":"2026-04-04T20:37:51.026017Z","times_seen":185,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/ppl/004.jpeg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/ppl/004.jpeg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2196\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-894\"\r\nexpires: Sun, 15 Feb 2026 08:14:42 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vF%2FrJfZiqaJ6tECdJm0NIFFBylSM9aSNAxnpPfmtVdIHCHvGaCSaoYmSQM%2Br7EBhLCQi1uFxUH3hJevgCDPagJ%2FcAjoXXAyktA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d083c5d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 64x64, components 3","md5":"dcc86dc9b8133cc1d5fb276674590d41","sha1":"4ced4cd2e4c2713637e4ec6c9f1215ffbc02784e","sha256":"f94dba7fc3cb1dbf49a2dc6bac19091cb3db092ea7b92bd889e3c8aaa7e852fa","sha512":"9de8f560a174adfea9184794994d9fdb90f55cd8889f43a668f2a529a0bb381f2e396a35c7e24384755a5c57ab6b3388e27913defc72d1142fc04411559fd3bf","ssdeep":"","tlshash":"ff41da5a3b3b8b81bf26137b592538bed34a1e503eb035396fc045a64661df0a11d9cf","first_seen":"2023-11-24T00:24:07Z","last_seen":"2026-02-14T08:15:07.594059Z","times_seen":124,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCm3FwrK3iLTcvnUwQT9mIzF59cKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:42.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCm3FwrK3iLTcvnUwQT9mIzF59cKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ncwgl.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 79496\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 01:04:03 GMT\r\nexpires: Sat, 13 Feb 2027 01:04:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:37:29 GMT\r\ncontent-type: font/woff2\r\nage: 112238\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79496, version 1.0","md5":"ab98228b3e92ae3e3f241e7a9b7ca630","sha1":"ebe06739d95b60454d7b38a440ffe8db64df00c1","sha256":"041ef627fbae99b122618fe3914efbabe716463067148fc551b77e2f6182904b","sha512":"464a8d440bddd2b41072d14c1f5d9085d44e50050f1c7c0ef95da36cb595ba7598381f1568499c211a7f016c6c89b2adbc98d9684a330bc28bb7960637e5b040","ssdeep":"1536:c9KU3q+E7Djj11CR9bwL7KzFXE4yJwwoFrELz/6aJoC+T+pF2B7KU+lVDVtW/:c9t3lELOR9bOSZnwoFrQz/6autapFbU/","tlshash":"dd7302887d3e54bc5f9311b0d069399bee6a2f433d3a7d00ce9faa1c4511b5920396c7","first_seen":"2025-05-29T18:51:29.056319Z","last_seen":"2026-06-07T05:33:26.447705Z","times_seen":3457,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/icon6.5e33tvhgnicsc83.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/icon6.5e33tvhgnicsc83.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 5438\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-153e\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FM6x4shqJZvglEnTJw8NjeQGmsIox8dOC9voPdEurnKp8YzHSrsFtXa8LLAyOVUWkUBvqqoZj%2FndzRzW1kF4q2Y44CodfWptLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052cc44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1338 x 693, 8-bit colormap, non-interlaced","md5":"ee039b94c2eb5f38447f8dfc8d289c45","sha1":"b8b68da1fd01639e809499281b3315205975645e","sha256":"bdf14dfdc6b68fc16bee9b9dad0ea657e8c3a3802396c0495d54e04df1e5ef90","sha512":"551af0a61d6432cbfa0103b8770e8c65baeae2777f808c9cf03414f6b7233f20827f37cbf194ab9ea6d9e1cfc0e4369fc205ce033ee1cf252f576887f309a2cb","ssdeep":"96:aKV6VlN2bdDgPLTbCr9ecoLwSh2jJdq57jhhWTiWOYvJsk:VVWN2RDgLTbCkccTydq5Jhput","tlshash":"44b17e557db34235dc07c0f73abca66511fccd2842b1d2d4f1a5747a1172a3167991e2","first_seen":"2026-02-13T11:15:18.360959Z","last_seen":"2026-02-14T08:15:07.596214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/v/ico5.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/v/ico5.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 566\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-236\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8yOvzY3wtEg4k%2FLyUy45i4mecuvMjXPZkKS47Nszh%2FyitL2vGPnli55MYlZ0HgwpKi07KRBvI6CEwa8Pa1LKt%2BcKn9b%2BazDVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d053d1d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 91 x 91, 8-bit colormap, non-interlaced","md5":"2f776b9e35701365fe4a0648af780462","sha1":"8cb441de8be19243f749a271f801f8427eb801c8","sha256":"7b12bf23ed0bcb2d95b3008f0b152e6f88228a0779a6cf3778722cade3dfab5b","sha512":"5d0a5d6e093ffcebbf7599547d0dfc55ff52c7bf715d2703bddbbd0752c71f6f88cbfcbef303e59954a51f4048c5f3a1a96feb97ddd7e75fedb584c90684af43","ssdeep":"","tlshash":"e2f0e1f63007bc74a35447b79d50368aba2ef6209578236f90804439197114ebe05087","first_seen":"2025-08-19T15:33:10.072395Z","last_seen":"2026-02-14T08:15:07.598926Z","times_seen":24,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/pattern.w47zhjw1ghge3jw.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/pattern.w47zhjw1ghge3jw.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/css/style.min.css?_v=54854852266069\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 10423\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-28b7\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDbgoEPaAjGmxVTNz4ekiKdlPw8jIW46LYrpP5If0a78ue3XtQf%2FqcoC1exBq4FsIxPQCuKC0lNiRWdDT7LMvJ1vJjGHzyZ7IA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d070e3b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10423,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"10a4ecd3c0990eb212b9502acd490994","sha1":"395766bb8809e6bc3752b0afa2abf27f440b2e0d","sha256":"5c9aecaa66f6a58ba1c0d4bcd3d8ff651a898273b0081e5d03d05e595e90e988","sha512":"305d2c8b42d1bc65198732120e999c8eb6ed67e329f835977e57d57f13158e468085b80e4fbfee6512943ea7931f28945f8bd628972cf693e82f80a08103687a","ssdeep":"192:7AeRITm82C4BBp3UC4pasYZFmdb36JVOOAT7np:/Z8l6p3Ykzmdb3iVlATV","tlshash":"cc22befe9aeef8c7c4cb045b7e815486d88027c2f7455a7e08a98e2cc94f5b1142a3d9","first_seen":"2025-01-26T04:47:27.682408Z","last_seen":"2026-02-14T08:15:07.600423Z","times_seen":26,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/anim/adduser.ei0r7xb9dj8mcgz.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/anim/adduser.ei0r7xb9dj8mcgz.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ncwgl.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"54f2-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zcFtqzuq%2BVIXsZmP7o41VbxIagXvEpZq6kaTMnLPNHsRd%2Bbb%2BfU4vPXG3RnSibJ15TWW84uTXUSrwIKtP2%2BPmVJWqyP8tjR7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d0778dc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21746,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bf0fa4b0bb2e533074d2e84aee890350","sha1":"bae6cba905e43337c70ce19b8536b8cd6270e8da","sha256":"ae1ed7cce6477989d3c489d6e5aea0eae70f37efbb39b924f6ca72bebb53318d","sha512":"434b7cfded69bb5734f97bb4ef9230ed0a6e06cec28d284d655adc1af27f9da7df0719d5040c4f6a4a13faaca8b8e00e6cdb4bce1524c8a5f4fe9feff0755311","ssdeep":"384:WGClItfgf2FbUqsCekWCSszijjuIjuxK5JwNqQJdWW:WGClwQ26XB7PUqJgqCdX","tlshash":"72a28d9a4b7601ece60478c0cfc330e48fe581966fc649fedbf66d145ba569e2301e26","first_seen":"2026-02-13T11:15:18.34745Z","last_seen":"2026-02-14T08:15:07.601758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/ppl/005.jpeg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:42.