{"report_id":"5ea24617-074c-466b-a81c-a337f4c8e429","version":6,"status":"done","tags":[],"date":"2026-02-27T09:47:30Z","url":{"schema":"http","addr":"mdg188jp.online/","fqdn":"mdg188jp.online","domain":"mdg188jp.online","tld":"online"},"ip":{"addr":"172.67.186.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mdg188jp.online/","fqdn":"mdg188jp.online","domain":"mdg188jp.online","tld":"online"},"title":"MDG188JP : Tempat Betting Slot Online Paling Royal Kasih Menang Mewah Malam Ini","dom":{"size":18141,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"2d5cb563148beae044658b25f718b508","sha1":"f9ee748d2c69c86c153c77f60520ba33eb6fdbaa","sha256":"e8928456e3f3b98ee7be7fd523f1a807efea031ceb25dc71e431daef55199b50","sha512":"86e4dcaf9f9990c45d1f6432202ea03a535ef4adeaeaf1816d1f8104a188ea7974c6838b2e75b69f8c0d062b7b69776819a4a4d45ad2c5704a15478fee4d2c1c","ssdeep":"192:jd7L4UGeVroA5eLU+LMeLNVLsXymruvd2ZaUk06/x/0kmk0k2kPD32VE8JmSyE7a:eW0A3XZrHPk06/x/iP9R3ubk3tQz","tlshash":"b7825257b589209da117d32245e2f77f2e38c80387320d1dba4d7b98cf59b867a3264a","dom_hash":"domhashb748d5e44674468308b97a597d5a58d4","first_seen":"2026-02-27T06:55:21.965644Z","last_seen":"2026-02-27T09:47:32.544481Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mdg188jp.online/","fqdn":"mdg188jp.online","domain":"mdg188jp.online","tld":"online"},"ip":{"addr":"172.67.186.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T09:47:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"miyanice.edgeone.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"mdg188jp.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"miyanice.edgeone.dev","ip":{"addr":"43.174.246.29","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2025-06-09","domain_rank":0,"first_seen":"2026-01-12T07:56:07.655705Z","last_seen":"2026-02-20T10:07:45.396201Z","alert_count":2,"request_count":2,"received_data":45914,"sent_data":809,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.ampproject.org","ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-02-23T06:41:39.33784Z","alert_count":0,"request_count":2,"received_data":295610,"sent_data":826,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mdg188jp.online","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-23","domain_rank":0,"first_seen":"2026-02-27T06:55:16.225266Z","last_seen":"2026-02-27T06:55:16.225266Z","alert_count":2,"request_count":2,"received_data":749719,"sent_data":920,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de93c62fe8d520d5f20d3a375921f388","sha1":"ecc3eb0c77b12d60831c1f456bad0302b4d5db83","sha256":"07443ee9c85233c09c22c0668278316d8d4c25b7a5af83eba6ac761f30b75dff","sha512":"ea341717b7f75186720b4a3aab7f653eebeafb92ee328fc9fb2b2eee0365e201b11353a0f1d0fd5c1c8f8c06a134626f38b4f3375513675a9d1fa78ee065c156","ssdeep":"6144:HoUwkmOu6CFmZZoS2/VdK/HWL1Uqb9W9z:IlLWdYeW5Uqb9Gz","tlshash":"6154949db296b0724793b075803f150ae33ba855240a812cf56de9d67cbcd8aa137f7c","size":284617,"data":"","first_seen":"2026-01-27T21:42:06.365435Z","last_seen":"2026-03-17T21:09:47.691036Z","times_seen":2185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d1e1939a681e26ad7bac3e1bc7a4698","sha1":"1b6b404001ca244b6617aab982989604eb5db41b","sha256":"32a998421e9461bc53f942def0e915f0c7100cd4db2e516221bd443494147631","sha512":"af0ab1fedb33087a7bf24b01fdf1e1d7588e518104c563e448d68d0a4fed2c7a813f98e567530ba239e574abfeafdc4886b5e99d531ff14a7e075dff61f19008","ssdeep":"96:GKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:GKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0af196dc7ac2b83a5757b4b780af414fa63bb94624ad9120d120f0d83cb995ed633e5c","size":7798,"data":"","first_seen":"2026-01-27T21:42:06.36181Z","last_seen":"2026-06-29T08:09:07.891513Z","times_seen":2154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"miyanice.edgeone.dev/favicon.png","fqdn":"miyanice.edgeone.dev","domain":"edgeone.dev","tld":"dev"},"ip":{"addr":"43.174.246.29","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mdg188jp.online/","date":"2026-02-27T09:47:09.