{"report_id":"66b34ef8-1ac7-45df-932f-79fdd9e1c517","version":0,"status":"done","tags":[],"date":"2026-07-12T20:21:37Z","url":{"schema":"http","addr":"niurengu.com","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":0,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"niurengu.com/","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"title":"Online Customer Service - Visitor","dom":{"size":18791,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2c7558008d2071c3d53ffd1fb1e9f590","sha1":"eae94ec45c536512b94029d440b08b4942a1f05c","sha256":"7e0323a5259b81a4ec97a09ecb930a702c416e2f50ae53e95dec2ab66d8e41e0","sha512":"020153bac54a9f02e70521f2ab44d5d932928557914eef143c11184fc7b8fb9e05d213d4a6adda84bab1ae70af6528bbb1c3f33e967611b787f908432b5dc814","ssdeep":"192:PDCwq8MTvcMSzh59py4UtJ5ADD3SEuf9piQ7/8w5leUyk5EktyJ2IZy6y2/9Xkmd:/B0c7JP1uNEp3sw","tlshash":"c582e76b6df72161ea23b039775fb20d712181138505ce44bdcd96948f84f240afabe9","dom_hash":"domhash9735d80bbfe9c9546de5f23ebd6a8cb2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"niurengu.com","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":0,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:21:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"niurengu.com","ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"domain_registered":"2026-03-28","domain_rank":0,"first_seen":"2026-07-12T13:52:52.455711Z","last_seen":"2026-07-12T13:52:52.455711Z","alert_count":0,"request_count":14,"received_data":24676,"sent_data":8903,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:30.479Z","timestamp":1783887690479,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:30 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:34.480Z","timestamp":1783887694480,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:34 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:13.859Z","timestamp":1783887673859,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:15.854Z","timestamp":1783887675854,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:15 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:22.290Z","timestamp":1783887682290,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:22 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:26.479Z","timestamp":1783887686479,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:26 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:28.479Z","timestamp":1783887688479,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:28 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:32.479Z","timestamp":1783887692479,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:32 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:21:10.649Z","timestamp":1783887670649,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:11 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nSet-Cookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; expires=Mon, 12 Jul 2027 20:21:11 GMT; Max-Age=31536000; path=/\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18778,"size_decoded":6053,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ecbeafda89b36555482d405724a89705","sha1":"07e8b2639323938f62d8c896c324b885f72bd98c","sha256":"1d6b43203d1313477146c748822efde69e1741846c7b3500d42e2825714b7e34","sha512":"3694ac950f359e50aa40627d8beb66712b4ff9cce051239b37a1e6c21041c9da1d9d11dff2ff675d6b61d2d8a76ca6c6966b775cff1fbccf0a7534f847f4df9d","ssdeep":"192:FDCwq8MTvcMSzh59py4UtJ5ADD3SEuf9piQ7/8w5leUyk5EktyJ23Zy6y2/9Xkmd:ZBbc7JP1uNEp3sk","tlshash":"5382d76b6df72161ea23b039779fb20d712181138905ce44bc8dd6948f80f640afabe9","first_seen":"2026-07-12T20:21:38.943989Z","last_seen":"2026-07-12T20:21:38.943989Z","times_seen":1,"resource_available":true,"data":null}},"time_used":950,"timings":{"blocked":-1,"dns":298,"connect":160,"send":0,"wait":165,"receive":0,"ssl":326},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:11.869Z","timestamp":1783887671869,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:11 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nSet-Cookie: KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4; path=/; HttpOnly\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":508,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/favicon.ico","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:11.969Z","timestamp":1783887671969,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://niurengu.com/\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:12 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-18T20:17:15.937819Z","times_seen":541271,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":165,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:18.028Z","timestamp":1783887678028,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:20.114Z","timestamp":1783887680114,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:20 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niurengu.com/api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0","fqdn":"niurengu.com","domain":"niurengu.com","tld":"com"},"ip":{"addr":"198.252.106.21","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://niurengu.com/","date":"2026-07-12T20:21:24.479Z","timestamp":1783887684479,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niurengu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 08:26:15 GMT","end":"Fri, 11 Sep 2026 08:26:14 GMT"},"fingerprint":{"sha1":"A2:3B:5A:58:E6:67:F9:F6:69:D3:9E:0A:B1:1C:29:0C:29:5C:74:E8","sha256":"AD:B2:24:33:55:F0:B9:7A:D9:2F:66:3A:4D:57:17:B1:D2:13:0D:A8:01:55:3E:47:A6:68:40:FD:20:CA:8A:90"}}},"request":{"raw":"GET /api/get_messages.php?visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66\u0026since_id=0 HTTP/1.1\r\nHost: niurengu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://niurengu.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: visitor_token=8ca73f23a82c1fdff938b47f0105936d677676d7b310b095ff0bcd9f07dcbc66; KS_AHJSID=un80n2dlv6ke99t9c58dm37dg4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 12 Jul 2026 20:21:24 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"e952bc72040fa6784c9dc15acd70f159","sha1":"303552de30dc93d035c8d5c8ef449c70f21be517","sha256":"de92fce6436eef3f419e7df7002ad157776fef19d5c41860772f4a88f7031332","sha512":"1edaa384e7725b297911d4e575b10990c1cfd2184af721d5aedd6fdfb436b596691b8e81bebc57d009dcc2bb5a76d77e72097dfb883afd730fc01f1e2329fa82","ssdeep":"","tlshash":"66a00224ee261c5d5a09d371b000fa12c6a61215f11975159dcd605c9356c9f6453993","first_seen":"2026-07-12T13:52:56.832053Z","last_seen":"2026-07-12T20:21:38.933692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}