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/ppl/005.jpeg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1648\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-670\"\r\nexpires: Sun, 15 Feb 2026 08:14:42 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4PV2yiXKEwjRjeN8mAAUyiXykmVd1QvfZE65Z0KIcqGm1jHzpIG2gn8iCiijGJikcAbKqp5VYGGbbfAxkGtxvU2h84ejcYHxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d084c954c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1648,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 64x64, components 3","md5":"60795974b816044d7de4b0470e748486","sha1":"9979cf1b609f53076068da42eccf7245ac47fd02","sha256":"33d041c675d77103b266e9064fe6daf8c09b14f1a2b836ca85351525a172360e","sha512":"5c605558b36d77823c63ce5663755d7a66ba01c72e336a54b2480b0bd16831675dabf61f074d2a6f2c0114ef3613c819a19502d131b63ad34709a4dea9214b07","ssdeep":"","tlshash":"a431c51b673393a15f82487e636d6467e1da4e46b5ec7f380b7142388720cb8c0c4a89","first_seen":"2023-11-24T00:24:07Z","last_seen":"2026-02-14T08:15:07.604147Z","times_seen":123,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/ppl/009.jpeg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:59.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/ppl/009.jpeg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2006\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-7d6\"\r\nexpires: Sun, 15 Feb 2026 08:14:59 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBtWOxWAHfPr7EnPIN1hJfzLtir9VnguDscLVAwZX%2BdGfe5dxod4Fdv4N21R7z7tfiFKhsY7pVHPWdyRsP4Qh3ga5CFcLcLG4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d76ee5d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2006,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 64x64, components 3","md5":"5a172c1b2b27c59af38f9fff23875bad","sha1":"051cbc72d18d0e1f756460f070f54e1c05c3c3ca","sha256":"79a0802d51a0aa218ad87b6c2e9e77aebc62b7717b6e792e4bfa2ea472f24a22","sha512":"ab26573303deca565f260e4c28d243f1091e150e80e8541b0f394dc273509d7a09c277424241ea1b09a5221755961872eaed5904bd77c0e93f8b4da96784a9e7","ssdeep":"","tlshash":"4a414a6e432a8690ab3700f051411a22e02e65413821a5f46bb19b3ec2b4db6af8852c","first_seen":"2023-11-24T06:27:28Z","last_seen":"2026-02-14T08:15:07.605281Z","times_seen":121,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/icon1.uil4m2bc2azt5oh.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/icon1.uil4m2bc2azt5oh.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4359\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-1107\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSOo35EJrOb%2BtIjt%2BNR3IkQQFlyUeZ%2BAaUBhTcUr2uH9A2w9tvwAwhFqvmLnYjetMwBo7yfxom8uA%2FHX%2F%2BOhWw5xDqJJFMhDJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052cad4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1338 x 693, 8-bit colormap, non-interlaced","md5":"0c6bc8b71210302df4f94445f1a4464b","sha1":"6a067bb985227389f9cd6a62ce0785138c707a14","sha256":"16c8a6ca9cd7c9093a83136ee2932a0c7379a0da4e3c1c85fe0795d1d18d8a37","sha512":"949f1891a9d3d8b388ebafb257dbc32c7398d69e600afd93920d52547c6c3ffc505e7744746f8ee07879c4c41ebb3aa235cd40949b0afd62765e034122f61bb1","ssdeep":"96:5r5FyhOL/5eNzfbBkwZzvuTOhF+Dx3Xqi32LgiI1sGTN:5tcTdfzVvAOhFg6sP1s6","tlshash":"80915c05b57a81f8d8a4bcf293e649fd43fcee54f07d61c80022214aca75d1eaade325","first_seen":"2026-02-13T11:15:18.359575Z","last_seen":"2026-02-14T08:15:07.606252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/million.jxpf4x2aqy4hs0x.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/million.jxpf4x2aqy4hs0x.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 15143\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-3b27\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZJvrDcoBTasPTGBl6bKK4F000EnsR2SbDAzWndPlltDmr80BEulpEF4OpDdO5X%2B%2B7P0wWjNgJ8NyJvMCTtQVTUh14Fp6WWzMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052ce64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 751 x 75, 8-bit colormap, non-interlaced","md5":"98137fdac1646928ce5e541c8ccbf296","sha1":"dd32055ca8a20c35317c23ab9f1aaf00d1ad9079","sha256":"57d678911129f00b7572da19d9a729fdd498a1dd72d77f54463cc951cc104b73","sha512":"b2fae7e05dd08c1d6e3307bca049335812ab82cb1a3cdd8ada724a2ef05220a265c39bb9001fb3256e624c1a3c1998b75c0edf4959fa04b04fa6eed95522467f","ssdeep":"384:IwxR/s6zWDWwhUSsYk5MUM9z8DWYdF6C/qWsoR99Nvxlevw:IwxRHDMUSsYk5dkz8DfdEaqW1pJsvw","tlshash":"8262d052e31c4f2ad7a7fd032442c56d6ab7a72715c6d8671933892c43283b4d45b176","first_seen":"2025-01-26T04:47:27.677183Z","last_seen":"2026-02-14T08:15:07.609291Z","times_seen":25,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/logo.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/logo.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 597\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-255\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=km3NBT2U0MNsQj6po%2FClbZI2bCnNWvWvU%2B1ObJ2NxdJuwrQnIU8hYihUA%2BLjrk0OSw0fRsFhNS2A6PBc5yETXyWv1NIYgIovtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d053d114c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 60, 8-bit colormap, non-interlaced","md5":"873ed680dd54c505ed7b5757aa4fe3e4","sha1":"6f098f3ada402f8200520670f7c40e7fbc12233e","sha256":"05de797d45018bf58efa010eca1ce19da058b1c45a2fe294fc4c8ab99c8e1599","sha512":"0ac2d4c6c5aa18be15724a0ae3f7314651f4389b97125326f47f8ffbbf5c95abccf9e918ce524044311b4dccef1931df10130e19de070c6083abc8c2759557fe","ssdeep":"","tlshash":"00f054cea2e71c3fde020b32a14c00bb3810bc304d188047b11179e857334740666204","first_seen":"2025-01-26T04:47:27.665404Z","last_seen":"2026-02-14T08:15:07.611045Z","times_seen":26,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/ico1.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/ico1.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 601\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-259\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RdMW4IzsJMmwzIKvxhF0SYN%2BLvQqziIR1mIVdfowfBdhye02X1niK47u7Dvr2GXFBmEtp2TkkwwrADGCKVNUugLCBq0ml337aQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d053d184c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 79 x 78, 8-bit colormap, non-interlaced","md5":"9d2450dc2b40cbaf4b37584ce4a49911","sha1":"5812b406d05f0879b29a73602ec84a94fa5328c0","sha256":"4376149be65e98df7de689c1a0e09af3b537ffde7d079086c9c9094b16e4dee6","sha512":"e76d8e205811d7e800b2df919444bd291b0c4f409a53af93b948ed422317af1f09edbbb06b251e05d5426d14b22c6c1eb26ed88eef44232f9069f228b55ee346","ssdeep":"","tlshash":"40f0dcca62f1bd99f4136ab9ad4d45e4ee515c3c8c18a739868c343904fa223808b4d2","first_seen":"2025-01-26T04:47:27.672575Z","last_seen":"2026-02-14T08:15:07.61238Z","times_seen":26,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/anim/preloader.fb29wikx8e2hjj8.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/anim/preloader.fb29wikx8e2hjj8.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"a4a-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EsUOYapVP%2FYtpYKtHe8kerzt1vQ9xTpzMCwyHO27fsM8kqQEnHlZ9vT21m9ddKMeb0ZgiX%2B68FsJBH6BdXBr%2FiILkTp7qkJ1kQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d07a9774c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2634,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c468b02449c90ce18aee5789568086b","sha1":"c87a27a8e650d0975569f93fab5147968fa6f434","sha256":"6a56f27df70eca005a0644dc83698bb325db2add1f05b0b73f4e5deebd270fa3","sha512":"7de7318a1407f63a38f79e253face5347fed05e494f71edf3499ab6ca9710aa1dd6af30cdf34970932966d660be2129d111a31fa2a26cecd7288e6d80cb3f4f4","ssdeep":"","tlshash":"6c510782097143ecfb066550cb0374c5dfc98895bfc501aaeeb60c1c9fe6a6e2302e17","first_seen":"2026-02-13T11:15:18.29596Z","last_seen":"2026-02-14T08:15:07.613729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/anim/share.kjgbyar8hvyend3.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/anim/share.kjgbyar8hvyend3.