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.edgeone.dev","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 20 Nov 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:CA:B6:6A:0A:FF:05:33:79:85:57:92:0C:82:B6:ED:89:51:FA:DA","sha256":"58:DE:5B:23:BF:52:57:E4:1D:9C:E5:9C:98:94:BD:03:41:42:D5:6E:F1:20:A6:40:F4:70:0C:F8:4C:F0:61:9B"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: miyanice.edgeone.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 18 Feb 2026 12:27:10 GMT\r\nEtag: \"24d7ddb5c7aa53b8c7ee52120a734171\"\r\nContent-Type: image/png\r\nCache-Control: public, must-revalidate, max-age=0\r\nAge: 767939\r\nContent-Length: 3728\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nServer: edgeone-pages\r\nDate: Fri, 27 Feb 2026 09:47:09 GMT\r\nEO-LOG-UUID: 1390631643973048247\r\nEO-Cache-Status: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"24d7ddb5c7aa53b8c7ee52120a734171","sha1":"645ae0a128802031ff0240848be6b777fb66d162","sha256":"97613356e02585ed3ce2c878ffc75556a97e6e33d6c96bc7bfddba267dd9dd0e","sha512":"5d15f1a456c4beb0874e6ccdc97407cf85ad3ddca909e58381f2d295fce13863f34b0a06101eea4bf2f4fb2cdf34be70cf39cdacf52ad6dc704e2d76ac45e16d","ssdeep":"","tlshash":"d9713b1ffd512e613399716374f1892b24221e8216e8521de49ec9290db61e758382df","first_seen":"2026-01-20T06:40:19.396642Z","last_seen":"2026-06-29T05:00:11.081824Z","times_seen":65,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":409,"connect":17,"send":0,"wait":25,"receive":1,"ssl":253},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"miyanice.edgeone.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdg188jp.online/","date":"2026-02-27T09:47:09.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:50 GMT","end":"Mon, 20 Apr 2026 08:39:49 GMT"},"fingerprint":{"sha1":"95:AF:DB:72:07:D8:8F:52:E5:50:5C:6A:7A:F5:37:62:9E:55:88:49","sha256":"D1:8D:14:23:A3:DB:4A:37:E4:DE:50:BF:5D:73:5C:7F:30:F3:46:52:1D:EA:45:33:50:95:61:CD:CC:ED:6D:6A"}}},"request":{"raw":"GET /rtv/012601162341000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdg188jp.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2965\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 10:36:26 GMT\r\nexpires: Thu, 25 Feb 2027 10:36:26 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"bcfe0d3a461d36bf\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 169843\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7798,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7676)","md5":"8d1e1939a681e26ad7bac3e1bc7a4698","sha1":"1b6b404001ca244b6617aab982989604eb5db41b","sha256":"32a998421e9461bc53f942def0e915f0c7100cd4db2e516221bd443494147631","sha512":"af0ab1fedb33087a7bf24b01fdf1e1d7588e518104c563e448d68d0a4fed2c7a813f98e567530ba239e574abfeafdc4886b5e99d531ff14a7e075dff61f19008","ssdeep":"96:GKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:GKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0af196dc7ac2b83a5757b4b780af414fa63bb94624ad9120d120f0d83cb995ed633e5c","first_seen":"2026-01-27T21:42:06.36181Z","last_seen":"2026-06-29T08:09:07.891513Z","times_seen":2154,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":59,"dns":1,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"miyanice.edgeone.dev/logo.png","fqdn":"miyanice.edgeone.dev","domain":"edgeone.dev","tld":"dev"},"ip":{"addr":"43.174.247.29","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mdg188jp.online/","date":"2026-02-27T09:47:09.