{"report_id":"67932a66-1073-4576-a1b7-78a337957743","version":6,"status":"done","tags":[],"date":"2026-03-03T16:12:04Z","url":{"schema":"http","addr":"90583.vip/","fqdn":"90583.vip","domain":"90583.vip","tld":"vip"},"ip":{"addr":"137.220.156.180","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"p20.vgpjm.guru/?cid=9671283","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"title":"p20.vgpjm.guru/","dom":{"size":35707,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30694)","md5":"06e6895437597e4da8fb57ddb32ae28f","sha1":"aeb9530c120793d1554296a916452ea8120c7f6a","sha256":"63ab9b062cfc03bc340342d2b27c0b0f80c7e59e99489e2e6637cc9165750820","sha512":"fa81ce2271f422f06ec9502a898220c615a976d2295f3b2c320f063fb44d1c49c02e4de7dec89c0d3d4adafea9ea8b6527beff760978b38037a0281fa3c05838","ssdeep":"768:wQxatKOQ6JxY1Qw3KbNucjws+JGwiw8Se1BMeqSSQ1:wrtKOQ6JxKK/15tjr","tlshash":"bbf2dafa6b3c56ec14874badef32a454234eb0fe769489e0691e8ef44593dd8e647c00","dom_hash":"domhashc40ccb44cddddb8b816e83050d799999","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"90583.vip/","fqdn":"90583.vip","domain":"90583.vip","tld":"vip"},"ip":{"addr":"137.220.156.180","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T16:12:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-03T16:11:48Z","timestamp":1772554308,"ip_dst":{"addr":"Client IP","port":38988,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"134.122.176.117","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 25","source":"{\"timestamp\":\"2026-03-03T16:11:48.135385+0000\",\"flow_id\":1803669507134646,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"134.122.176.117\",\"src_port\":443,\"dest_ip\":\"172.18.0.35\",\"dest_port\":38988,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400024,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 25\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-03-03T16:11:47.840886+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"90583.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wwww11587.apy0530.com","ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-12","domain_rank":0,"first_seen":"2026-02-20T02:09:36.939733Z","last_seen":"2026-02-20T02:09:36.939733Z","alert_count":0,"request_count":2,"received_data":6790,"sent_data":1603,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}]},{"fqdn":"dsaf5255fs1.czffm0530.com","ip":{"addr":"118.107.9.100","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-05-12","domain_rank":0,"first_seen":"2026-02-20T02:09:37.09551Z","last_seen":"2026-02-20T02:09:37.09551Z","alert_count":0,"request_count":1,"received_data":764,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zxaqt3zvhu6zv.ycizl.cc","ip":{"addr":"14.128.63.158","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-05-12","domain_rank":0,"first_seen":"2026-02-20T02:09:36.931793Z","last_seen":"2026-02-20T02:09:36.931793Z","alert_count":0,"request_count":1,"received_data":461,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wwwhdffd.czffm0530.com","ip":{"addr":"134.122.176.117","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-05-12","domain_rank":0,"first_seen":"2025-10-17T08:02:31.010087Z","last_seen":"2026-02-20T02:09:37.996958Z","alert_count":0,"request_count":1,"received_data":762,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"146.103.81.185","ip":{"addr":"146.103.81.185","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":843,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"153.43.21.4","ip":{"addr":"153.43.21.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":5768,"sent_data":5461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p20.vgpjm.guru","ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":31,"received_data":755224,"sent_data":13965,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"esfsgdh42448.rtrkg0530.com","ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-12","domain_rank":0,"first_seen":"2025-08-13T01:18:26.797344Z","last_seen":"2026-02-20T02:09:38.448169Z","alert_count":0,"request_count":10,"received_data":856131,"sent_data":6991,"comment":"","tags":null,"fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"eqa23cvz.ycizl.cc","ip":{"addr":"27.124.12.58","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-05-12","domain_rank":0,"first_seen":"2026-02-20T02:09:36.936989Z","last_seen":"2026-02-20T02:09:36.936989Z","alert_count":0,"request_count":1,"received_data":461,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sadhfht3zxzc1qzju5.9sj7x3j.cc","ip":{"addr":"118.107.9.100","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-05-12","domain_rank":0,"first_seen":"2026-02-20T02:09:36.934099Z","last_seen":"2026-02-20T02:09:36.934099Z","alert_count":0,"request_count":1,"received_data":461,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"211.43.148.31","ip":{"addr":"211.43.148.31","port":443,"asn":54994,"as":"ML-1432-54994","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":853,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"os7md.hpihn.cc","ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-12","domain_rank":0,"first_seen":"2025-05-23T04:40:46.640208Z","last_seen":"2026-02-20T02:09:38.914897Z","alert_count":0,"request_count":1,"received_data":477,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}]},{"fqdn":"90583.vip","ip":{"addr":"137.220.156.176","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":50833,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"p20.vgpjm.guru/","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-17T06:25:29.836564Z","times_seen":31185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@vue-Dhdcds7m.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"c6aeb50904c2b0cefc86d2c352cf9890","sha1":"6532dce3f5f4b064b9945152e90ac84a795a3484","sha256":"4fdb776a11b806f8443684362524dc999b24cc9165a123604075fdda7e7684a6","sha512":"64186490f4d6b60b0bb05b39985abda1215448465a2287c7cc821e94370285a2f0999cc93e47d0c0de904fb2cb634aa31febff67522e5896e0c267beaab3f6ab","ssdeep":"768:BaxDn7WN0FXq3YmibvZ3aODa6P5s0hrj4tRGMEozk7iOpT6EGukWE42VVhvpwXnv:hPS356IbmABYL0HBHCPAERDzt5Y","tlshash":"9b63f8e83192b46163fa19f2007b0406f3392d56384ad998b26dfddb3e7240551bbebd","size":71406,"data":"","first_seen":"2025-02-21T19:40:40.34669Z","last_seen":"2026-04-17T05:18:15.338535Z","times_seen":2325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@vueuse-DbCv3QsL.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"aeeaabeed5bfbd4aa4fb916ce41c5a37","sha1":"101668cee7a43bf15fa5fa0b9f5f96dcc532593d","sha256":"5a146630243662447021e01f884b29241743e4804708efca6dd250f40a90f7bf","sha512":"8504608a2d62cb53c2b485448798d9ec0ee0c3a44c1c4927931086fb0bab48c3dddb4292705a56862ac53045a763b9f14a394b7dc69a3be809ed739c4507317d","ssdeep":"96:9upsoTxFpdpeJMYTEzFyMBHf2bPXcWaVJ/hmVd51U4gU9nAgXYqL1KlaFfzhFp/7:9updpmm0EpyMB+bPZa9E51UPInAgoqBd","tlshash":"e791b8cd709670b2337a9d95d07b420eba283551345fe4d0a01e5ef63e21da27362dee","size":4582,"data":"","first_seen":"2025-05-08T17:26:34.279373Z","last_seen":"2026-04-13T12:57:17.134612Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/vant-Bx1Nn4mE.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"0d927aa42a006a8ac41b97df6193f8c1","sha1":"54659d28059e78eb4c5c3cef7af3afba2d1c00bc","sha256":"e1400d71107a32a130fb73330c93affdc1aa45901df35d4b9cb8d2888d8b86ca","sha512":"3256e8a2cadcb109a62392e2d8aea27da5749a73d5b0fa7741a50c9e1ae4cdc97acbc6871b05e4abc1b3182e6c7631e4fd70e6636d2e595907f8fd63882776fa","ssdeep":"768:/HcoeRdR113jDKzaKhIP3aJZmHD19BOoTEwVde0ewh6Kg462KIGsEnCrE/jXg:ko0DKzO3aUnMULPKXg","tlshash":"54b219993087f43f63f585ee40290201a3291b6a341ec4ecb53ceedbb299c5974b6b35","size":25153,"data":"","first_seen":"2025-02-21T19:40:40.350954Z","last_seen":"2026-04-17T05:18:15.324995Z","times_seen":2323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/zh-DULCbSWW.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"194f40d87610e226ebeee24a30c1469f","sha1":"61f4745d953cea256a8db3dec6c88d58e81cbd0a","sha256":"fcfc362eb502b8b957111b25a181ed5c2767f8de933b7148bc43ed647219e57a","sha512":"e8237d06dabe6d407d86670e6ca5aabaca2bccfbd676f5683c7abb4f9225da0fd57b890bdbbf2749eecc18a3b8501676f2d56fd07f830e064224cf09558a79a1","ssdeep":"","tlshash":"e381fb9d47fccdbc034a424e3f2b4158b0981eba93d9dce45fa286ea30acb03560159f","size":3969,"data":"","first_seen":"2025-05-08T17:26:34.272353Z","last_seen":"2026-04-13T12:57:17.132047Z","times_seen":1070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-D1IkuzHd.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"65adb1de64ac6bc74801236e2f2bac0f","sha1":"a29d688c2171586d01161a3f2b05c253e8a1c0bf","sha256":"3cd0172a9e18249c9686fcd9dbbb9afc247f5f3eb80f59140cbbc522e5c496e5","sha512":"13f1e5b8c0254a455318e1aad3119f2b25d3653348e493dfb191cc0563ebcfc14f9469db804398c872963d5b809ecd7b0be02d3690034c6581eac534de7677d5","ssdeep":"192:bywiDBROxLwxW7/RPS7XqbU5U3JkE4yQrp3N+0Gj4:OY8xchbX3JAJp","tlshash":"c4d17609fc194a78d3b258d8b24905001165ab9392bcc2b4f6bf67690bf4d609fde4fc","size":6426,"data":"","first_seen":"2025-06-10T13:59:43.277818Z","last_seen":"2026-04-11T09:39:25.392889Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-CI2NfpH3.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"9051c7064ae4dab6436821b2cb52c17e","sha1":"4169db4ae90958140d4fe4d8a29ff29ea06d7644","sha256":"d853f9df8125b638c1960c7ef3c5c2996c886c71fabc0e3c945d6553bcebb412","sha512":"08246b01ce8d827d13b3594ae440401f0578378bd4e5f8d17793b6d053974311403b17106ad0a52c0570cd7cc21158696aaed105ab0d2dc309000ef3e949d4df","ssdeep":"96:S1cRIUAnJLBLA4xRlb5cPtG5bdsVtWGQsqYfPpVI6dieuMk9NBK6XsK6XbHqoYNd:SOshBjxRF5a2bdH+K67FsN4676e7","tlshash":"4eb1c68ef076c83aa2b7853c951e0852a249efd29076a36436fe8e3c17f6d144367359","size":5485,"data":"","first_seen":"2025-06-10T13:59:43.281149Z","last_seen":"2026-04-11T09:39:25.371703Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-DImzadBO.