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"333c-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIWSjuV6%2BYAmngZ8iHDB8kggd308EQXh7LznQGhmo%2B1iP4jO3kbCRTY1Zxb7fKMHy5EAAVkNcgIRPvTJXZRmeNSsW1vr3F7tNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d07995c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13116,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e7a524315326db7e9518577d534743a","sha1":"753ca5cb667ffe95ff0c67d0f22128037cca4095","sha256":"e39117e1425d4dc07431f9f94414352d05536deb82758731e1a248724ec795ff","sha512":"1b2d583b501af9fc6ee618ccfd2d4b572ac26794e485bed307e4e58cfa56071b9778659cf80ee6d6b8c4a978ee1245d78757b28ab239b72ebb792f228366e347","ssdeep":"384:BezgVRpOpxU3L+vegVqpOpQUNLbgVqb7kDA5Lsve+6F:Ber/YivPqqjkmCDE","tlshash":"b14244c60a7142dcea1569c08b4374e5cfe888956fc605eaeff65c284ba569d3302f27","first_seen":"2025-01-26T04:47:27.721698Z","last_seen":"2026-02-14T08:15:07.618108Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/ppl/003.jpeg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/ppl/003.jpeg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1940\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-794\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5RfjyIXky5DaHW%2BE6K954XDPXBKQHXsIK1ry3FfjZhe3lB44N8CU1Q6aZtTq0xIgMu9UuWvJSQmdkeHSW2FSDt2eot0GOo3R3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d083c524c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1940,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 64x64, components 3","md5":"7af6adbb0523486267064e2ea294e842","sha1":"d35c89e69b522cbcd951e735e928a62242144674","sha256":"0c54d39439f6e0a523a21ddbbeedded6b29d9499d545f2a4d5cef45d49a91ec9","sha512":"70e3056cc574465e72d754cd5e2df881f2c27f2fa26331c30bd07de9fde0cd992fac1211d814df7f3f7f6ff323e0e8b6a5440a7ea3d957f828ae292b06a04514","ssdeep":"","tlshash":"7841f9365a03ec0c0f0364be5599abf291ca0ba53ed2bb3234b2812a4194dfdd4894dc","first_seen":"2023-11-24T00:24:07Z","last_seen":"2026-02-14T08:15:07.619154Z","times_seen":124,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/ppl/007.jpeg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:42.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/ppl/007.jpeg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2135\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-857\"\r\nexpires: Sun, 15 Feb 2026 08:14:42 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hr0MtKx0227JStK%2FwqXny7Q1%2B2LUpcuwszEfNYj7bH65plNGA1S542YELjxaBDYydZoEIQjMvsx36r51hfotwckXZUlV97ai0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d084cc04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2135,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 64x64, components 3","md5":"775c9fe8da63bbc19c24f14300f8a7bd","sha1":"5ec6bdf69d2a6738f5818b8267c30b65e387f50b","sha256":"bc764ea7584bf1a4908f3929863a4dea209e352d88fb8edcb50230dc5f2c0221","sha512":"eaa2009e7ec866d4ef26398b6037bc303b44e3decfe877fee4f562574259aac2cdff93b26333df2b64d097adcde3cb7d7c0f49d4f9eff0005ab3993b75646564","ssdeep":"","tlshash":"2e411866d3071af1cb88807e1f59327fb4c9c59d36593f38171441928ba0fb994c9ea9","first_seen":"2023-11-24T00:24:07Z","last_seen":"2026-02-14T08:15:07.620069Z","times_seen":123,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/files/audio1.mp3","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:42.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /files/audio1.mp3 HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 48296\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-bca8\"\r\nexpires: Sun, 15 Feb 2026 08:14:42 GMT\r\ncache-control: max-age=86400\r\ncontent-range: bytes 0-48295/48296\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bl0Wg0EkTiHbv5ofPMja5sfAQpsKgQyVfadrSrpX5JYc8TWdQtLa5%2BprqAnoB5VKeIshcHHJrXMfPHSiU35k0tucKMQS%2B9w0Hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d089e2e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48296,"size_decoded":0,"mime_type":"audio/mpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/step2.tsx2fcj50ip9vxi.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/step2.tsx2fcj50ip9vxi.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 2009\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-7d9\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cr48HE2yDaWTcOwyh6NdxUzQJS01LumRO1pqSlho%2FXv%2BixE8vR8J84Oz3BoahNKsVAlYM4e9TrPIbsOJMMYDOeYSpMpf%2F3UMyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052cfb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 63, 8-bit colormap, non-interlaced","md5":"2bd31c5d8931b7f1738aa83b17a52460","sha1":"41f776e7ada9f1d9e18551d61d5c7a7633892203","sha256":"1593c4adda0cc014c72d3496c368152d4bc7ef2e4dfb66307b6e5f0064a4151a","sha512":"b0958c58efad8e8f3dcf913cf98c87024296dd7fd44336b652c6824c65ac9bc32324234ec05d5015437cda0bca70fa3d43110a25b0414ae8b6df4ab98db98cd8","ssdeep":"","tlshash":"5f41faa0a0fe08e9896a960f98f1a81f1834956c3b21193072ffe177de15095e5ec363","first_seen":"2025-01-26T04:47:27.656557Z","last_seen":"2026-02-14T08:15:07.621408Z","times_seen":4,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/anim/giftbox.sqytg6g1bwvkc8q.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/anim/giftbox.sqytg6g1bwvkc8q.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"10b20-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVNGKJllPRiq04MrO7hvVksfQRXWGpspOV02JHoMRCbr4g7K099jV3qUpxzkZMAY5gdJ9vuPMmlRS50HjjpHSkZvMMCutykXPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d07a9aa4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f07d07bb5824f757e2b3e1c2fb32d50","sha1":"bb7dfe207cb16beec01615d1c78aabcfa21590e2","sha256":"0d518a3d50f5d88b8788b2785f8bf3ff045837e865aa9c017f7db9e19ea46733","sha512":"fbca9e5003da54f166ad1aec7c41d0ee14d343f1602539a3eebfe3334d7a40b7dace49d27b517f5fb0d989795570cd020dd9f2bfd9c992e2ced3fc0ebca6c8b2","ssdeep":"1536:rKxfNXN6RU4nhvD8Lbmiqf9gIhCmiqf9gIhCy13KekTvivFvnv5vfv8v+vI:r+Vd6RU4hvD8LbmH+IhCmH+IhCy13Keu","tlshash":"9763788a467102ecfb0a65d0cb4375d5dfc488967fc505aaeffa5c188ba569e2302f13","first_seen":"2026-02-13T11:15:18.322134Z","last_seen":"2026-02-14T08:15:07.574911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/favicon.ouwz6r90nt4rp5a.ico","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:42.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/favicon.ouwz6r90nt4rp5a.ico HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6sl7iMc0mYmUQBoYfqOKHfEKFVNYNKMcwkfa8LZm1T77IDdy4CPaSbd5QKow7xCzrlHdnsPjYwFXe76cImudJEbxEWojOmJBCA%3D%3D\"}]}\r\netag: W/\"1ece-62db356632d00\"\r\ncontent-encoding: br\r\ncf-ray: 9cdb1d0a0e434c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7886,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"2b2a1b07bf9e6f22218212eaa75d9afb","sha1":"64421eac517cb35c8ad06d9bf6cf452168e395eb","sha256":"a8827e4450c7cacd017134b225ea18090e03c51b9c8a70e506ca28c0584ae311","sha512":"a4c665ed584ba7595114377f3a6b3ea3402a081fd9eb06bbb5ce9b1177643165370d3d0112c6b5e4f07ef9b771e9c7effdc1d433806dc494edc896d1796ac204","ssdeep":"96:+YsaXoV3DKZxqscOt7kmo1n32XmduujISSoBdSSoKvDwwvHoB:AVqqJx1n3imsSSozSSoKvDNoB","tlshash":"31f1864d6fb16a9df360f239e471f6124ae5deeb29c1852630447ade3a4138b7c4a022","first_seen":"2025-01-20T03:02:36.905692Z","last_seen":"2026-02-14T08:15:07.622119Z","times_seen":4,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/blogger.g1qdgszpl4dg7oi.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/blogger.g1qdgszpl4dg7oi.