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.edgeone.dev","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 20 Nov 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:CA:B6:6A:0A:FF:05:33:79:85:57:92:0C:82:B6:ED:89:51:FA:DA","sha256":"58:DE:5B:23:BF:52:57:E4:1D:9C:E5:9C:98:94:BD:03:41:42:D5:6E:F1:20:A6:40:F4:70:0C:F8:4C:F0:61:9B"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: miyanice.edgeone.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 18 Feb 2026 12:27:10 GMT\r\nEtag: \"2140d1f86ca8a676445124c531688839\"\r\nContent-Type: image/png\r\nCache-Control: public, must-revalidate, max-age=0\r\nAge: 767894\r\nContent-Length: 41413\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nServer: edgeone-pages\r\nDate: Fri, 27 Feb 2026 09:47:09 GMT\r\nEO-LOG-UUID: 4773054287447307641\r\nEO-Cache-Status: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 135, 8-bit/color RGBA, non-interlaced","md5":"2140d1f86ca8a676445124c531688839","sha1":"1c39b89fa6e4830d9a07a849fc419b4002039a4f","sha256":"4fd2e1745c31c976d2903c726ecdc77a672ba789032af7c4b8939cfada73caec","sha512":"3d031dbce978e449f0c80d5f4bd126e8c2f33ccef2987fd9d098b155da5aa348f94fca9d7c271fa0a10b14f8cdeef3335fc63ee42dfd5dd59738af7bbde571d0","ssdeep":"768:x+tpq485BLys/GdarduUZFjHawrQClbeVaNXlyv8SYyFURcL:xqy5xlsUqwrRlbewNclYH4","tlshash":"2303f1d2fc40adf8ec9eb53975e62cc49dd7481a610d231eefa20ab70c705458daaa43","first_seen":"2026-02-20T10:07:49.805662Z","last_seen":"2026-04-05T19:17:08.423636Z","times_seen":32,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":191,"dns":2,"connect":17,"send":0,"wait":19,"receive":1,"ssl":175},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"miyanice.edgeone.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdg188jp.online/banner.jpg","fqdn":"mdg188jp.online","domain":"mdg188jp.online","tld":"online"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mdg188jp.online/","date":"2026-02-27T09:47:09.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdg188jp.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 07:02:24 GMT","end":"Sun, 24 May 2026 07:02:23 GMT"},"fingerprint":{"sha1":"BF:99:0D:65:21:BF:1D:CB:BD:42:23:91:79:0E:66:78:22:8D:1E:35","sha256":"3A:80:D0:91:3E:BE:B3:9E:55:E7:B7:E4:C3:2E:93:E1:2F:20:C7:6A:6E:4D:80:0A:2B:0B:D1:A8:53:22:20:FE"}}},"request":{"raw":"GET /banner.jpg HTTP/1.1\r\nHost: mdg188jp.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdg188jp.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 09:47:09 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 07:15:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d500b-b511b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 168528\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRPcBG90LtMPwX6Um9nBgZq6HKj73UbUwp8qakLcDXVO01hFnEQJ%2F84vxFVBXDqwISJaiEs6Ndy5%2Bdz8Ny1sBxgXbH8JRHXJmxmUj24BLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d46c25928f12382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":741659,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1080x1080, components 3","md5":"c26ab2d986ed9f4a0e4e3a77d83ae61e","sha1":"f9fb9a1f611915016282ecfd07fb830f177eb963","sha256":"008253ef730f97bc83fc2ed93a671ba7378d41492dd765b43bdd48cf5f1563cb","sha512":"8e69f68c2a2fd7e666ea953104a832757ae7f13f525a277e174dbaff15c4242828754e3a9b237183eae2c4b15c9276f0255ede410732435575057e0792e9b98c","ssdeep":"12288:R3vXuSCxLUG6aoVLR+wbsg4Nja03C1Q1AWjg5EOvNWJSTLN/d/gKnx/Djjcq2:R3fup45ao/+wwg4NG03OQ1AWONWcTz/C","tlshash":"77f423747e1488a3aec832443ef25d7363a68e417ad4112d703f898ae35edd46ced25d","first_seen":"2026-02-27T06:55:21.971451Z","last_seen":"2026-02-27T09:47:32.552116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"mdg188jp.