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"124d32186e00b82694129065952da9bb","sha1":"be5f966da05e7efb2567f71080e9936271f8aec2","sha256":"17c88b9c32d825b5a4b03f5410e3562dd79f52438391f477e359d3a1cab118ea","sha512":"a59f39a7ad2254b458e5f1de6fbc59e294aa3349d3b0b115029f2870b5ce9a08d13391816776fb00a91e17274bb8fbe2629a272c494bf69cf5aef6743b982cee","ssdeep":"","tlshash":"7c21410af145acb902b644986004006122ea4bae42f8d7e0a2fd8f9943b4c70d57ed7d","size":1419,"data":"","first_seen":"2025-06-10T13:59:43.278807Z","last_seen":"2026-04-11T09:39:25.388749Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@vant-D2LFdCs1.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"5a31aa0fac503f32a3687ba82fb01690","sha1":"0404c8523b23c9744e43362e99df139dd3ab20cf","sha256":"4e1b691d592508249cf1138fff707c216f0905276259fb8239d19177bdb2b253","sha512":"05452e512d31804c25b783d741f8dfc3f5dc78ddcfeaa1b6c61340b13141571e63ccd921f44565aa51cfcb6459a797cd9ac305e99c786b193a841595fbb1b11b","ssdeep":"","tlshash":"e05165ac3a51bc34826a1ea2427f9ba9b2163924704b8050e008dd1539518a3c7fffee","size":2638,"data":"","first_seen":"2025-02-21T19:40:40.367652Z","last_seen":"2026-04-17T05:18:15.344081Z","times_seen":2325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-17T06:12:17.990922Z","times_seen":34714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/ua-parser-js-CYPM8Uy3.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"37ca72cad4c54af7e2db850e29456f41","sha1":"4b375267b25c27f98a19f49a219fb079c6a34273","sha256":"072514e51219dce8ded38bf1d896488cced8bda0bd5b16a811b3530285e0aac1","sha512":"46b09a39f16ae5b465db0ce88814c1a518994161892e5a835d6f6c5287ea776d090dd71bb65485004ed501bfaefc186bf97cbc0388e2937c655f66da3105edc9","ssdeep":"384:+xeBq/CqnwcPzbLPIHc1iO5/larp+u75RsmydFWbBulR/beum5VHjFiUavV7PB+:+xeBRqnwwb7I81iO5/Erp+EQmmv/beuW","tlshash":"4ea2a66fe2a5bb3c07dde508d27908486e2b1d2def84b0b4bf98a191e9746c50153b37","size":22031,"data":"","first_seen":"2024-11-30T21:52:39.911969Z","last_seen":"2026-04-17T05:18:15.322863Z","times_seen":4269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-BPSXan64.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"5505655adfd3af01f694c7db45f9448d","sha1":"aa07f4ccfbdf3141d3c929b9f25d0e8e99057bb7","sha256":"c5be828865b370c7f9cce5946a76bc066283e413055cbbed17697dbf2f4bc29d","sha512":"cdf8f3e63b47ea21b11fee54ccc707f65eaa3d7174ded7cc9d2044affc89f48cd5bee732b3c38090a17aa51192dd90cbf33906f358e2e64a072e85c2afcc7bcd","ssdeep":"1536:mPqvPgJw6ItdVY1Vfyqhq3WoIw/qoNRJ03+PdZT1F/+5teJHP:mivPgJwx9Y1gqhPD0/T105tkHP","tlshash":"3fa35beeb279653c22d309acaa3b1140631d7ca63585c4a0f66e8fb41ba7c58f257f14","size":102097,"data":"","first_seen":"2025-06-10T13:59:43.273681Z","last_seen":"2026-04-11T09:39:25.375719Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"90583.vip/","fqdn":"90583.vip","domain":"90583.vip","tld":"vip"},"ip":{"addr":"137.220.156.176","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"71fcafc2fd8cc08c6314c6e22766d9f6","sha1":"fc4a9bde24116bc7ae0a548114f167cb19c2de46","sha256":"6589f06f224dfd8d42012311917d1089174b8f66344db4c4b8346c07eb5c0f56","sha512":"101b4c03d51370449e32bf40b64af18ccf1077b41a9dbff915453232f77472939d64c43190ee9f354beadf0de9454cea89eed63ea25eed8a82c5c7625c54a003","ssdeep":"768:9XNheSw7iVCIs5aYI36lfOCBk7+Ap7rnXwwfCBs+9CC7GkL85gUw/Xu4MA:9XNhehIKHIqlmCBk7+gXnXszV9","tlshash":"ee3361f3442b098503a5c897989e3d0ccb5379af0dd8ba85f6bd84989fdc23e6972474","size":50284,"data":"","first_seen":"2026-03-03T16:12:25.382009Z","last_seen":"2026-03-03T16:12:25.382009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@cg-gj7GXBFN.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.180","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"2f67c60f5e2248291ab113749bf17af1","sha1":"3bb397df41f44ad9d2e177bb2909ff625300091e","sha256":"69b9978e158acdbba9d62b4f0e46b749bcf0078c8f782a39cce215e75ff191bb","sha512":"aa96817c7dae23fe7a7a401bf2233f8c1143a8daa85aafe00aae33a19e62b8e916bbf6a02c7fd76dc7c50a1b14361c469ecd97e12626f6b455498a283d2e7662","ssdeep":"384:lHNz4tbyCmydEZG/ZyUTXB9iq9ZIRNBLB4Ck0YTsgDNtUxUyztuGon8M+EDWzW0q:z4tbyCmydEZGlTXmgZIrBLBlk0qsuNGQ","tlshash":"2ea2b3f83093b47153aa14e7407b0102f36a3994300e9594f69dadeb3e7641a52b3fbd","size":22808,"data":"","first_seen":"2024-09-23T04:34:25Z","last_seen":"2026-04-17T05:18:15.339386Z","times_seen":4588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/crypto-js-BH_E2a6S.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"cdb4ca0e310f499c43f1b943f23a1a5b","sha1":"1b69d808334b455f965d2ec277c72d741a7a2138","sha256":"7625e727f0ef0b21e0be752cf81d57d2c69956774577d14770b11392ee25a849","sha512":"b5bb25cf594092bceebd532d1ec1b752e16eec59570f21188cc2854f1d574b85e13c0d45a23367cc8187e17592a876b677dd5d70ee772a1269e896b46e653d22","ssdeep":"1536:/GrdeoUguEaND8nKC5XYDyPtNPU9ArHMt:/Grsik","tlshash":"2e634ac5368874d2a3ab34e0193f644bb27739e60aac8598e164e9ddbdbc6cc4035d3d","size":68706,"data":"","first_seen":"2024-12-20T00:48:17.454242Z","last_seen":"2026-04-17T05:18:15.359694Z","times_seen":3453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"153.43.21.4/hall/api/agent/promote/binding/reportViewV2","fqdn":"153.43.21.4","domain":"153.43.21.4","tld":""},"ip":{"addr":"153.43.21.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:47.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"153.43.21.2","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 30 Dec 2025 08:33:37 GMT","end":"Sun, 31 Jan 2027 08:33:36 GMT"},"fingerprint":{"sha1":"F6:83:67:B1:3E:90:B8:15:01:1D:80:4C:41:D0:AE:25:A3:D9:C5:5F","sha256":"03:52:F2:C4:B9:04:1A:94:CE:CF:EE:1C:67:88:3C:48:12:65:3C:43:F6:DD:39:AA:11:08:4C:A1:D2:C3:DB:D0"}}},"request":{"raw":"OPTIONS /hall/api/agent/promote/binding/reportViewV2 HTTP/1.1\r\nHost: 153.43.21.4\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:47 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nset-cookie: acw_tc=0a094e6517725543078184622e4e2d5830c8bf7367ce88b3409ca7d1ee7c42;path=/;HttpOnly;Max-Age=1800\r\nx-saas-server-id: 844988bcd4-qz68g|8a937a464446e2195e8fdbfe8ee05dc8\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 jp184:2 (W), 1.1 jp18:20 (W)\r\nx-px: ms jp18SIN, ms jp184SIN(origin)\r\nx-ws-request-id: 69a70843_jp18_21925-38969\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T06:13:31.670337Z","times_seen":13848739,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/assets/index-1dkvjLb8.css","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:50.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /assets/index-1dkvjLb8.css HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/?cid=9671283\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:50 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-807\"\r\nExpires: Wed, 04 Mar 2026 04:11:50 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2055,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2054)","md5":"bdca537da49d98687c243d065c07b193","sha1":"d7cb8c7b1811177cc73410e58db03e6eb0b3e805","sha256":"2ae15d819b72f27063812ace8f2b80b9967c61baaae9b0b87f0bf60c95e40349","sha512":"d4b741b8ed57a3aab85068151438115a0307855c2cd39c4c638326811fa67ebab880271f90324783746928fe4144fa1149a52c6d416f76319e92d25d8dda452c","ssdeep":"","tlshash":"f341f137fba62128d137e1a67a4849487130d560e7070b98bba35d2695cb6db35b41cc","first_seen":"2024-09-29T15:23:27Z","last_seen":"2026-04-17T05:18:15.371211Z","times_seen":5018,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-D1IkuzHd.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:50.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/index-D1IkuzHd.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/?cid=9671283\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:51 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-191a\"\r\nExpires: Wed, 04 Mar 2026 04:11:51 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6426,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5995)","md5":"65adb1de64ac6bc74801236e2f2bac0f","sha1":"a29d688c2171586d01161a3f2b05c253e8a1c0bf","sha256":"3cd0172a9e18249c9686fcd9dbbb9afc247f5f3eb80f59140cbbc522e5c496e5","sha512":"13f1e5b8c0254a455318e1aad3119f2b25d3653348e493dfb191cc0563ebcfc14f9469db804398c872963d5b809ecd7b0be02d3690034c6581eac534de7677d5","ssdeep":"192:bywiDBROxLwxW7/RPS7XqbU5U3JkE4yQrp3N+0Gj4:OY8xchbX3JAJp","tlshash":"c4d17609fc194a78d3b258d8b24905001165ab9392bcc2b4f6bf67690bf4d609fde4fc","first_seen":"2025-06-10T13:59:43.277818Z","last_seen":"2026-04-11T09:39:25.392889Z","times_seen":126,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":244,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-D1IkuzHd.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:50.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/index-D1IkuzHd.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/js/index-BPSXan64.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:51 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-191a\"\r\nExpires: Wed, 04 Mar 2026 04:11:51 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6426,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5995)","md5":"65adb1de64ac6bc74801236e2f2bac0f","sha1":"a29d688c2171586d01161a3f2b05c253e8a1c0bf","sha256":"3cd0172a9e18249c9686fcd9dbbb9afc247f5f3eb80f59140cbbc522e5c496e5","sha512":"13f1e5b8c0254a455318e1aad3119f2b25d3653348e493dfb191cc0563ebcfc14f9469db804398c872963d5b809ecd7b0be02d3690034c6581eac534de7677d5","ssdeep":"192:bywiDBROxLwxW7/RPS7XqbU5U3JkE4yQrp3N+0Gj4:OY8xchbX3JAJp","tlshash":"c4d17609fc194a78d3b258d8b24905001165ab9392bcc2b4f6bf67690bf4d609fde4fc","first_seen":"2025-06-10T13:59:43.277818Z","last_seen":"2026-04-11T09:39:25.392889Z","times_seen":126,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@vueuse-DbCv3QsL.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:44.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/@vueuse-DbCv3QsL.