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 101758\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-18d7e\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLOmTlB%2BXc7ErCSE02e6KKRjYvu7hgPZUDUFjwse1EE%2FXAuwOThGT9BLxhBrTpI7ouoTupn8k%2FXFC0uU37GrwiN4WVEk14ChXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052ca54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101758,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 892 x 462, 8-bit colormap, non-interlaced","md5":"6ccf10e78f3cd2e9e046a6f3f811c086","sha1":"947b51b916feab3d3d640a671716eae729b9a5b5","sha256":"33b4334ff1abb322d12302fd5f187f7c39e59574073894fbf8ab7d42c9550209","sha512":"7bd9e5864fddb8d1c393f608d4e52a82a37c9345671e79d6e76b540ebf07315395fedbfa29f99a23af7b212af9b448e26d4e79e96370807322aa498df0e3ef7f","ssdeep":"1536:cV35Rd8k/uMOkCCxxZGFeNM6H8NEhDSbBzhkcPdmGtZjGLzMqdg8qbUb:cDP/CkJDgTE5SbBzh5VmGLj++8qc","tlshash":"15a312329e396b8fc98687462f52ce33a5020746c0e0de1828078926947b5d5ef2def6","first_seen":"2025-08-19T15:33:10.058966Z","last_seen":"2026-02-14T08:15:07.62285Z","times_seen":22,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/anim/share.kjgbyar8hvyend3.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/anim/share.kjgbyar8hvyend3.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ncwgl.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"333c-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUDP%2BKHO7%2BK5HI%2B%2BTIB0%2B7%2BH36JdrpkC%2B44z8iyV%2BNmq%2Bn3yVLJXbxeh1ZomcxDLjWI2bfhWkiSmlP%2B4DIWgQqGrV%2BIaMlYyPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d0799634c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13116,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e7a524315326db7e9518577d534743a","sha1":"753ca5cb667ffe95ff0c67d0f22128037cca4095","sha256":"e39117e1425d4dc07431f9f94414352d05536deb82758731e1a248724ec795ff","sha512":"1b2d583b501af9fc6ee618ccfd2d4b572ac26794e485bed307e4e58cfa56071b9778659cf80ee6d6b8c4a978ee1245d78757b28ab239b72ebb792f228366e347","ssdeep":"384:BezgVRpOpxU3L+vegVqpOpQUNLbgVqb7kDA5Lsve+6F:Ber/YivPqqjkmCDE","tlshash":"b14244c60a7142dcea1569c08b4374e5cfe888956fc605eaeff65c284ba569d3302f27","first_seen":"2025-01-26T04:47:27.721698Z","last_seen":"2026-02-14T08:15:07.618108Z","times_seen":3,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/anim/giftbox.sqytg6g1bwvkc8q.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/anim/giftbox.sqytg6g1bwvkc8q.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ncwgl.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"10b20-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38cBEC3RBxuwsaUg9J3f%2Bo0VSeougQ2di45bP%2FZ0fW1h6tK6uPNzfL2lQEQTBf%2FbzTuiagPqGLx8eV8BwQvlgXRV%2Br2EqhA%2FpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d07a9b64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f07d07bb5824f757e2b3e1c2fb32d50","sha1":"bb7dfe207cb16beec01615d1c78aabcfa21590e2","sha256":"0d518a3d50f5d88b8788b2785f8bf3ff045837e865aa9c017f7db9e19ea46733","sha512":"fbca9e5003da54f166ad1aec7c41d0ee14d343f1602539a3eebfe3334d7a40b7dace49d27b517f5fb0d989795570cd020dd9f2bfd9c992e2ced3fc0ebca6c8b2","ssdeep":"1536:rKxfNXN6RU4nhvD8Lbmiqf9gIhCmiqf9gIhCy13KekTvivFvnv5vfv8v+vI:r+Vd6RU4hvD8LbmH+IhCmH+IhCy13Keu","tlshash":"9763788a467102ecfb0a65d0cb4375d5dfc488967fc505aaeffa5c188ba569e2302f13","first_seen":"2026-02-13T11:15:18.322134Z","last_seen":"2026-02-14T08:15:07.574911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 08:14:41 GMT\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"51955a067b2f96efe49c2412a4c8c713","sha1":"44103446803299fdae2aa9fdf4c21af4e90fe450","sha256":"2598c04bc6015e0fdad9381928b8238d997efd88a0e450042a60e9d59435f915","sha512":"ca70f49f25ca02d0491518a04e3fdd3c9cb9d35a573ecae94d1bf8fe184ee1ceb53b623b4ba9bf2faf7ee4e321d30fb57954326ac064cdd7605b031355ef680b","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHiyYwyNFyuy3uySRk73vO6u8:vtfcHjg8ciIShwCFnbL8B","tlshash":"2002ff91056be504ea431cc627cf7e369e8e62667081d1797ffe2cd9aceac22132475c","first_seen":"2025-09-11T02:59:26.857486Z","last_seen":"2026-06-07T01:30:43.57316Z","times_seen":866,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":118,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/step1.8phg05rrjmzxoks.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/step1.8phg05rrjmzxoks.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1848\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-738\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0tjYcQYb8dllbMq39z6Iaa%2BBxoZ0ALGaEQQbQE5J36ByqSKNjKoMOF4%2FsO1%2FXxDaa%2FXAAz3VotiiMBnKZv%2BfqlH5LJafDKS8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052cf74c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1848,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 63, 8-bit colormap, non-interlaced","md5":"06c6960fb51e94783dfd8563cef09f4f","sha1":"4d1d94bcfaf725aad208bbf6521c6140225c3101","sha256":"a39413f7d4313cf3023234a25e45b46deda9f2ab24caa996e4bac3dee224134a","sha512":"7353e2e24f9a69a30a5bb7f49683412456e96065b94fc24730ca83841a53b9dda15ba74ce7befe4f1b43666144ffd7df0fafaa5d593e2920f662623aa92afc41","ssdeep":"","tlshash":"6d3119d8c3e30ed4d733aadd069050e41fe286bf82a9428555c0a0292d172c0b2ceb0f","first_seen":"2025-01-26T04:47:27.654782Z","last_seen":"2026-02-14T08:15:07.624282Z","times_seen":4,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/v/empty.jpg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/v/empty.jpg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2682\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-a7a\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBJggxWuvMbvLglY3dY%2FHzjNzQ1QvzIQeGKoSZINbdu5NTYKgc1%2FYKLd9dB2EefXVwr2nR3Yw4AYFGpsdRslcaSGsmS97kvEng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d083c4f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2682,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 76x76, components 3","md5":"a1862181d1a7283a04f5305376f4fe81","sha1":"922e2b64f16816f7ea76b1fdea895e415bd4e939","sha256":"3e288ed325f4cf894c4437f2b61e2b6fb4c4a12d47a90962621def2fd0e9b9b0","sha512":"8bb49644636516b514a9de0066582b28de4da454a46ddda3cf8fb645db10f701079f9fe9c60d7a1fe58e8eb77efe2f141d03a2246565fd95e1a1b2fe289aead8","ssdeep":"","tlshash":"7f513c23c71199bac4666bb080eb4142af03fdb2ccc72f7f710196438da66c6e5c145d","first_seen":"2025-08-19T15:33:10.060477Z","last_seen":"2026-02-14T08:15:07.624875Z","times_seen":24,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/flash.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/flash.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 3620\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-e24\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybdnyR14rENOWcG4wYnN6rkeCX4vmOsbDoo%2BZEClz8O8qv25yN7T2Jb8XFbhb9BVWGnszjPSoIjMhD86Lv51A9vTKaxNUv1agA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d081bdb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3620,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 299 x 168, 8-bit colormap, non-interlaced","md5":"74b401276c27e2a3fd565ccdc8639b0e","sha1":"72f46f21ab4adba5f9b9ae7f71438730208bf74f","sha256":"0ba6113c1e1393fce5bc9446e76ab454457f0246a9ffd4dd00e56a78eeaadca5","sha512":"50c185a359f26f5e7f488f56ea263ede7ee5d36aaede6a22a25c4b83fe8b202d80f616b5d1d2a6a4b766353b02c6a31853d95bdc65f14ad834e2a99b3ffb3d87","ssdeep":"","tlshash":"78715cb354bbfa578e988c0bca05e02684d5985bcddd93f5490a7fa4d480026cda9392","first_seen":"2023-05-02T13:51:07Z","last_seen":"2026-02-14T08:15:07.627777Z","times_seen":119,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/css/style.css","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/css/style.css HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=2,i=?0\r\netag: W/\"67a88814-1d41\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RKCoUiFrknZVCsdePsqUR0al%2BoBiZhZwev1JC%2B72eRjJTYL5HE4vRmOWc51VjeyjUyyP9SWibooWZB06BBJmucbslFyldKF6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d054d2e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7489,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d0da910a903b2a4090451d673f9a3f3a","sha1":"d1ef3c1433955adb22b8189704c9ae3786c7e59a","sha256":"def2905a83bc0b60cc8ac0f1e6dbf010d799c1effc741b15bc0ef67b3b1f7359","sha512":"38f1b160d0177d8f70369c12a6508caaee322a56c0c19e9b3eff33b58349ef6eb38b1b6e851d430a1ecda2bb653205d70f4e274f2524e3a5e24a5442c56449e1","ssdeep":"96:T0JCfxMY2ZFUTxMY6+etAPbJJlXxMYTLUYnUXgJ78dJKsW2zK+OKGviBne/Hv5G:2CD2IXL1vTT8k8KL2zK+fGYUw","tlshash":"ddf1642447760614740fc9513a566fd8137c41664e0ac9bd7eff28b8ef8a3c59872f8a","first_seen":"2026-02-13T11:15:18.336425Z","last_seen":"2026-02-14T08:15:07.629333Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T08:14:41.