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdg188jp.online/","fqdn":"mdg188jp.online","domain":"mdg188jp.online","tld":"online"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T09:47:08.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdg188jp.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 07:02:24 GMT","end":"Sun, 24 May 2026 07:02:23 GMT"},"fingerprint":{"sha1":"BF:99:0D:65:21:BF:1D:CB:BD:42:23:91:79:0E:66:78:22:8D:1E:35","sha256":"3A:80:D0:91:3E:BE:B3:9E:55:E7:B7:E4:C3:2E:93:E1:2F:20:C7:6A:6E:4D:80:0A:2B:0B:D1:A8:53:22:20:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mdg188jp.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 09:47:08 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 07:15:23 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grgMNh2p7rPhQ98ZUsFzgiFz60ecA%2FEpK4hhulQ%2BnnXnqEaNjRbHFt8HY8cK1xZbD99Rt%2F5qatv1JUwlKdx94Uem%2BP%2Fwy8bWKnyVLI3oig%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d46c250daa2ea60-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":6524,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"8774ecd9c61a43439579ea58a81e9711","sha1":"8f9c3b2cb8ae721e2cb9ce1e0f9217b6da3201bd","sha256":"69974217b81af96f955fabd9bd9516a2bc7694ea2ee388d92dfbcf9b84828b6f","sha512":"edf770571ad9d091eae1a1445e37b915e424a601c414647e1521d5898c903c7a2362285157b810f090e76d123dac2e97be5fa1bec9eec93a0f70ac18728aa81b","ssdeep":"192:ZPBsqw/g/ekRklkTkq9J2jqyp0s3YXQqgfAu0N20:A/g/S99V0","tlshash":"94d140669a4150066233d3b1abb7a31ceb235467c74208187bdd37871f796198273fad","first_seen":"2026-02-27T06:55:21.973866Z","last_seen":"2026-02-27T09:47:32.554861Z","times_seen":2,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":74,"dns":44,"connect":8,"send":0,"wait":568,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"mdg188jp.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdg188jp.online/","date":"2026-02-27T09:47:09.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:50 GMT","end":"Mon, 20 Apr 2026 08:39:49 GMT"},"fingerprint":{"sha1":"95:AF:DB:72:07:D8:8F:52:E5:50:5C:6A:7A:F5:37:62:9E:55:88:49","sha256":"D1:8D:14:23:A3:DB:4A:37:E4:DE:50:BF:5D:73:5C:7F:30:F3:46:52:1D:EA:45:33:50:95:61:CD:CC:ED:6D:6A"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73111\r\ndate: Fri, 27 Feb 2026 09:47:09 GMT\r\nexpires: Fri, 27 Feb 2026 09:47:09 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"cbf8b0320ab789fb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284617,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"de93c62fe8d520d5f20d3a375921f388","sha1":"ecc3eb0c77b12d60831c1f456bad0302b4d5db83","sha256":"07443ee9c85233c09c22c0668278316d8d4c25b7a5af83eba6ac761f30b75dff","sha512":"ea341717b7f75186720b4a3aab7f653eebeafb92ee328fc9fb2b2eee0365e201b11353a0f1d0fd5c1c8f8c06a134626f38b4f3375513675a9d1fa78ee065c156","ssdeep":"6144:HoUwkmOu6CFmZZoS2/VdK/HWL1Uqb9W9z:IlLWdYeW5Uqb9Gz","tlshash":"6154949db296b0724793b075803f150ae33ba855240a812cf56de9d67cbcd8aa137f7c","first_seen":"2026-01-27T21:42:06.365435Z","last_seen":"2026-03-17T21:09:47.691036Z","times_seen":2185,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":123,"dns":52,"connect":7,"send":0,"wait":17,"receive":14,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}