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:45 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-11e6\"\r\nExpires: Wed, 04 Mar 2026 04:11:45 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4582,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4581)","md5":"aeeaabeed5bfbd4aa4fb916ce41c5a37","sha1":"101668cee7a43bf15fa5fa0b9f5f96dcc532593d","sha256":"5a146630243662447021e01f884b29241743e4804708efca6dd250f40a90f7bf","sha512":"8504608a2d62cb53c2b485448798d9ec0ee0c3a44c1c4927931086fb0bab48c3dddb4292705a56862ac53045a763b9f14a394b7dc69a3be809ed739c4507317d","ssdeep":"96:9upsoTxFpdpeJMYTEzFyMBHf2bPXcWaVJ/hmVd51U4gU9nAgXYqL1KlaFfzhFp/7:9updpmm0EpyMB+bPZa9E51UPInAgoqBd","tlshash":"e791b8cd709670b2337a9d95d07b420eba283551345fe4d0a01e5ef63e21da27362dee","first_seen":"2025-05-08T17:26:34.279373Z","last_seen":"2026-04-13T12:57:17.134612Z","times_seen":1163,"resource_available":true,"data":null}},"time_used":1421,"timings":{"blocked":577,"dns":50,"connect":259,"send":0,"wait":263,"receive":0,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"os7md.hpihn.cc/ipacdn.txt?t=1772554306544","fqdn":"os7md.hpihn.cc","domain":"hpihn.cc","tld":"cc"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:46.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"os7md.hpihn.cc","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 13 May 2025 00:00:00 GMT","end":"Wed, 13 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"28:E8:85:D6:3B:6A:10:DB:EB:27:83:E5:B8:0A:C0:89:4B:EE:F5:F8","sha256":"93:56:70:B8:8B:D3:58:BF:1C:07:EC:FC:08:17:D2:ED:C5:63:72:8F:1F:BC:D8:A6:07:28:F9:A6:F3:07:65:30"}}},"request":{"raw":"GET /ipacdn.txt?t=1772554306544 HTTP/1.1\r\nHost: os7md.hpihn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:47 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nset-cookie: acw_tc=0a0f6b9317725543073758258e480050df77292d600e186e33276dc58ec10e;path=/;HttpOnly;Max-Age=1800\r\ncache-control: s-maxage=315360000,max-age=0,public\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-credentials: true\r\nserver: gocache\r\nc-type: pf\r\nrid: d0cf03b50d08b1de29ab7160cfaeb9cc\r\nx-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-17T06:16:40.61675Z","times_seen":269389,"resource_available":true,"data":null}},"time_used":1672,"timings":{"blocked":699,"dns":153,"connect":1,"send":0,"wait":270,"receive":0,"ssl":545},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/ua-parser-js-CYPM8Uy3.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:44.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/ua-parser-js-CYPM8Uy3.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:45 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-560f\"\r\nExpires: Wed, 04 Mar 2026 04:11:45 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22031,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22030)","md5":"37ca72cad4c54af7e2db850e29456f41","sha1":"4b375267b25c27f98a19f49a219fb079c6a34273","sha256":"072514e51219dce8ded38bf1d896488cced8bda0bd5b16a811b3530285e0aac1","sha512":"46b09a39f16ae5b465db0ce88814c1a518994161892e5a835d6f6c5287ea776d090dd71bb65485004ed501bfaefc186bf97cbc0388e2937c655f66da3105edc9","ssdeep":"384:+xeBq/CqnwcPzbLPIHc1iO5/larp+u75RsmydFWbBulR/beum5VHjFiUavV7PB+:+xeBRqnwwb7I81iO5/Erp+EQmmv/beuW","tlshash":"4ea2a66fe2a5bb3c07dde508d27908486e2b1d2def84b0b4bf98a191e9746c50153b37","first_seen":"2024-11-30T21:52:39.911969Z","last_seen":"2026-04-17T05:18:15.322863Z","times_seen":4269,"resource_available":true,"data":null}},"time_used":1429,"timings":{"blocked":581,"dns":48,"connect":259,"send":0,"wait":265,"receive":0,"ssl":271},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.21.4/ipacdn.txt?t=1772554306543","fqdn":"153.43.21.4","domain":"153.43.21.4","tld":""},"ip":{"addr":"153.43.21.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:46.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"153.43.21.2","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 30 Dec 2025 08:33:37 GMT","end":"Sun, 31 Jan 2027 08:33:36 GMT"},"fingerprint":{"sha1":"F6:83:67:B1:3E:90:B8:15:01:1D:80:4C:41:D0:AE:25:A3:D9:C5:5F","sha256":"03:52:F2:C4:B9:04:1A:94:CE:CF:EE:1C:67:88:3C:48:12:65:3C:43:F6:DD:39:AA:11:08:4C:A1:D2:C3:DB:D0"}}},"request":{"raw":"GET /ipacdn.txt?t=1772554306543 HTTP/1.1\r\nHost: 153.43.21.4\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:47 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nset-cookie: acw_tc=0a094e7817725543073937085e29f1130f24d21daec487ee377fad95634262;path=/;HttpOnly;Max-Age=1800\r\ncache-control: s-maxage=315360000,max-age=0,public\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-credentials: true\r\nvia: 1.1 PS-SIN-047qh52:0 (W), 1.1 jp18:20 (W)\r\nx-px: ms jp18SIN, ms PS-SIN-047qh52SIN(origin)\r\nx-ws-request-id: 69a70843_jp18_21925-38954\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-17T06:16:40.61675Z","times_seen":269389,"resource_available":true,"data":null}},"time_used":1689,"timings":{"blocked":744,"dns":0,"connect":171,"send":0,"wait":198,"receive":0,"ssl":572},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/assets/index-COToHaxv.css","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.180","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /assets/index-COToHaxv.css HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/?cid=9671283\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:51 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-91c\"\r\nExpires: Wed, 04 Mar 2026 04:11:51 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2332,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2331)","md5":"8d7300530ab2d1528a5a734c1acb4008","sha1":"bad3aae69dc0b50e9debd723f37b223d0ee0d30a","sha256":"58a3f724a179e704b6f8498e96a46e0a686c6f89f000687300cbe5ab15388679","sha512":"d9e2987ce9a37cc010b43ae0d26d96f14b8501c05fb4d5921863fd093ff577c493d82e203c4b5d6b51c04f0e8412996f6d2204911d1bf723e1920d88b824285b","ssdeep":"","tlshash":"3f41121eaba650391037ce897ecc4e244358e653b893dedb75d358524de7acf20231a7","first_seen":"2025-05-08T17:26:34.27449Z","last_seen":"2026-04-13T12:57:17.202663Z","times_seen":1109,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-CI2NfpH3.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/index-CI2NfpH3.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/?cid=9671283\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:51 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-156d\"\r\nExpires: Wed, 04 Mar 2026 04:11:51 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5485,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5482)","md5":"9051c7064ae4dab6436821b2cb52c17e","sha1":"4169db4ae90958140d4fe4d8a29ff29ea06d7644","sha256":"d853f9df8125b638c1960c7ef3c5c2996c886c71fabc0e3c945d6553bcebb412","sha512":"08246b01ce8d827d13b3594ae440401f0578378bd4e5f8d17793b6d053974311403b17106ad0a52c0570cd7cc21158696aaed105ab0d2dc309000ef3e949d4df","ssdeep":"96:S1cRIUAnJLBLA4xRlb5cPtG5bdsVtWGQsqYfPpVI6dieuMk9NBK6XsK6XbHqoYNd:SOshBjxRF5a2bdH+K67FsN4676e7","tlshash":"4eb1c68ef076c83aa2b7853c951e0852a249efd29076a36436fe8e3c17f6d144367359","first_seen":"2025-06-10T13:59:43.281149Z","last_seen":"2026-04-11T09:39:25.371703Z","times_seen":126,"resource_available":true,"data":null}},"time_used":705,"timings":{"blocked":455,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/ua-parser-js-CYPM8Uy3.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:43.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/ua-parser-js-CYPM8Uy3.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/js/index-BPSXan64.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:44 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-560f\"\r\nExpires: Wed, 04 Mar 2026 04:11:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22031,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22030)","md5":"37ca72cad4c54af7e2db850e29456f41","sha1":"4b375267b25c27f98a19f49a219fb079c6a34273","sha256":"072514e51219dce8ded38bf1d896488cced8bda0bd5b16a811b3530285e0aac1","sha512":"46b09a39f16ae5b465db0ce88814c1a518994161892e5a835d6f6c5287ea776d090dd71bb65485004ed501bfaefc186bf97cbc0388e2937c655f66da3105edc9","ssdeep":"384:+xeBq/CqnwcPzbLPIHc1iO5/larp+u75RsmydFWbBulR/beum5VHjFiUavV7PB+:+xeBRqnwwb7I81iO5/Erp+EQmmv/beuW","tlshash":"4ea2a66fe2a5bb3c07dde508d27908486e2b1d2def84b0b4bf98a191e9746c50153b37","first_seen":"2024-11-30T21:52:39.911969Z","last_seen":"2026-04-17T05:18:15.322863Z","times_seen":4269,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/crypto-js-BH_E2a6S.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:44.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/crypto-js-BH_E2a6S.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:45 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-10c62\"\r\nExpires: Wed, 04 Mar 2026 04:11:45 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68706,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cdb4ca0e310f499c43f1b943f23a1a5b","sha1":"1b69d808334b455f965d2ec277c72d741a7a2138","sha256":"7625e727f0ef0b21e0be752cf81d57d2c69956774577d14770b11392ee25a849","sha512":"b5bb25cf594092bceebd532d1ec1b752e16eec59570f21188cc2854f1d574b85e13c0d45a23367cc8187e17592a876b677dd5d70ee772a1269e896b46e653d22","ssdeep":"1536:/GrdeoUguEaND8nKC5XYDyPtNPU9ArHMt:/Grsik","tlshash":"2e634ac5368874d2a3ab34e0193f644bb27739e60aac8598e164e9ddbdbc6cc4035d3d","first_seen":"2024-12-20T00:48:17.454242Z","last_seen":"2026-04-17T05:18:15.359694Z","times_seen":3453,"resource_available":true,"data":null}},"time_used":1596,"timings":{"blocked":550,"dns":54,"connect":243,"send":0,"wait":481,"receive":12,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.21.4/hall/api/agent/downloadSite/regionAccessV2","fqdn":"153.43.21.4","domain":"153.43.21.4","tld":""},"ip":{"addr":"153.43.21.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:48.