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxPrQs7khzjIM1es%2B376eZZJ6nKM90Gajg8OmepRJEzZ%2FnKpmt8bCwU8KEPqTmrA9KGEybJaln91AaK7AwFCjiSTSBVYXo%2Bi1A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdb1d02ec9fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":13444,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9bdfd695f09a11c937e9ddf68bbbce3c","sha1":"867b39c34f0f8a3efdf94896d601544a826f15eb","sha256":"9269edfd72451d9b104940d10e458cb2479fa1302e199888282eba056637a85e","sha512":"6a9854162f25176913ab497c86baa27676f71ccd135743fa99cd4f8b84f8818a29b587316fff85069ff3ddc568f9b4e49a7bf3e2f0f68d4ab6d2e0888e58a61f","ssdeep":"192:Jbk1WIISiW5yPEEdhEjwIElpKh3VHYj+i6M:1/IIRCpPM","tlshash":"6552f12058f9e5bb118260d5ae516f1a3ed58483ca3b054972fc17f97fe2c8ace2b446","first_seen":"2026-02-13T11:15:18.281216Z","last_seen":"2026-02-14T08:15:07.631971Z","times_seen":2,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":85,"dns":56,"connect":1,"send":0,"wait":147,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/rubles.d5vknxdx0o30fzq.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/rubles.d5vknxdx0o30fzq.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 11355\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-2c5b\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpcaVqNNXgRhPlIQOOKYG4qIw9b%2FcjYtLC60Wl1v1%2Fqa5UqartezJ1ngHE7rbqfTHnbTl8E61OjN4PsSiiR%2FQiPEPqv1DFPKHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052d034c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 240, 8-bit colormap, non-interlaced","md5":"904576d4a1fbf17516e047e29e3ba051","sha1":"4933db6e512f55ae84176375c925640530bf8caf","sha256":"9128c3219ac84ac05c04e39834774cf39ea9c5f321de993a57f3a921845ec9c7","sha512":"99e8a313d91d67b13fbfae77fbf0a9f8cde07f7d031a7c5fbdb7f9042cada590151ae30576f382da8f12e2e73958728394bd4d5c8959c22a523ede3b36df7c59","ssdeep":"192:wk3V9tmv82kmxn8bH3RsjhcXfgM9mV3mF2WaeT5C5eo+XMZZ8SG3nRvN/a8NyUI:wQblGe3RsjWjmTY5lo+QZ87hvN/ByL","tlshash":"9232dfe333d5d0f9e0fd1b9ea72166a78b92e52c7cc01214d94617c228e02309fcd759","first_seen":"2025-01-26T04:47:27.662114Z","last_seen":"2026-02-14T08:15:07.634206Z","times_seen":26,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/js/app.js","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/js/app.js HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=3,i=?0\r\netag: W/\"67a88814-edbc\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Wc56tHubLHDqkBGzqizVoY7WpAnJOf7A%2BnbbQbaAbau%2F1O5tsKRSRAv5DPagdZZHg0I%2FLgyEYB6AnsghlxFWg4iiQXzRZhUjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d054d314c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60860,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (706), with LF, NEL line terminators","md5":"c93d0eb618f4180ed98f551e051bf5d2","sha1":"3b363ff641a5d47e3f9c4c145ad1c6df32ca86c6","sha256":"9eb1032b9d400a5840dbb2b5b0204f323450af2cbb833a68d49d61ba894d8317","sha512":"d11ae4111183cdde6a9174f986f3a0b10c099fd868ccc75dab3d9b28ea9f45a2030bb17d003251c334e9dd102fa4e8dd895e9810163ac29e70669d58186ce2f8","ssdeep":"1536:XMLXTBGJTNeKCrwXylxUoxoYWkvu6n8tjLRjCorksEYC7RB:8Lti0dAy9P8/jVjCgksEYC7RB","tlshash":"e9539b21069e648a0006f017e8057e4d6da7c4ffbf5e67b729681d7f3ee2178c638629","first_seen":"2026-02-13T11:15:18.331415Z","last_seen":"2026-02-14T08:15:07.635433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ncwgl.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 19:45:58 GMT\r\nexpires: Tue, 09 Feb 2027 19:45:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390523\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-06-07T07:26:19.424207Z","times_seen":8448,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":70,"dns":3,"connect":8,"send":0,"wait":8,"receive":6,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/js/jquery-3.3.1.min.js","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /js/jquery-3.3.1.min.js HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=3,i=?0\r\netag: W/\"67a88814-1533a\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lhq%2BcMARikY1eLO3QgmCDhmaWPmj%2Bw2yCijyrW%2BEM67j8r6tIM7IGSGQd8lEQRnOMCv%2FNRGIDXj0bumPjxox5x6s9mHY3b7R8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d054d294c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86842,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"78683430ce9217a8149dfa67d6876b97","sha1":"0c8c623b575da80dba9759f4143602993afe32ec","sha256":"ed650371d2e0e1f53b0979594dcc8b0788749463cce9bd8e168415420ecf84c0","sha512":"a9b7d9187287c91a6c7051b09d55b96051fca8fc7f8f35dc37f76b27a5b8198be205cbb94763836913aef7407303a16e70ca5547398487e4e21e353228c67a59","ssdeep":"1536:+LiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:qkn6x2xe9NK6nC69","tlshash":"c38309dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T12:24:17Z","last_seen":"2026-04-09T20:38:36.770553Z","times_seen":69,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/anim/adduser.ei0r7xb9dj8mcgz.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/anim/adduser.ei0r7xb9dj8mcgz.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"54f2-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBeNxkzo1%2BNe5L8RkXAzC62SmgXOrLQ9H9TeTEXVROB7ZnD8IW7BxvsVkoxSMvQNz7sC6ibQL5Ndygd0JdkRekzm2rSlKw5%2BqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d0778c64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21746,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bf0fa4b0bb2e533074d2e84aee890350","sha1":"bae6cba905e43337c70ce19b8536b8cd6270e8da","sha256":"ae1ed7cce6477989d3c489d6e5aea0eae70f37efbb39b924f6ca72bebb53318d","sha512":"434b7cfded69bb5734f97bb4ef9230ed0a6e06cec28d284d655adc1af27f9da7df0719d5040c4f6a4a13faaca8b8e00e6cdb4bce1524c8a5f4fe9feff0755311","ssdeep":"384:WGClItfgf2FbUqsCekWCSszijjuIjuxK5JwNqQJdWW:WGClwQ26XB7PUqJgqCdX","tlshash":"72a28d9a4b7601ece60478c0cfc330e48fe581966fc649fedbf66d145ba569e2301e26","first_seen":"2026-02-13T11:15:18.34745Z","last_seen":"2026-02-14T08:15:07.601758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/ppl/008.jpeg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:42.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/ppl/008.jpeg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2364\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-93c\"\r\nexpires: Sun, 15 Feb 2026 08:14:42 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gRaLVwa5F%2FOfO03rOiLBkSaofKym5ndXX4rum2mDtUHScrvGQ6lZChkZi7FIS9wwKRi1kX8caBWlNfKX7UNK2qEvtNqTXusXQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d084cc34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 64x64, components 3","md5":"c789d0d9257426a3ab477feb0b2e3ee1","sha1":"3daa03df3289a58606f69dcb67348d0e8028a029","sha256":"b5f3f4b0e5a23ab2004950ffc1027db485faa6736f22cb7163c1b6a8c95a2690","sha512":"2d1d1c9b76de1653a7e6782b47ff79787d1a869d1cfe9b0d8192eb2fbeca1e1535a5c40d07ce3e40bb486b41558066f67c798a429c96b3c72601820fa52b9613","ssdeep":"","tlshash":"5b41fb1686661430cf07ceb945881e27a98e6e01edb763788ab406948a60df55908fce","first_seen":"2023-11-24T00:24:07Z","last_seen":"2026-02-14T08:15:07.638637Z","times_seen":123,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/icon7.e1u40zy9pr1k7rw.