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"153.43.21.2","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 30 Dec 2025 08:33:37 GMT","end":"Sun, 31 Jan 2027 08:33:36 GMT"},"fingerprint":{"sha1":"F6:83:67:B1:3E:90:B8:15:01:1D:80:4C:41:D0:AE:25:A3:D9:C5:5F","sha256":"03:52:F2:C4:B9:04:1A:94:CE:CF:EE:1C:67:88:3C:48:12:65:3C:43:F6:DD:39:AA:11:08:4C:A1:D2:C3:DB:D0"}}},"request":{"raw":"OPTIONS /hall/api/agent/downloadSite/regionAccessV2 HTTP/1.1\r\nHost: 153.43.21.4\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nset-cookie: acw_tc=0a0ccafb17725543090617316e4bc76e6a75b34255964a6df2fc5910f6f4aa;path=/;HttpOnly;Max-Age=1800\r\nx-saas-server-id: 844988bcd4-c8jnd|d5c6ac00cc55eb28eca5ace402b86960\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 PS-SIN-047qh52:0 (W), 1.1 jp18:20 (W)\r\nx-px: ms jp18SIN, ms PS-SIN-047qh52SIN(origin)\r\nx-ws-request-id: 69a70845_jp18_21925-39018\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T06:13:31.670337Z","times_seen":13848739,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esfsgdh42448.rtrkg0530.com/hall/api/lobby/channel/go/getChannelInfoById/id/9671283/info/channel.json?t=1772554","fqdn":"esfsgdh42448.rtrkg0530.com","domain":"rtrkg0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:49.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esfsgdh42448.rtrkg0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 May 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:91:C2:94:DF:77:69:8F:DE:C7:53:5B:14:B9:07:D0:0B:30:01:96","sha256":"94:34:31:66:1E:1C:74:2D:E9:57:D6:65:B8:98:A9:E0:FF:CB:55:96:91:BA:14:52:32:AC:32:8A:81:BA:17:ED"}}},"request":{"raw":"OPTIONS /hall/api/lobby/channel/go/getChannelInfoById/id/9671283/info/channel.json?t=1772554 HTTP/1.1\r\nHost: esfsgdh42448.rtrkg0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: clienttimezone,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:49 GMT\r\ncontent-length: 0\r\nx-oss-request-id: 69A70845533755363126C639\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-allow-headers: clienttimezone, device, devicemodel, devicetype, domain, language, nonce, platformtype, sign, sitecode, timestamp, x-custom-referer, x-request-id, x-version\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nx-oss-server-time: 0\r\nserver: gocache\r\nc-type: pf\r\nrid: 08cb74759c2a5d8b78fd8940ce2e2594\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T06:13:31.670337Z","times_seen":13848739,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"90583.vip/","fqdn":"90583.vip","domain":"90583.vip","tld":"vip"},"ip":{"addr":"137.220.156.176","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T16:11:40.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"90583.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 05:51:19 GMT","end":"Thu, 30 Apr 2026 05:51:18 GMT"},"fingerprint":{"sha1":"B5:EA:B4:73:59:DD:E3:A1:8E:7F:B8:2D:F1:F9:6C:DC:89:63:36:CE","sha256":"4D:A7:3A:F8:9F:88:D4:87:6A:63:87:EA:C1:BB:A1:EA:B3:FC:BC:25:FA:DF:4C:73:7E:92:9B:F0:35:F9:A2:EC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 90583.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:41 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 03 Mar 2026 13:12:34 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69a6de42-c587\"\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50567,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"ced3a2a8b595aaab5afe96600a163a9a","sha1":"33ec7886a69e337f5f2356e838ac05d720a1b205","sha256":"08b315557e3ef55b532f7e9571a146105db1ff07cbbf650653cfb93d8ffff3ae","sha512":"28fad6b5d0ccd4c6e6e9788667cd54aa61e20c5bffc383082216daf8ec8d9c03b571f33da3a5342566333e1c1aaad7f4c3d137c2e5d1e3ec1296c6b8b7ace987","ssdeep":"768:BXNheSw7iVCIs5aYI36lfOCBk7+Ap7rnXwwfCBs+9CC7GkL85gUw/Xu4M/:BXNhehIKHIqlmCBk7+gXnXszVW","tlshash":"343371f3442b098503a5c897989e3d0ccb5379af0dd8ba85f6bd84989fdc23e6972474","first_seen":"2026-03-03T16:12:25.353028Z","last_seen":"2026-03-03T16:12:25.353028Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1949,"timings":{"blocked":850,"dns":357,"connect":240,"send":0,"wait":246,"receive":1,"ssl":250},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"90583.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/assets/index-CTjSSeRx.css","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:43.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /assets/index-CTjSSeRx.css HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:44 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-5878\"\r\nExpires: Wed, 04 Mar 2026 04:11:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22648,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22647)","md5":"e55409ca9ea6a4d38ea3f3a8b2ec8543","sha1":"c16cc83768e73bf6eb2de6fa7002f5684d4223b2","sha256":"92ff5854bcf16bc20bfe8d0042b6deef3dfb503578f0d015d03461d114e850b9","sha512":"1275baa6f862c53464aa7eb29d0375092540ab17d1bee20a32a9b22d1aa22ab1a27f0f25f1734d6b409d9e73752007d06a3d01060f11f762e0371d063c792e50","ssdeep":"192:FwYdgt4FvhxGOFA46E/MbBGA6CtBvrEedhKGSHHr6HudRwKoPRwCUiERwGn3Rwc:Mt4+EE3BhsbdOPMN3h","tlshash":"5ea2843bdb571128a43bcd65a7d84e584224c91398530fdebb1376128bcbbcf35a528b","first_seen":"2025-05-29T08:07:42.565711Z","last_seen":"2026-04-13T12:57:17.156584Z","times_seen":833,"resource_available":false,"data":null}},"time_used":1333,"timings":{"blocked":542,"dns":1,"connect":287,"send":0,"wait":246,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esfsgdh42448.rtrkg0530.com/hall/api/agent/downloadSite/getDownloadTemplate/tid/4500870.json?t=1772554","fqdn":"esfsgdh42448.rtrkg0530.com","domain":"rtrkg0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:50.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esfsgdh42448.rtrkg0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 May 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:91:C2:94:DF:77:69:8F:DE:C7:53:5B:14:B9:07:D0:0B:30:01:96","sha256":"94:34:31:66:1E:1C:74:2D:E9:57:D6:65:B8:98:A9:E0:FF:CB:55:96:91:BA:14:52:32:AC:32:8A:81:BA:17:ED"}}},"request":{"raw":"GET /hall/api/agent/downloadSite/getDownloadTemplate/tid/4500870.json?t=1772554 HTTP/1.1\r\nHost: esfsgdh42448.rtrkg0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nlanguage: en\r\ndevice: 133a8883bd7b949110f72e188eeac691\r\nx-version: 6.1.2\r\nX-Request-Id: fd162e49-9538-4a06-a315-206b13c9f65e\r\nX-Custom-Referer: https://p20.vgpjm.guru/?cid=9671283\r\ndomain: p20.vgpjm.guru\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: fd162e49-9538-4a06-a315-206b13c9f65e\r\ntimestamp: 1772554309\r\nsiteCode: 1860\r\nsign: 3UIWJbpBRJwjmhl1IT6XVi8SE5tE0gzCN1api6k19S2vLx7AxqjoocdOR5CVucpi\r\ndevicetype: 4\r\nplatformtype: 3\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:50 GMT\r\ncontent-type: application/json\r\nx-oss-request-id: 69A708465337553631E7C939\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nlast-modified: Tue, 03 Mar 2026 10:53:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2927517493421110269\r\nx-oss-storage-class: Standard\r\ncache-control: s-maxage=600,max-age=0,public\r\ncontent-md5: j5xWj4U3hnswX1bmCH86xw==\r\nx-oss-server-time: 10\r\ncontent-encoding: gzip\r\nserver: gocache\r\nc-type: pf\r\nrid: 3016c40ecf6c7a53f07bb9ed45812911\r\nx-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6892,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (6892), with no line terminators","md5":"8f9c568f8537867b305f56e6087f3ac7","sha1":"719904dd0b6add5172ff3251059dd80675f33339","sha256":"5b24d06541906e6082a15f39859cec8a0498dc16c2a384b74925465b6906d705","sha512":"9034186cedb782373fe45f6ff2a1f3b5f6f4ad1b1e9e5907fec1655bc00885b6d863f99668891594f1a256544c49578a253405f3505984530e2ed137622ef2cb","ssdeep":"192:O4e+hF/pDkiiKASP4rIBEk9DBopvE9A+67qVniAZ:Te+bpDXl4rOD4qiAZ","tlshash":"43e1bfe6e913f728583c8172cd935e5c329b8a390776fc28f0ca39a3c40b519a4905a5","first_seen":"2026-03-03T16:12:25.356614Z","last_seen":"2026-03-03T16:12:25.356614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.21.4/hall/api/statistics/domain/pointer","fqdn":"153.43.21.4","domain":"153.43.21.4","tld":""},"ip":{"addr":"153.43.21.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"153.43.21.2","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 30 Dec 2025 08:33:37 GMT","end":"Sun, 31 Jan 2027 08:33:36 GMT"},"fingerprint":{"sha1":"F6:83:67:B1:3E:90:B8:15:01:1D:80:4C:41:D0:AE:25:A3:D9:C5:5F","sha256":"03:52:F2:C4:B9:04:1A:94:CE:CF:EE:1C:67:88:3C:48:12:65:3C:43:F6:DD:39:AA:11:08:4C:A1:D2:C3:DB:D0"}}},"request":{"raw":"OPTIONS /hall/api/statistics/domain/pointer HTTP/1.1\r\nHost: 153.43.21.4\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nset-cookie: acw_tc=0a094e7917725543111345673e2a39951aea785a95cad813c71dd833b86afe;path=/;HttpOnly;Max-Age=1800\r\nx-saas-server-id: 844988bcd4-vzsnz|a5715606ca6264642c065b48866b325f\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 PS-SIN-04DFS81:0 (W), 1.1 jp18:20 (W)\r\nx-px: ms jp18SIN, ms PS-SIN-04DFS81SIN(origin)\r\nx-ws-request-id: 69a70847_jp18_21925-39063\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T06:13:31.670337Z","times_seen":13848739,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.21.4/hall/api/statistics/domain/pointer","fqdn":"153.43.21.4","domain":"153.43.21.4","tld":""},"ip":{"addr":"153.43.21.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"153.43.21.2","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 30 Dec 2025 08:33:37 GMT","end":"Sun, 31 Jan 2027 08:33:36 GMT"},"fingerprint":{"sha1":"F6:83:67:B1:3E:90:B8:15:01:1D:80:4C:41:D0:AE:25:A3:D9:C5:5F","sha256":"03:52:F2:C4:B9:04:1A:94:CE:CF:EE:1C:67:88:3C:48:12:65:3C:43:F6:DD:39:AA:11:08:4C:A1:D2:C3:DB:D0"}}},"request":{"raw":"POST /hall/api/statistics/domain/pointer HTTP/1.1\r\nHost: 153.43.21.4\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nlanguage: en\r\ndevice: 133a8883bd7b949110f72e188eeac691\r\nx-version: 6.1.2\r\nX-Request-Id: 918cf0d5-5738-4452-9bd7-8ad7caa5c416\r\nX-Custom-Referer: https://p20.vgpjm.guru/?cid=9671283\r\ndomain: p20.vgpjm.guru\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 918cf0d5-5738-4452-9bd7-8ad7caa5c416\r\ntimestamp: 1772554311\r\nsiteCode: 1860\r\nsign: PoDzmYJ7CGHp6cQtps3i+cpoo1mnybOTzyErx4jHb0NV67WvWSMJVUEsVD1C1rAz\r\ndevicetype: 4\r\nplatformtype: 3\r\nContent-Type: application/json\r\nContent-Length: 80\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":80,"data":"{\"domain\":\"p20.vgpjm.guru\",\"deviceKind\":3,\"visitsKind\":1,\"kind\":7,\"cid\":9671283}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 50\r\nset-cookie: acw_tc=0a0ccafb17725543113348769e4bc7d967d14509901b25215069c86e99eba7;path=/;HttpOnly;Max-Age=1800\r\nx-trace-id: c645415ec23ac3c40c7dd976e84dd812\r\nx-env-apisix: 0\r\nx-env-go-biz-statistics-server: 0\r\ncache-control: no-cache\r\nx-saas-server-id: 844988bcd4-slgtn|1eefc531436cdeed93d5c15791a015dd\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 PS-SIN-047qh52:0 (W), 1.1 jp18:20 (W)\r\nx-px: ms jp18SIN, ms PS-SIN-047qh52SIN(origin)\r\nx-ws-request-id: 69a70847_jp18_21925-39070\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cd5f862aac7f72055cce2621c68209b3","sha1":"0f1adf4c231a6f647934efa51ca517f3513710f7","sha256":"2e8bbe5dc2b7f64cf847beb6516020d45ac8f9cc2616aa19aea4bfce1ef94a24","sha512":"1abbf9e2a7a20899acb7b46cd540cfc99e53c146f7734233ea1aee7eea4e50fadc6a61576ccba94cfd807877a24fbbe9c132782c3bf3ae37bc8d1a57e17d378a","ssdeep":"","tlshash":"0d900294531d42828c456639b1095981612854860457d31c8f5e192424690875401151","first_seen":"2026-03-03T16:12:25.358025Z","last_seen":"2026-03-03T16:12:25.358025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-BPSXan64.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/index-BPSXan64.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/?cid=9671283\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:51 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-18ed1\"\r\nExpires: Wed, 04 Mar 2026 04:11:51 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102097,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64612)","md5":"5505655adfd3af01f694c7db45f9448d","sha1":"aa07f4ccfbdf3141d3c929b9f25d0e8e99057bb7","sha256":"c5be828865b370c7f9cce5946a76bc066283e413055cbbed17697dbf2f4bc29d","sha512":"cdf8f3e63b47ea21b11fee54ccc707f65eaa3d7174ded7cc9d2044affc89f48cd5bee732b3c38090a17aa51192dd90cbf33906f358e2e64a072e85c2afcc7bcd","ssdeep":"1536:mPqvPgJw6ItdVY1Vfyqhq3WoIw/qoNRJ03+PdZT1F/+5teJHP:mivPgJwx9Y1gqhPD0/T105tkHP","tlshash":"3fa35beeb279653c22d309acaa3b1140631d7ca63585c4a0f66e8fb41ba7c58f257f14","first_seen":"2025-06-10T13:59:43.273681Z","last_seen":"2026-04-11T09:39:25.375719Z","times_seen":127,"resource_available":true,"data":null}},"time_used":733,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":492,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esfsgdh42448.rtrkg0530.com/siteadmin/upload/img/1966070324702769153.avif","fqdn":"esfsgdh42448.rtrkg0530.com","domain":"rtrkg0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esfsgdh42448.rtrkg0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 May 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:91:C2:94:DF:77:69:8F:DE:C7:53:5B:14:B9:07:D0:0B:30:01:96","sha256":"94:34:31:66:1E:1C:74:2D:E9:57:D6:65:B8:98:A9:E0:FF:CB:55:96:91:BA:14:52:32:AC:32:8A:81:BA:17:ED"}}},"request":{"raw":"GET /siteadmin/upload/img/1966070324702769153.avif HTTP/1.1\r\nHost: esfsgdh42448.rtrkg0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 13139\r\nx-oss-request-id: 69A70847533755363152D139\r\nvary: Origin\r\netag: \"952CF78C31EBC051A8BDB962784BC44E\"\r\nlast-modified: Thu, 11 Sep 2025 09:24:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3536405698025262721\r\nx-oss-storage-class: Standard\r\ncache-control: immutable,stale-while-revalidate=86400,public,max-age=86400\r\ncontent-md5: lSz3jDHrwFGovblieEvETg==\r\nx-oss-server-time: 11\r\nserver: gocache\r\nc-type: pf\r\nrid: 5dc1472ce0849e85130d9e7e8232844b\r\nx-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":13139,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image Sequence","md5":"952cf78c31ebc051a8bdb962784bc44e","sha1":"4a42cccc035afaa427d93a80a8749fa6976aeabc","sha256":"ae13e515c6ccc773c0ba181bdda6fae64c6485acd3086864d83f1e9756f71149","sha512":"30783c6d8e27f6cb006e7d93616abc59707225b8b05a119759ad9e215b2aa93e7a4ee5b3322c446a220632659b8549665c5cd5b0965dc068ad19e608e998e131","ssdeep":"384:4p6EIysFBhnR4S5oYOHn0NEF4o1rPib54:yIJnW2oV0XuCy","tlshash":"d442c0e327c28a7bc7184af1a00892135772f2b90fab7b175742292ddcf87e5ed85449","first_seen":"2025-11-01T12:58:23.233489Z","last_seen":"2026-03-03T16:12:25.359918Z","times_seen":6,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@vant-D2LFdCs1.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:43.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/@vant-D2LFdCs1.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/js/index-BPSXan64.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:44 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-a4e\"\r\nExpires: Wed, 04 Mar 2026 04:11:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2638,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2637)","md5":"5a31aa0fac503f32a3687ba82fb01690","sha1":"0404c8523b23c9744e43362e99df139dd3ab20cf","sha256":"4e1b691d592508249cf1138fff707c216f0905276259fb8239d19177bdb2b253","sha512":"05452e512d31804c25b783d741f8dfc3f5dc78ddcfeaa1b6c61340b13141571e63ccd921f44565aa51cfcb6459a797cd9ac305e99c786b193a841595fbb1b11b","ssdeep":"","tlshash":"e05165ac3a51bc34826a1ea2427f9ba9b2163924704b8050e008dd1539518a3c7fffee","first_seen":"2025-02-21T19:40:40.367652Z","last_seen":"2026-04-17T05:18:15.344081Z","times_seen":2325,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esfsgdh42448.rtrkg0530.com/bewcdn.txt?t=1772554307641","fqdn":"esfsgdh42448.rtrkg0530.com","domain":"rtrkg0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:47.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esfsgdh42448.rtrkg0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 May 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:91:C2:94:DF:77:69:8F:DE:C7:53:5B:14:B9:07:D0:0B:30:01:96","sha256":"94:34:31:66:1E:1C:74:2D:E9:57:D6:65:B8:98:A9:E0:FF:CB:55:96:91:BA:14:52:32:AC:32:8A:81:BA:17:ED"}}},"request":{"raw":"GET /bewcdn.txt?t=1772554307641 HTTP/1.1\r\nHost: esfsgdh42448.rtrkg0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:48 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nx-oss-request-id: 69A70844533755363133C139\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Tue, 03 Mar 2026 11:07:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v7.1.89\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 1\r\nserver: gocache\r\nc-type: pf\r\nrid: 6ded15ef3555a182599816c30768a8f4\r\nx-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-17T06:16:40.61675Z","times_seen":269389,"resource_available":true,"data":null}},"time_used":1646,"timings":{"blocked":688,"dns":133,"connect":1,"send":0,"wait":261,"receive":1,"ssl":558},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwww11587.apy0530.com/cocos/config_data.json?t=1772554","fqdn":"wwww11587.apy0530.com","domain":"apy0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:46.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwww11587.apy0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 13 May 2025 00:00:00 GMT","end":"Wed, 13 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:92:C4:33:4F:B1:88:83:00:25:54:98:4D:2E:98:B6:C9:7D:AC:2D","sha256":"46:0D:D5:4D:99:B3:11:86:C1:FF:A3:07:C7:71:12:73:59:98:37:9D:E2:A1:2A:AB:A6:E3:B6:5C:A2:62:47:5D"}}},"request":{"raw":"GET /cocos/config_data.json?t=1772554 HTTP/1.1\r\nHost: wwww11587.apy0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nlanguage: en\r\ndevice: 133a8883bd7b949110f72e188eeac691\r\nx-version: 6.1.2\r\nX-Request-Id: 4a3aec62-702e-4f9e-85c7-2649bb70988a\r\nX-Custom-Referer: https://p20.vgpjm.guru/?cid=9671283\r\ndomain: p20.vgpjm.guru\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 4a3aec62-702e-4f9e-85c7-2649bb70988a\r\ntimestamp: 1772554305\r\nsiteCode: \r\nsign: 6E7Aw8wWaRurhFX4TjpyRjV+UMVQtts7XguMvcnYGLldid+iP+hfMy/KUHtKe3sV\r\ndevicetype: 4\r\nplatformtype: 3\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:46 GMT\r\ncontent-type: application/json\r\nx-oss-request-id: 69A708428A23F73734E42895\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nlast-modified: Fri, 13 Feb 2026 16:04:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1811459140912519521\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=86400\r\ncontent-md5: Ef4ZbH9XduLI3lfSP9txBQ==\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nserver: gocache\r\nc-type: pf\r\nrid: fe074f8df6905767e973c8d3870a50e4\r\nx-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":5400,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (5400), with no line terminators","md5":"11fe196c7f5776e2c8de57d23fdb7105","sha1":"875d02fbf85893597ccd33c6a78aef849fa90088","sha256":"9048841baabfde595ed093a8c8c846add49ad9398dcfd41c25e8715a2dda3b41","sha512":"3c6c2ce56589f2d4c56201f68abeda28425a1d9a09bdfc535a25c15907b89555c83e813a21b5f526d08bd32964482d6a623ff0c11459363d9fa9faf3b15b0eb9","ssdeep":"96:kFYGt5u48+Ttp24poHwanNTlJBhFtYCd7FBeImRsUJ+40etTs7HqsKff:kFYGnu48+T32b5/Y6xBVaFtTEKdX","tlshash":"2eb17ee38d31324614969daf0aab39437bac43508cae8511f30a65b63f00789ea38849","first_seen":"2026-02-20T02:09:54.904509Z","last_seen":"2026-03-03T16:12:25.362308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsaf5255fs1.czffm0530.com/bewcdn.txt?t=1772554307640","fqdn":"dsaf5255fs1.czffm0530.com","domain":"czffm0530.com","tld":"com"},"ip":{"addr":"118.107.9.100","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:47.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsaf5255fs1.czffm0530.