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/icon7.e1u40zy9pr1k7rw.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 9457\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-24f1\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=esSaBkPNYZNn41byeOdXeXya65xwb80%2BoksCbfEQdJ2I3YzOASVtePra0ubHujLTr%2FUj6HQq%2FO6PbcqRaBbPRNMjwUMqErkhSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052cce4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9457,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1338 x 693, 8-bit colormap, non-interlaced","md5":"9e2922af622fecd2720d415014205ecc","sha1":"5c73b8548715a7e25f0e85fe8450e6494f0bd774","sha256":"529f20f6a28e7afff21afe82eb65d61b29400f06dc306203b04d51a8691434d2","sha512":"b1d466511b322fbf649e6552161a93a7edbfdb8cd42bcc9b474e588f70687bf49fcd0f17b6f7073fa87be81a6db58f93871600355cf2326aad0eb20bae24eb82","ssdeep":"192:E7ePu9nn2bkW9knVGx17qNxdR6R0jK2KSyuDL3TKjMVg1kG714x6:7PWn2gNnwx1q3tKnSFn+jnSnE","tlshash":"4812bf2d021d0e4df897703ecacbe9a68f995532c01e0fd046f1a8bb3464f8e4b25501","first_seen":"2026-02-13T11:15:18.324875Z","last_seen":"2026-02-14T08:15:07.639445Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/anim/preloader.fb29wikx8e2hjj8.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/anim/preloader.fb29wikx8e2hjj8.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ncwgl.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"a4a-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8gPI3DBQLYMg84brCaYT59oqWkz3Clq2IxHyHKsFl%2FnCWg5RWDu3e%2BjbEu%2F%2F3HwgB98ChjWrWDn8tlzYRIuHoXQjqKO5dZR5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d07a98e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2634,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c468b02449c90ce18aee5789568086b","sha1":"c87a27a8e650d0975569f93fab5147968fa6f434","sha256":"6a56f27df70eca005a0644dc83698bb325db2add1f05b0b73f4e5deebd270fa3","sha512":"7de7318a1407f63a38f79e253face5347fed05e494f71edf3499ab6ca9710aa1dd6af30cdf34970932966d660be2129d111a31fa2a26cecd7288e6d80cb3f4f4","ssdeep":"","tlshash":"6c510782097143ecfb066550cb0374c5dfc98895bfc501aaeeb60c1c9fe6a6e2302e17","first_seen":"2026-02-13T11:15:18.29596Z","last_seen":"2026-02-14T08:15:07.613729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/ppl/006.jpeg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:42.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/ppl/006.jpeg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1845\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-735\"\r\nexpires: Sun, 15 Feb 2026 08:14:42 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=duLxUrL%2FyNpImrejUe2Nlc1dleDBLlNPIM%2FnAPR88TH4UoGk4KFI55OKgpPF3kMXyphxtx1goPc8stn4ZzMYuaSnl5HKDXOI5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d084c9b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1845,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 64x64, components 3","md5":"1930fa6372f0ddd2818488730ee44b61","sha1":"4f3cdd0b41df508d39e89a544d5f643089877a39","sha256":"716804b3470d8f5a7e5b4c80fbe40abfdac2ed5e2aeef23ac01c91e5d7d2605d","sha512":"38c7adc2d2c1778ceef993a475a834f56fcbec0408e4cf86433581bdd7f0237b881156e00d90fb5bbb3359ef1605fd4c5414a721777cf6dbdfdc2eb833a6eebf","ssdeep":"","tlshash":"cc31099d4a93d491bf8687f3116134ff728a1900ba65af3229a563cd4d21ff68806d84","first_seen":"2023-11-24T00:24:07Z","last_seen":"2026-02-14T08:15:07.64107Z","times_seen":123,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/bannerbg.42l2o32z0y9wvf6.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/bannerbg.42l2o32z0y9wvf6.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 42866\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-a772\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzcjxZAqEXq9IQykOK6mav%2BBo4NReJXf2EtAFJeV%2BU2fP1XTXuJvWvhmpalSFbRbTDDioxhNj80eiLrQ6Wo4fdkKFa5Ss7AwyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052ce14c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42866,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 892 x 531, 8-bit colormap, non-interlaced","md5":"30a8dc97971839116e32991c9b36bcb0","sha1":"f08be6468fc105fa53d37edf5778a6b659d92985","sha256":"3fab52d934489a0011ef58dcc6af7baecff4d12b48265855224d6a8fc880fcaa","sha512":"ccaa0a9667f1387b739a9f34af091a1fc78c80145145a6fc8a294e0b5786f1ea9ac2d61de89fd573f243d01f098e6baf0cc868ea2ad932bdee3098adc2202b75","ssdeep":"768:DNmb0XPLElWn6QV04nm8DKqJGLJlW3u2tpxSPqout1JjHZ8GhMxCrSELsm:xXTEMC4nZ29JPSAhm80MwSzm","tlshash":"38130184156b3aabd98db5f90961e24313686af17c38b118f77d2c2ab308c97261d761","first_seen":"2025-08-19T15:33:10.077845Z","last_seen":"2026-02-14T08:15:07.641751Z","times_seen":22,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/ico10.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/ico10.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 926\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-39e\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JDNqu7wCDCxh0ub1S9l50etc9Kw%2FwPIVqBQoA2ET4R%2Fm3qE66izIO2plS%2BBARcJditoq35IvaD4MVRBfdNilSLMbniJGgQL7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d053d1a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":926,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 4-bit colormap, non-interlaced","md5":"9229274a22f1c7023d37a5a9f739212d","sha1":"561ae56efef7698913b779ff115b2c9935a714aa","sha256":"e7f3d3e15a8c4e8f24943c65071c2a5082253cab87d74e34fd5da95c6ee33c9e","sha512":"c63241a521b96c4a0204b2a5fe36ce913fb6c73c6f9be851e50f292c399e69916f1224061078489fdcee5d3dda13497a729ab22cc410a073156b396779ebef28","ssdeep":"","tlshash":"5a116761a3bcfc3ae67a063a3ddcd9f464255138d91312cc58485b7948350dbc76bd48","first_seen":"2023-05-02T13:51:06Z","last_seen":"2026-02-14T08:15:07.642445Z","times_seen":123,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ncwgl.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 02:54:16 GMT\r\nexpires: Sat, 13 Feb 2027 02:54:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:10:26 GMT\r\ncontent-type: font/woff2\r\nage: 105625\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39580, version 1.0","md5":"adbb74ed85ae03bafbc689d12c4b009d","sha1":"7f3b99b45e6d2fcfc6236e972f9eca353cf0d130","sha256":"d7143d0ded43c36b8c4ff4a0df9fba2d356d27f64d38f33d962ec5977f928d31","sha512":"d91511c5a20c5b851b6363603959dc520622c0202e2c39b8bd7cacf95f597bccbfe4595cda9785639dbd216e1a45c980e8e54c94a778165b6d81b83192d57a55","ssdeep":"768:GtZDr7XQiUGTkhuSlVGpCRf0p0lBYtg8PdVc4vtSbga/azp8kAUuzqksy8G:GzP7xyhuSlwpq7R8Ve6UN/ad8kLufsyP","tlshash":"e30301c6940ca5f9dcaa027bfc5e0cfa39654cb89c0a6b9c5f89e7634165cf2425ca4c","first_seen":"2025-09-05T00:54:06.266401Z","last_seen":"2026-06-07T08:17:07.564967Z","times_seen":221530,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":140,"dns":4,"connect":20,"send":0,"wait":10,"receive":4,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/js/lottie-player.js","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /js/lottie-player.js HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=3,i=?0\r\netag: W/\"67a88814-5d3ec\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2B3SWGu%2FkXCd8r3jvF85wfj5yG1EHfDhddeNUjHpTB4DbNSHPLX0mjvAd1UJnpGtrg3S23ItlFnBCpFuBFXjld%2BGonUibqg6RA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d054d244c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":381932,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"66cf0fd61268474bae61cba169dd320e","sha1":"cce70f6b832321841133a5ebad09fadce7412d47","sha256":"4de3fa56fb32389cae36f15738825bbf1d3f73412fb0c0eccb968d824f2b4f8d","sha512":"399ddd81cc4e9eb14e619a119dca9d969273b79b8ef4c1d5eabc84e9e7a621d5504936170c7d0c795ba650fc1b0ca1ff29765a882fb22c701ee5087278c94c39","ssdeep":"6144:a4oQYPIJgY/btDQ3PSIoPabTzf/W8tpgsQ5cDo4D1:SPIJCh+p5c3x","tlshash":"6d8419597254743905c54069803f090bf636292e246ac09cb76cf4ffa8bde8d32beb79","first_seen":"2025-01-20T03:02:36.911211Z","last_seen":"2026-02-14T08:15:07.643835Z","times_seen":4,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/logo.393s5dey582mv2x.