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 03:26:12 GMT","end":"Thu, 16 Apr 2026 03:26:11 GMT"},"fingerprint":{"sha1":"FA:0F:FF:3D:A5:BF:BE:1A:F4:99:CB:64:FE:41:3E:F4:4A:3E:54:AF","sha256":"D3:36:70:46:35:09:09:F7:C1:95:41:B5:57:3E:DB:7C:30:D2:68:08:85:B3:C9:04:1A:81:12:3D:2A:49:F9:60"}}},"request":{"raw":"GET /bewcdn.txt?t=1772554307640 HTTP/1.1\r\nHost: dsaf5255fs1.czffm0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\ncontent-type: text/plain\r\ndate: Tue, 03 Mar 2026 16:11:48 GMT\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Tue, 03 Mar 2026 11:07:00 GMT\r\nserver: AliyunOSS\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nx-cache: UPDATING\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-meta-version: v7.1.89\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69A708444F0FE43837DDA511\r\nx-oss-server-time: 1\r\nx-oss-storage-class: Standard\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-17T06:16:40.61675Z","times_seen":269389,"resource_available":true,"data":null}},"time_used":1654,"timings":{"blocked":670,"dns":66,"connect":296,"send":0,"wait":307,"receive":1,"ssl":310},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-BPSXan64.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:43.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/index-BPSXan64.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:43 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-18ed1\"\r\nExpires: Wed, 04 Mar 2026 04:11:43 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102097,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64612)","md5":"5505655adfd3af01f694c7db45f9448d","sha1":"aa07f4ccfbdf3141d3c929b9f25d0e8e99057bb7","sha256":"c5be828865b370c7f9cce5946a76bc066283e413055cbbed17697dbf2f4bc29d","sha512":"cdf8f3e63b47ea21b11fee54ccc707f65eaa3d7174ded7cc9d2044affc89f48cd5bee732b3c38090a17aa51192dd90cbf33906f358e2e64a072e85c2afcc7bcd","ssdeep":"1536:mPqvPgJw6ItdVY1Vfyqhq3WoIw/qoNRJ03+PdZT1F/+5teJHP:mivPgJwx9Y1gqhPD0/T105tkHP","tlshash":"3fa35beeb279653c22d309acaa3b1140631d7ca63585c4a0f66e8fb41ba7c58f257f14","first_seen":"2025-06-10T13:59:43.273681Z","last_seen":"2026-04-11T09:39:25.375719Z","times_seen":127,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esfsgdh42448.rtrkg0530.com/siteadmin/upload/img/1966070710362898434.avif","fqdn":"esfsgdh42448.rtrkg0530.com","domain":"rtrkg0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esfsgdh42448.rtrkg0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 May 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:91:C2:94:DF:77:69:8F:DE:C7:53:5B:14:B9:07:D0:0B:30:01:96","sha256":"94:34:31:66:1E:1C:74:2D:E9:57:D6:65:B8:98:A9:E0:FF:CB:55:96:91:BA:14:52:32:AC:32:8A:81:BA:17:ED"}}},"request":{"raw":"GET /siteadmin/upload/img/1966070710362898434.avif HTTP/1.1\r\nHost: esfsgdh42448.rtrkg0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 5177\r\nx-oss-request-id: 69A70847533755363165D039\r\nvary: Origin\r\netag: \"85E0E201F62CEA6F02EF697B039C3239\"\r\nlast-modified: Thu, 11 Sep 2025 09:26:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18370110485805083233\r\nx-oss-storage-class: Standard\r\ncache-control: immutable,stale-while-revalidate=86400,public,max-age=86400\r\ncontent-md5: heDiAfYs6m8C72l7A5wyOQ==\r\nx-oss-server-time: 21\r\nserver: gocache\r\nc-type: pf\r\nrid: f44a862d5851e8efb730c3b98fd452c6\r\nx-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":5177,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"85e0e201f62cea6f02ef697b039c3239","sha1":"24bff7ffffb52059be8f748d5804bea10f0af520","sha256":"3fd67a24d730265c465610197a9d6a2b0fd867e19d457707f08ff8c379bc6a4e","sha512":"013aaf422451d724e88f8065647547624d9e9f0ceeacfd6288cb017a9344ac8bbf2a736dd3d348e1cd379119b148630672bc15f67fd59d2f55725742b0d3c770","ssdeep":"96:rGcqOFfn0VY7QCx5FYNRLS53/WEVAM9Q8Po/UmGuN5MuqfbKTSWfqHJMrZknd:rGHOFfn0VY7v2LK3/e6n6DGk5PqfbUfi","tlshash":"15b16c75a6904bcad85d5a33c0e882317a40c1dd13187e523e0bf28f44aeab7e154c39","first_seen":"2025-11-01T12:58:23.241447Z","last_seen":"2026-03-03T16:12:25.363559Z","times_seen":6,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T16:11:42.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://90583.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:43 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-b7f\"\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2943,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (435)","md5":"80b1cbc3a527439985c7c480bef3cc36","sha1":"e33225fbb5a265911caae344e3d598c8da921cd1","sha256":"cb2b88ad13204de2c876bafea848eeeda9aef0f973525ab1944e2d56677868a5","sha512":"363261a6828f3e5d91f0da91dd06813854ab5517a22c3fc80d604f1e9bb99ea5d1a49d89bcd1e28bcc1c42991589c97948f1c5417aca09e06fb2dad4c9b3711f","ssdeep":"","tlshash":"27511093b5f4c86a12580e2bbdd5f4183ed15bc3450da840b4ee54fe4e40fd2cba7865","first_seen":"2025-06-10T13:59:43.285325Z","last_seen":"2026-04-11T09:39:25.372512Z","times_seen":125,"resource_available":true,"data":null}},"time_used":1998,"timings":{"blocked":876,"dns":383,"connect":240,"send":0,"wait":244,"receive":1,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwww11587.apy0530.com/cocos/config_data.json?t=1772554","fqdn":"wwww11587.apy0530.com","domain":"apy0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:45.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwww11587.apy0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 13 May 2025 00:00:00 GMT","end":"Wed, 13 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:92:C4:33:4F:B1:88:83:00:25:54:98:4D:2E:98:B6:C9:7D:AC:2D","sha256":"46:0D:D5:4D:99:B3:11:86:C1:FF:A3:07:C7:71:12:73:59:98:37:9D:E2:A1:2A:AB:A6:E3:B6:5C:A2:62:47:5D"}}},"request":{"raw":"OPTIONS /cocos/config_data.json?t=1772554 HTTP/1.1\r\nHost: wwww11587.apy0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: clienttimezone,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:46 GMT\r\ncontent-length: 0\r\nx-oss-request-id: 69A708428A23F737348B2795\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-allow-headers: clienttimezone, device, devicemodel, devicetype, domain, language, nonce, platformtype, sign, sitecode, timestamp, x-custom-referer, x-request-id, x-version\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nx-oss-server-time: 0\r\nserver: gocache\r\nc-type: pf\r\nrid: a60bf54f06cfcc808e6e2a1a5cae13e3\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T06:13:31.670337Z","times_seen":13848739,"resource_available":true,"data":null}},"time_used":1727,"timings":{"blocked":731,"dns":182,"connect":1,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esfsgdh42448.rtrkg0530.com/hall/api/lobby/channel/go/getChannelInfoById/id/9671283/info/channel.json?t=1772554","fqdn":"esfsgdh42448.rtrkg0530.com","domain":"rtrkg0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:49.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esfsgdh42448.rtrkg0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 May 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:91:C2:94:DF:77:69:8F:DE:C7:53:5B:14:B9:07:D0:0B:30:01:96","sha256":"94:34:31:66:1E:1C:74:2D:E9:57:D6:65:B8:98:A9:E0:FF:CB:55:96:91:BA:14:52:32:AC:32:8A:81:BA:17:ED"}}},"request":{"raw":"GET /hall/api/lobby/channel/go/getChannelInfoById/id/9671283/info/channel.json?t=1772554 HTTP/1.1\r\nHost: esfsgdh42448.rtrkg0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nlanguage: en\r\ndevice: 133a8883bd7b949110f72e188eeac691\r\nx-version: 6.1.2\r\nX-Request-Id: b61f9aab-ff0c-4322-9a12-3219e458bfa9\r\nX-Custom-Referer: https://p20.vgpjm.guru/?cid=9671283\r\ndomain: p20.vgpjm.guru\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: b61f9aab-ff0c-4322-9a12-3219e458bfa9\r\ntimestamp: 1772554309\r\nsiteCode: 1860\r\nsign: FjrnH7eBX79vV4xUP9ru108oHQFCD+OnJZrXHW5qgwb69YdNni9IdR6Mh6GGVVBe\r\ndevicetype: 4\r\nplatformtype: 3\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:49 GMT\r\ncontent-type: application/json\r\nx-oss-request-id: 69A70845533755363172C739\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nlast-modified: Sat, 28 Feb 2026 19:21:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11509724384235951649\r\nx-oss-storage-class: Standard\r\ncache-control: s-maxage=600,public,max-age=0\r\ncontent-md5: 4yqn7XG08LpWf3SThODGVQ==\r\nx-oss-server-time: 44\r\ncontent-encoding: gzip\r\nserver: gocache\r\nc-type: pf\r\nrid: 5cf25fdf2dd9b2caa76fc26cb7eb0750\r\nx-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":1280,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (1280), with no line terminators","md5":"e32aa7ed71b4f0ba567f749384e0c655","sha1":"e440c16ead843e24e4c37942a0fe87b73bd1f8c7","sha256":"4fa70ebfa96fa1e1def97e626006e4976a8f3fa107c5855380fc3facbc7a7b84","sha512":"5fc2872e7a3e1dc9c77cd6531c754219aa9df946bc370b35caf9ef7db3e85d8a8b775780a3864c321df355dd04107cb30dad195de728e60501b5832140a238d3","ssdeep":"","tlshash":"f621e749e931ded67ae209c4df28f89c9b308832202ff86536e8b0205a5e31097f51d8","first_seen":"2026-03-03T16:12:25.365397Z","last_seen":"2026-03-03T16:12:25.365397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-DImzadBO.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/index-DImzadBO.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/?cid=9671283\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:51 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-58b\"\r\nExpires: Wed, 04 Mar 2026 04:11:51 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1418)","md5":"124d32186e00b82694129065952da9bb","sha1":"be5f966da05e7efb2567f71080e9936271f8aec2","sha256":"17c88b9c32d825b5a4b03f5410e3562dd79f52438391f477e359d3a1cab118ea","sha512":"a59f39a7ad2254b458e5f1de6fbc59e294aa3349d3b0b115029f2870b5ce9a08d13391816776fb00a91e17274bb8fbe2629a272c494bf69cf5aef6743b982cee","ssdeep":"","tlshash":"7c21410af145acb902b644986004006122ea4bae42f8d7e0a2fd8f9943b4c70d57ed7d","first_seen":"2025-06-10T13:59:43.278807Z","last_seen":"2026-04-11T09:39:25.388749Z","times_seen":126,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@cg-gj7GXBFN.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.180","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:43.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/@cg-gj7GXBFN.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/js/index-BPSXan64.