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/logo.393s5dey582mv2x.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4391\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-1127\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MJIrdlYmlCJ909Eyz6k%2FliYPuACcw6tF6t0vYBgE%2FZ6Anu%2FMU8s68zO9kC1oFdd8BsNe2itQi%2BVGEh1hD0mgQtgZiWktTyINA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052ca04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"b9fddf6e5b9bde29040001bbe83db0d8","sha1":"bdefaaa554080ba8cc4c9efc6df2691460918f4d","sha256":"d822cd138a7109fb7436a48178bf8c516b8660a961410fd97da821961eb1f0fb","sha512":"623da71027f627497b91980030aa79a6b5e7050ad1c1ee10cbcf12661684ed9a40e112ef96ed4a5bd471f4af567b11b2280dd1a615f5d8862ea266575d0fcee1","ssdeep":"96:b1AvTDkuKzW/5GJc7V4doLNUROzi6jBNB42bEumaM42zUBw6:b0PkJJm4eEQNgADMGBw6","tlshash":"2d918f3b51075ac25bfe6f634f18d9054468919e8ac9b03155c736e68397c3e1ef44c0","first_seen":"2025-03-01T23:11:19.788312Z","last_seen":"2026-02-14T08:15:07.644599Z","times_seen":3,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/icon4.5l1w57qq8e5vaqb.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/icon4.5l1w57qq8e5vaqb.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 8816\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-2270\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1yMsL%2F9NhXLg6Bqohj6unxrqdbhn0VfJ5S4mMjuc6QDj3wxLi4Jo2iEDoYFQiiDeCo6cMsqCIDCWQfSD1aNwqvzkfNqUoKg5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052cb84c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8816,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1338 x 693, 8-bit colormap, non-interlaced","md5":"6088949500ffd3e3d05ad48652f48124","sha1":"1d50ce5f167f30fa851e523e3b857a62f7ac8eed","sha256":"3faed1f1734a5f0663e60f86bb261033f59b0fd83a7074fbff6964676eb5d758","sha512":"2153759d25cdf6e08ebdd3ab7766ad6d49c8ea78f4dc84f9e13c011688aee08c1632dd6d8bed8b55e14e6fe48e38f8750a353d9b6e2dc936cebcacd622ee08d8","ssdeep":"192:9OGb/4OP/e6JC48GFgkpAm0KWvZSU96/ik+P0sZ2XG3Cnvz:9Ofw/pCl3kvghDmA/ZgX7","tlshash":"9202bf07e70f2828ee3db1f9c013a89a7211e59ce7e5c0ddc01b7664b632ca5f34180a","first_seen":"2026-02-13T11:15:18.323426Z","last_seen":"2026-02-14T08:15:07.645767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/anim/slotmachine.m0lrkzcau0dltvn.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/anim/slotmachine.m0lrkzcau0dltvn.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"51e12-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1Oqh5l5vb7rbilZzr0qMsdHNXVSBTxJf6gDcSKAVRCQgQkV6jYg6%2B0F1vffr%2B69OTk5PjwViJuyZjpnRsqD6m8%2Fb%2Ba3an5wxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d0799374c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335378,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"443d5f4a1da4d866e615f7201150ea87","sha1":"9f3fcbdc16e04a00b56778b8b42bc4bba8c48857","sha256":"35df08e9fd4f4e1f794019e742bab099fe656a43f8c4ea9c80f0e86b5d8a84fb","sha512":"0afb7b85d0e29c33d79c0f7170921e4b0814f98aafc5a5356634d514eda49ea68195e3a8625aad6a3573e79b8d8e27a720110b41d90fea6958cf2447ff59443e","ssdeep":"6144:0NFY4GZ3A5Qbhr/Zhr/3hr/yhr/Mhr/Khr/4hr/Shr/bhr/Vhr/rhr/Rhr/bhr/L:0NFY4GZ3A52hr/Zhr/3hr/yhr/Mhr/Kj","tlshash":"13640dc502b002fceb1a6a91cb8375c8dfc86c456ec440a9fdbe9d189b99a7d2315f17","first_seen":"2025-01-26T04:47:27.727326Z","last_seen":"2026-02-14T08:15:07.648126Z","times_seen":3,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/anim/slotmachine.m0lrkzcau0dltvn.json","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/anim/slotmachine.m0lrkzcau0dltvn.json HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ncwgl.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\netag: W/\"51e12-62db356632d00\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvKArkyjyBJHCE%2FJrJneQYC5UllLZnlHW1BMM9MMMEdb2nDovPP9xOdRyzIv472PN1O5WYXHBzeoMbHhmARFyOV1LXWUKZVYVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d07993c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335378,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"443d5f4a1da4d866e615f7201150ea87","sha1":"9f3fcbdc16e04a00b56778b8b42bc4bba8c48857","sha256":"35df08e9fd4f4e1f794019e742bab099fe656a43f8c4ea9c80f0e86b5d8a84fb","sha512":"0afb7b85d0e29c33d79c0f7170921e4b0814f98aafc5a5356634d514eda49ea68195e3a8625aad6a3573e79b8d8e27a720110b41d90fea6958cf2447ff59443e","ssdeep":"6144:0NFY4GZ3A5Qbhr/Zhr/3hr/yhr/Mhr/Khr/4hr/Shr/bhr/Vhr/rhr/Rhr/bhr/L:0NFY4GZ3A52hr/Zhr/3hr/yhr/Mhr/Kj","tlshash":"13640dc502b002fceb1a6a91cb8375c8dfc86c456ec440a9fdbe9d189b99a7d2315f17","first_seen":"2025-01-26T04:47:27.727326Z","last_seen":"2026-02-14T08:15:07.648126Z","times_seen":3,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/v/screens/scr002.jpg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/v/screens/scr002.jpg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20243\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-4f13\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvBbk%2Bjucp7dAlYEgSZFsij7nTCA2Lh1At5V0w%2BzUHPvJ42oR0qAIFAsUkxDnusmnU9ZN0uyhxWfrt1WeXu2gqSWwg5XMKFp7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d083c594c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20243,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 277x600, components 3","md5":"be9c110aeda600965e1042beb32ad4a0","sha1":"fd9b7c0c008dcda387be4905973721bf0ff67728","sha256":"8d056cb955649362cd07d3c8361ecca3d6e5954d71a9b228608cca98c387b6e3","sha512":"9237c6a5127719cdbc792a1b91f9794d3785b8d466ba7ef3b36fdd4a4111a276f2191655745d7329e6092ce577191653f2074f6983a9a55df30e6a1280dbd516","ssdeep":"384:ZE8ISlVKHSSi7KC8bgFoyrd1VoaaY2I7E9yPUBMrk0a5Kqqf:Lxlki7nFprd1Voo2Ghr55qqf","tlshash":"8992cfdbd1885141dd61aa348bdbe301d321b1041e8712ff4196aebe6d863d72efc2ad","first_seen":"2025-01-26T04:47:27.699343Z","last_seen":"2026-02-14T08:15:07.64916Z","times_seen":36,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/step3.crw4k8m8b0zv2mv.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/step3.crw4k8m8b0zv2mv.