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:44 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-5918\"\r\nExpires: Wed, 04 Mar 2026 04:11:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22808,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22807)","md5":"2f67c60f5e2248291ab113749bf17af1","sha1":"3bb397df41f44ad9d2e177bb2909ff625300091e","sha256":"69b9978e158acdbba9d62b4f0e46b749bcf0078c8f782a39cce215e75ff191bb","sha512":"aa96817c7dae23fe7a7a401bf2233f8c1143a8daa85aafe00aae33a19e62b8e916bbf6a02c7fd76dc7c50a1b14361c469ecd97e12626f6b455498a283d2e7662","ssdeep":"384:lHNz4tbyCmydEZG/ZyUTXB9iq9ZIRNBLB4Ck0YTsgDNtUxUyztuGon8M+EDWzW0q:z4tbyCmydEZGlTXmgZIrBLBlk0qsuNGQ","tlshash":"2ea2b3f83093b47153aa14e7407b0102f36a3994300e9594f69dadeb3e7641a52b3fbd","first_seen":"2024-09-23T04:34:25Z","last_seen":"2026-04-17T05:18:15.339386Z","times_seen":4588,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":210,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/favicon.ico","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:45.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Tue, 03 Mar 2026 16:11:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-17T06:14:15.259319Z","times_seen":489738,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxaqt3zvhu6zv.ycizl.cc/ipacdn.txt?t=1772554306545","fqdn":"zxaqt3zvhu6zv.ycizl.cc","domain":"ycizl.cc","tld":"cc"},"ip":{"addr":"14.128.63.158","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:46.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zxaqt3zvhu6zv.ycizl.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 07:22:45 GMT","end":"Wed, 13 May 2026 07:22:44 GMT"},"fingerprint":{"sha1":"94:58:DC:94:08:9F:04:0A:17:98:C2:D8:7A:B3:97:F7:75:4F:16:B2","sha256":"53:F3:48:8E:F2:34:BD:58:BB:0D:A9:22:7D:C7:F6:75:3D:58:8A:5C:34:46:4C:85:B5:9B:E9:26:02:34:E3:E4"}}},"request":{"raw":"GET /ipacdn.txt?t=1772554306545 HTTP/1.1\r\nHost: zxaqt3zvhu6zv.ycizl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ncache-control: s-maxage=315360000,max-age=0,public\r\ncontent-type: text/plain\r\ndate: Tue, 03 Mar 2026 16:11:49 GMT\r\nset-cookie: acw_tc=0a094e7917725543098611935e2a3f805601016b68bfa29c203a36bd2483a7;path=/;HttpOnly;Max-Age=1800\r\nstrict-transport-security: max-age=31536000\r\nx-cache: BYPASS, Set-Cookie\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-17T06:16:40.61675Z","times_seen":269389,"resource_available":true,"data":null}},"time_used":4157,"timings":{"blocked":664,"dns":109,"connect":273,"send":0,"wait":2824,"receive":0,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqa23cvz.ycizl.cc/ipacdn.txt?t=1772554306545","fqdn":"eqa23cvz.ycizl.cc","domain":"ycizl.cc","tld":"cc"},"ip":{"addr":"27.124.12.58","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:46.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqa23cvz.ycizl.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 00:40:43 GMT","end":"Thu, 07 May 2026 00:40:42 GMT"},"fingerprint":{"sha1":"BC:7C:A8:F8:4F:59:3A:C0:65:78:BE:A5:A7:17:23:47:73:7C:E6:C9","sha256":"7E:E7:0E:0B:94:AD:B8:F2:20:B7:26:C3:F0:90:59:82:CC:60:EA:D8:9E:C6:D1:A6:D9:7F:BC:55:30:B3:7E:3B"}}},"request":{"raw":"GET /ipacdn.txt?t=1772554306545 HTTP/1.1\r\nHost: eqa23cvz.ycizl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ncache-control: s-maxage=315360000,max-age=0,public\r\ncontent-type: text/plain\r\ndate: Tue, 03 Mar 2026 16:11:49 GMT\r\nset-cookie: acw_tc=0a094e7917725543099723116e2a27a63ddc309b0e05a3cf855cd32193d46e;path=/;HttpOnly;Max-Age=1800\r\nstrict-transport-security: max-age=31536000\r\nx-cache: BYPASS, Set-Cookie\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-17T06:16:40.61675Z","times_seen":269389,"resource_available":true,"data":null}},"time_used":4433,"timings":{"blocked":829,"dns":240,"connect":289,"send":0,"wait":2772,"receive":0,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.21.4/hall/api/agent/promote/binding/reportViewV2","fqdn":"153.43.21.4","domain":"153.43.21.4","tld":""},"ip":{"addr":"153.43.21.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:47.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"153.43.21.2","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 30 Dec 2025 08:33:37 GMT","end":"Sun, 31 Jan 2027 08:33:36 GMT"},"fingerprint":{"sha1":"F6:83:67:B1:3E:90:B8:15:01:1D:80:4C:41:D0:AE:25:A3:D9:C5:5F","sha256":"03:52:F2:C4:B9:04:1A:94:CE:CF:EE:1C:67:88:3C:48:12:65:3C:43:F6:DD:39:AA:11:08:4C:A1:D2:C3:DB:D0"}}},"request":{"raw":"POST /hall/api/agent/promote/binding/reportViewV2 HTTP/1.1\r\nHost: 153.43.21.4\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nlanguage: en\r\ndevice: 133a8883bd7b949110f72e188eeac691\r\nx-version: 6.1.2\r\nX-Request-Id: 445fe6d6-2849-434f-886f-866778a7c16a\r\nX-Custom-Referer: https://p20.vgpjm.guru/?cid=9671283\r\ndomain: p20.vgpjm.guru\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 445fe6d6-2849-434f-886f-866778a7c16a\r\ntimestamp: 1772554307\r\nsiteCode: 1860\r\nsign: 5V2FSpGjxWyXYMMyHqTu1ojUo7nTi+8lY9HeSO029CKqNgkK0WUHEAdDGKhJehEj\r\ndevicetype: 4\r\nplatformtype: 3\r\nContent-Type: application/json\r\nContent-Length: 115\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":115,"data":"{\"channel_info\":\"9671283\",\"visitor_device\":\"133a8883bd7b949110f72e188eeac691\",\"accessUrl\":\"https://p20.vgpjm.guru\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 100\r\nset-cookie: acw_tc=0a094e7917725543080204515e2a398fbdbe639f1a41aaa7515acc5abb4106;path=/;HttpOnly;Max-Age=1800\r\nx-trace-id: ebedcaf016cc8755c679d739a7f10c38\r\nx-env-apisix: 0\r\nx-env-go-biz-agent-server: 0\r\ncache-control: no-cache\r\nx-saas-server-id: 844988bcd4-slgtn|438eeafc5b587a858c91311efc49df58\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 PS-SIN-04DFS81:0 (W), 1.1 jp18:20 (W)\r\nx-px: ms jp18SIN, ms PS-SIN-04DFS81SIN(origin)\r\nx-ws-request-id: 69a70844_jp18_21925-38975\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0ee2ee539c6dddc5bae9f27117452035","sha1":"136dcf3977cf7c8f2c6bde7229453f267e205afe","sha256":"c63d6adbaefc01d68434900b49a0f1ba28c589d9db5d76a4a9220ec1f5fb9016","sha512":"156d87d07ae7b32148721771dc15d48c7ccd5fb5314107cf54d2a06b0e2e4759d2f00d24d543a35f14b4cf52baeda4bce9d561ea59e623af304c1849d607bc24","ssdeep":"","tlshash":"70b01291632c870288596366214e0682d7ae15454c3a832ccd4ffd2ce45a06736005b4","first_seen":"2026-03-03T16:12:25.370522Z","last_seen":"2026-03-03T16:12:25.370522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/zh-DULCbSWW.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:50.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/zh-DULCbSWW.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/js/index-BPSXan64.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:50 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-f81\"\r\nExpires: Wed, 04 Mar 2026 04:11:50 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3969,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2590)","md5":"194f40d87610e226ebeee24a30c1469f","sha1":"61f4745d953cea256a8db3dec6c88d58e81cbd0a","sha256":"fcfc362eb502b8b957111b25a181ed5c2767f8de933b7148bc43ed647219e57a","sha512":"e8237d06dabe6d407d86670e6ca5aabaca2bccfbd676f5683c7abb4f9225da0fd57b890bdbbf2749eecc18a3b8501676f2d56fd07f830e064224cf09558a79a1","ssdeep":"","tlshash":"e381fb9d47fccdbc034a424e3f2b4158b0981eba93d9dce45fa286ea30acb03560159f","first_seen":"2025-05-08T17:26:34.272353Z","last_seen":"2026-04-13T12:57:17.132047Z","times_seen":1070,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/assets/vant-D7WKZ9xU.css","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:43.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /assets/vant-D7WKZ9xU.css HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:44 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-2e7f\"\r\nExpires: Wed, 04 Mar 2026 04:11:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11903,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11902)","md5":"edf874bcdf3ae5dffbe3a9a3498a8848","sha1":"a1e3242bd15f7de4a702d4ebe42d3f75433cae77","sha256":"34b1058c642bfafa642253f7c568cd794767fb81602008461d447046e87221c1","sha512":"2730a5372bd1dd4c25e0e7392cd473afdece21542b47507d798ab75da27dadb5533d715bf2ab17d56ff7edf2ea475b7656501397e2dcb02804c201cb6f44cd79","ssdeep":"192:o/ZpHK68QZ2KFZnHEcam51bjQurwcq6SWHd/flrwcq6SWHd/fyfzWhbQE9E3aQzm:MD2KFZnHEcam51bjQurwcq6SWHd/flrh","tlshash":"2932412ae881127a6e076a5497de05d4f17ce6b2be61cde8710432498bc7ff81733247","first_seen":"2024-09-23T04:34:27Z","last_seen":"2026-04-17T05:18:15.342515Z","times_seen":7736,"resource_available":false,"data":null}},"time_used":1325,"timings":{"blocked":539,"dns":1,"connect":285,"send":0,"wait":245,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@vueuse-DbCv3QsL.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:43.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/@vueuse-DbCv3QsL.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/js/index-BPSXan64.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:44 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-11e6\"\r\nExpires: Wed, 04 Mar 2026 04:11:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4582,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4581)","md5":"aeeaabeed5bfbd4aa4fb916ce41c5a37","sha1":"101668cee7a43bf15fa5fa0b9f5f96dcc532593d","sha256":"5a146630243662447021e01f884b29241743e4804708efca6dd250f40a90f7bf","sha512":"8504608a2d62cb53c2b485448798d9ec0ee0c3a44c1c4927931086fb0bab48c3dddb4292705a56862ac53045a763b9f14a394b7dc69a3be809ed739c4507317d","ssdeep":"96:9upsoTxFpdpeJMYTEzFyMBHf2bPXcWaVJ/hmVd51U4gU9nAgXYqL1KlaFfzhFp/7:9updpmm0EpyMB+bPZa9E51UPInAgoqBd","tlshash":"e791b8cd709670b2337a9d95d07b420eba283551345fe4d0a01e5ef63e21da27362dee","first_seen":"2025-05-08T17:26:34.279373Z","last_seen":"2026-04-13T12:57:17.134612Z","times_seen":1163,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwhdffd.czffm0530.com/bewcdn.txt?t=1772554307641","fqdn":"wwwhdffd.czffm0530.com","domain":"czffm0530.com","tld":"com"},"ip":{"addr":"134.122.176.117","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:47.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwhdffd.czffm0530.