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1998\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-7ce\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vosTlWFbvOXNBj%2BV1o%2BwO3lmhP7j%2Fb1BGcDFddLES%2B6MnUMcvy9u5lK6ZFJEiNlNA%2B%2FCCC2UbVC2YRNRdUyTTziV3yqYhKB5Sg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052cfd4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 63, 8-bit colormap, non-interlaced","md5":"d437a26b6c7a3638eea1a744d71aa605","sha1":"676083110715deccab12c4ed86214286b8044d7d","sha256":"faef70a969b094a6260f95ae25fbae18178de3786a77cd7bd2972b1e4a25ce4f","sha512":"99a0eb6be9435bde2617cadc4d33d4ed37d75ed54a6e8b43a2c5faf33a9ae0c94546ad3c9b9b91445b65d4334a23817a286112e72ecd82ee1283ff1a4724a1fd","ssdeep":"","tlshash":"17412acbc020e8aad80f35a4105f74efead913a670468a16093924f236b148ce185aeb","first_seen":"2025-01-26T04:47:27.658253Z","last_seen":"2026-02-14T08:15:07.65015Z","times_seen":4,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/v/screens/scr001.jpg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/v/screens/scr001.jpg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30600\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-7788\"\r\nexpires: Sun, 15 Feb 2026 08:14:42 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bOkej5ojnMJg8ib87jCz5ZTi2mQD4HmwPCqDwsw2dIaPgpMBcHmLsydccr5QxYikR4F%2Bly0e%2FtRJJ%2FR6KvDUuJ2XNkmmI6AaxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d083c474c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30600,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 600x1067, components 3","md5":"5594ba642b500d54679a1f9526d8e6c6","sha1":"d290c3e63602ea0f76868c1c751666d4128ce2c5","sha256":"ce134bea96de16a155ac4b14a9c464f8cfb735ebf9fbaeba6f52e0914b740d84","sha512":"6a64f63cddb526e55c7cb1a9b7261884e68a9cc4418a5d4cded8eac0dec72308bc32001e04778dd71172d02ae1633c647a9780d476d91bdead91deb502d0963c","ssdeep":"768:mtUj60ax6Z1Ft5OB2xGZWyVHfjBUQHEuk3J:F6xytsB2gIyF7/HVk3J","tlshash":"e3d2cf431364fa3fcd7d68f855098263106b9d2590b6e4b3e49497526f2cb3c2ca76e8","first_seen":"2025-01-26T04:47:27.697952Z","last_seen":"2026-02-14T08:15:07.651254Z","times_seen":35,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:42.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ncwgl.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 18:20:43 GMT\r\nexpires: Tue, 09 Feb 2027 18:20:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 395638\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-06-07T08:19:50.569223Z","times_seen":25791,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/v/icon2.nm9blh0zj1a2cxn.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/v/icon2.nm9blh0zj1a2cxn.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4585\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-11e9\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6PPnHPawHjOD4j1NOkOxCBsuyomHSQvQrH%2FThYhMyzwJLL%2Fg6AusxHoYtFWi5a%2BYqL6qOyo%2FGAWdOkhO8CnMn%2F%2FQE%2FF2jVMwZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d052cb14c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1338 x 693, 8-bit colormap, non-interlaced","md5":"cca003979190b1923f43c3f8dfede1d0","sha1":"f5993b56f22c1ccf1758cb7837a6abeea78d7349","sha256":"a1e6213e6450b59d147dc379e07b3685b2f9593ddd293214318dda926a80426f","sha512":"135b3bdd9200d1eb4c3db392d95138e16e1bd44972ae11e07bb42b01afbcfe68fec102b0e994dab70a4486c514ecac67e72863e2c365e1c18876797de1eb3381","ssdeep":"96:SMDBDvS0Y2KomFemHLT2ubll7QSf18cQNhGDmZ3:1BvnY26lmuP7T18nJ","tlshash":"89916c6170067deef00ac17b426aa8c6c4a54c613a6b8bcbb039b0b5158f4106b7f9c7","first_seen":"2026-02-13T11:15:18.351153Z","last_seen":"2026-02-14T08:15:07.654445Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/img/coupon.86s70gv3n76j8da.png","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /img/coupon.86s70gv3n76j8da.png HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 6969\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-1b39\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFiz848KMuPAhbyQvLQ91%2FPXTIIbAMO772UYJ2wxbN8iZpYTBjLueqRAtDT1R%2B1rR0HZz063goFugrEHndVpVWfflAR7THcr2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d053d0d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6969,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 240, 8-bit colormap, non-interlaced","md5":"50f964cc1bf31568af364fc6033f3fca","sha1":"b7a39b7b691c64ea9e42143c81a6944c2736e9fb","sha256":"b4fcf4dd041d36a59777533f5abeaee426e3b4d0c1bff5f747af7ed6637ad363","sha512":"99d78cdfe2f076516bec4512a32a28e0d76e01e3d49caa298a374e93138ef8ebc9528d9681099fa160cece13a6979e6ebd520393294f39cb8c7df22b39586d00","ssdeep":"192:U7TERpBz7xZC5MIG4Mp8VkAirWM5lqzasiRjM/e:MEB7xZCMIGXokpWbzHiRD","tlshash":"f8e1bf0a95b40ae7d287057509a4a73abcf30b26054cf480462a6efbb21a327774265c","first_seen":"2025-01-26T04:47:27.671002Z","last_seen":"2026-02-14T08:15:07.656488Z","times_seen":5,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ncwgl.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:23:22 GMT\r\nexpires: Thu, 11 Feb 2027 23:23:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 204679\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-07T08:17:07.553463Z","times_seen":508546,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":133,"dns":2,"connect":23,"send":0,"wait":8,"receive":5,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncwgl.cfd/chat/img/ppl/001.jpeg","fqdn":"ncwgl.cfd","domain":"ncwgl.cfd","tld":"cfd"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:41.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncwgl.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:07:01 GMT","end":"Sat, 21 Mar 2026 00:05:38 GMT"},"fingerprint":{"sha1":"CB:E3:78:A6:4A:97:A4:61:94:B8:93:D1:6C:7F:5D:C8:A2:44:65:3B","sha256":"8F:84:3C:E3:F6:2F:B1:A2:4F:D8:4A:0E:DB:C1:67:18:FD:8E:DD:4C:8B:16:7B:FE:F9:62:CC:B0:C5:3E:5A:F9"}}},"request":{"raw":"GET /chat/img/ppl/001.jpeg HTTP/1.1\r\nHost: ncwgl.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncwgl.cfd/\r\nCookie: PHPSESSID=12iq36q2ba7u9hovq8md635per; lastPageId=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:14:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2119\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 10:48:52 GMT\r\npriority: u=4,i=?0\r\netag: \"67a88814-847\"\r\nexpires: Sun, 15 Feb 2026 08:14:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWzZUtYbGfjUVmxpgiOlwKnHIMtzE3RCyfmJXYEgE4M6urITuHYYxy0PY3sh%2F2w0ChMVTdvcgENO6A4Eij90aZ62n08W1Hkj9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb1d083c304c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2119,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 64x64, components 3","md5":"9eec72b7cb206217a8b7d6dce58baf9f","sha1":"5772ec63f9317236bc18aed87bc2876ac0143222","sha256":"84ad8d58e2d163eca0f758b3533a76601a467e8f19d219dc192d3cc24209adad","sha512":"6a6f8e34b05f67405a1181842caa13bedaf12d547a8f3c1000583fc55c19eeccc99a9faadd49b003466d6105858fcfa48390a92f698f9771cde8ed8c84e6dd58","ssdeep":"","tlshash":"5d41fa1eb7276092ff274b73156a02b69583dd1bacb03eb476369255c493ff401d8948","first_seen":"2023-05-07T15:36:51Z","last_seen":"2026-04-04T20:37:51.03067Z","times_seen":190,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcvmYwYZ90A2N59MKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncwgl.cfd/","date":"2026-02-14T08:14:42.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcvmYwYZ90A2N59MKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ncwgl.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29672\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 12:46:17 GMT\r\nexpires: Thu, 11 Feb 2027 12:46:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 242904\r\nlast-modified: Tue, 09 Sep 2025 18:38:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29672, version 1.0","md5":"39357dbe8984618163ca98d144638fea","sha1":"3c5f9d8066bd583aabd676a861172a5297ea6e4b","sha256":"327a37fa78452e54fe5ecfdb3039f611080c4629244198faff8384ad4fc5a48b","sha512":"24c0cab0a589f8bbcc59fed31a87dc1187371a7d46603f80b76b9d453e350a3e35cbe7fac080635961e90859837b42285b0776bd0492d16ca1fbf12e5b97f74a","ssdeep":"768:lBIIE2FXroI4UZRppjb9Y5mtKR6klfxuVyDfdLnAUbN4x8:lBieHjbW5xR6klfxuVyzd7FY8","tlshash":"d1d2e18c85685eeff70196dd18131437c91e3649f78def60c5842bcac1f936aa2a5c78","first_seen":"2025-09-12T02:44:04.646948Z","last_seen":"2026-06-07T08:11:04.36977Z","times_seen":2101,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}