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 16:56:07 GMT","end":"Sun, 19 Apr 2026 16:56:06 GMT"},"fingerprint":{"sha1":"F9:30:C4:F6:AF:C4:C8:73:AD:A9:74:22:80:09:23:F4:83:5A:AB:24","sha256":"AA:F7:04:28:E1:82:75:18:FB:4C:4D:68:E9:A6:53:04:8F:E7:6C:58:15:65:F8:39:06:A2:86:65:06:63:2E:26"}}},"request":{"raw":"GET /bewcdn.txt?t=1772554307641 HTTP/1.1\r\nHost: wwwhdffd.czffm0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\ncontent-type: text/plain\r\ndate: Tue, 03 Mar 2026 16:11:48 GMT\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Tue, 03 Mar 2026 11:07:00 GMT\r\nserver: AliyunOSS\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nx-cache: BYPASS\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-meta-version: v7.1.89\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69A708449DB5783331C6C115\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-17T06:16:40.61675Z","times_seen":269389,"resource_available":true,"data":null}},"time_used":1753,"timings":{"blocked":717,"dns":120,"connect":295,"send":0,"wait":311,"receive":1,"ssl":305},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sadhfht3zxzc1qzju5.9sj7x3j.cc/ipacdn.txt?t=1772554306543","fqdn":"sadhfht3zxzc1qzju5.9sj7x3j.cc","domain":"9sj7x3j.cc","tld":"cc"},"ip":{"addr":"118.107.9.100","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:46.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sadhfht3zxzc1qzju5.9sj7x3j.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:54:53 GMT","end":"Wed, 13 May 2026 06:54:52 GMT"},"fingerprint":{"sha1":"AB:89:F6:50:91:3F:8D:01:89:78:2C:3D:98:08:31:E6:DB:4A:8F:64","sha256":"32:04:05:4D:21:A9:11:33:91:E5:FD:A4:17:88:B7:E7:3A:D6:36:2F:D3:54:02:5F:07:D4:06:C4:6B:77:EA:B3"}}},"request":{"raw":"GET /ipacdn.txt?t=1772554306543 HTTP/1.1\r\nHost: sadhfht3zxzc1qzju5.9sj7x3j.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ncache-control: s-maxage=315360000,max-age=0,public\r\ncontent-type: text/plain\r\ndate: Tue, 03 Mar 2026 16:11:47 GMT\r\nset-cookie: acw_tc=0a0f6b8817725543074747158e5e750fd6eff7684971e4f3be4f0c64153cff;path=/;HttpOnly;Max-Age=1800\r\nstrict-transport-security: max-age=31536000\r\nx-cache: BYPASS, Set-Cookie\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-17T06:16:40.61675Z","times_seen":269389,"resource_available":true,"data":null}},"time_used":1837,"timings":{"blocked":717,"dns":122,"connect":291,"send":0,"wait":401,"receive":0,"ssl":303},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/assets/index-BJwb5kDX.css","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /assets/index-BJwb5kDX.css HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/?cid=9671283\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:51 GMT\r\nContent-Type: text/css\r\nContent-Length: 238\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nETag: \"690dcd44-ee\"\r\nExpires: Wed, 04 Mar 2026 04:11:51 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4a992170cde0e7693587f634cb175f51","sha1":"5f3c38c5779d82d01dbfb626caa421670f0ee625","sha256":"886b1d5b6818c982bbbd4649c5da5e871af0dd1e403009690c023da8f2a0b4b7","sha512":"6756ac3e98af7b86ee51c128b3bd73ade20adb30a8205c4faaca64681968a409f963f2b8ff3caf8f484e99288235d1781ad08e871e61a49b02de1c723c97f344","ssdeep":"","tlshash":"8cd05b7dd712d065e43285123449894e41c5d2430251045d6f157d78a89f95eb93b0d0","first_seen":"2024-09-29T15:23:27Z","last_seen":"2026-04-17T05:18:15.364008Z","times_seen":5106,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@vue-Dhdcds7m.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:44.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/@vue-Dhdcds7m.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:45 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-116ee\"\r\nExpires: Wed, 04 Mar 2026 04:11:45 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c6aeb50904c2b0cefc86d2c352cf9890","sha1":"6532dce3f5f4b064b9945152e90ac84a795a3484","sha256":"4fdb776a11b806f8443684362524dc999b24cc9165a123604075fdda7e7684a6","sha512":"64186490f4d6b60b0bb05b39985abda1215448465a2287c7cc821e94370285a2f0999cc93e47d0c0de904fb2cb634aa31febff67522e5896e0c267beaab3f6ab","ssdeep":"768:BaxDn7WN0FXq3YmibvZ3aODa6P5s0hrj4tRGMEozk7iOpT6EGukWE42VVhvpwXnv:hPS356IbmABYL0HBHCPAERDzt5Y","tlshash":"9b63f8e83192b46163fa19f2007b0406f3392d56384ad998b26dfddb3e7240551bbebd","first_seen":"2025-02-21T19:40:40.34669Z","last_seen":"2026-04-17T05:18:15.338535Z","times_seen":2325,"resource_available":true,"data":null}},"time_used":1592,"timings":{"blocked":548,"dns":57,"connect":240,"send":0,"wait":481,"receive":12,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/config.json?t=1772554","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:44.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /config.json?t=1772554 HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nlanguage: en\r\ndevice: 133a8883bd7b949110f72e188eeac691\r\nx-version: 6.1.2\r\nX-Request-Id: ed91c100-c4e9-43f2-9069-854397c82e74\r\nX-Custom-Referer: https://p20.vgpjm.guru/\r\ndomain: p20.vgpjm.guru\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: ed91c100-c4e9-43f2-9069-854397c82e74\r\ntimestamp: 1772554304\r\nsiteCode: \r\nsign: o5TWZg5dOxYU3YyifqUoWwY5KMErcpj1gRCtbkFxrL+rE7NnvlGIPw9RvFE5iE0w\r\ndevicetype: 4\r\nplatformtype: 3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:45 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 03 Mar 2026 13:12:46 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69a6de4e-8171\"\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33137,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47b41f298e528d36e0edc600eb0e2848","sha1":"92e78f7bf59cb510dd43cd68d1e71ace0fcd5a29","sha256":"f4961d1be8e92d2a84992bcbc3e580d98465974028644365b04e6d23f37bd5e7","sha512":"db13c4a0f18855587366ee1a69379c5bbccedfa52b359d6da9b9acf70c7f27f0a1f22b87f7b46914ceb43604f5c8193bfad41531c24093bbff1fc4cd78cdbec3","ssdeep":"768:WllzIFV90O9+yc1pAR5UejzWC848c2orVyLG8XYUiiLmB/RYD02diChO7oSxtl:2IjzWC84QorVtsD02M","tlshash":"ede2cb0bc1364d8031b8829d18fc0a85cd203f5b61d89b8f727d48ce5f757f6999ab9a","first_seen":"2026-03-03T16:12:25.374269Z","last_seen":"2026-03-03T16:12:25.374269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"211.43.148.31/bewcdn.txt?t=1772554307641","fqdn":"211.43.148.31","domain":"211.43.148.31","tld":""},"ip":{"addr":"211.43.148.31","port":443,"asn":54994,"as":"ML-1432-54994","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:47.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"211.43.148.2","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 01 Sep 2025 10:26:07 GMT","end":"Sat, 03 Oct 2026 10:26:06 GMT"},"fingerprint":{"sha1":"42:5F:0E:C8:3D:AC:E3:82:2F:4B:3E:3F:B4:02:C5:4C:E7:5C:89:D5","sha256":"3E:0A:5A:96:73:85:A9:6B:D8:00:CF:46:AA:48:A2:FF:AE:BF:EC:C6:5A:F4:D9:E1:38:CC:24:D8:1B:5B:04:42"}}},"request":{"raw":"GET /bewcdn.txt?t=1772554307641 HTTP/1.1\r\nHost: 211.43.148.31\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:48 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nserver: AliyunOSS\r\nx-oss-request-id: 69A70844F27FBE3939B9C36E\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\naccept-ranges: bytes\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Tue, 03 Mar 2026 11:07:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v7.1.89\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 1\r\nvia: 1.1 PSxgHK6px178:1 (W), 1.1 anxun68:23 (W)\r\nx-px: ms anxun68HKG, ms PSxgHK6px178HKG(origin)\r\nx-ws-request-id: 69a70844_anxun68_15574-5824\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-17T06:16:40.61675Z","times_seen":269389,"resource_available":true,"data":null}},"time_used":1751,"timings":{"blocked":772,"dns":0,"connect":186,"send":0,"wait":198,"receive":0,"ssl":592},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esfsgdh42448.rtrkg0530.com/hall/api/lobby/config/getAppDownloadInfo.json?t=1772554","fqdn":"esfsgdh42448.rtrkg0530.com","domain":"rtrkg0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:50.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esfsgdh42448.rtrkg0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 May 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:91:C2:94:DF:77:69:8F:DE:C7:53:5B:14:B9:07:D0:0B:30:01:96","sha256":"94:34:31:66:1E:1C:74:2D:E9:57:D6:65:B8:98:A9:E0:FF:CB:55:96:91:BA:14:52:32:AC:32:8A:81:BA:17:ED"}}},"request":{"raw":"GET /hall/api/lobby/config/getAppDownloadInfo.json?t=1772554 HTTP/1.1\r\nHost: esfsgdh42448.rtrkg0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nlanguage: en\r\ndevice: 133a8883bd7b949110f72e188eeac691\r\nx-version: 6.1.2\r\nX-Request-Id: ee411b6e-4905-43a1-afcc-2afd4163616b\r\nX-Custom-Referer: https://p20.vgpjm.guru/?cid=9671283\r\ndomain: p20.vgpjm.guru\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: ee411b6e-4905-43a1-afcc-2afd4163616b\r\ntimestamp: 1772554310\r\nsiteCode: 1860\r\nsign: u3MOvVeiKzLbGb2Q/kkLnugHNcI03HtsW5I2sRpdg0TDFpsbs63iqea3jsQ2kCAO\r\ndevicetype: 4\r\nplatformtype: 3\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:51 GMT\r\ncontent-type: application/json\r\nx-oss-request-id: 69A70847533755363120CD39\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nlast-modified: Sat, 28 Feb 2026 19:21:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5343713706730050141\r\nx-oss-storage-class: Standard\r\ncache-control: s-maxage=600,public,max-age=0\r\ncontent-md5: JVbwaC7hHgi6CINwK/fx9A==\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nserver: gocache\r\nc-type: pf\r\nrid: b77785eb6382c5574782c99b15a7a28f\r\nx-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4096,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (4096), with no line terminators","md5":"2556f0682ee11e08ba0883702bf7f1f4","sha1":"1508a53b5dc40632b6efac61958f57ae87d16657","sha256":"90a38c062416e4cf4f4cc4e58b6414507ca9652fbf8d9023ff0a4b293e3d3375","sha512":"e9e147de49601d6ba7adf356828bdb0951e4c9b3eefce4fc4e130358bdccf7aab5f5b3b2650cadbb3248e816e53c07cc670105821beb51c0635de08f2c1cc2bc","ssdeep":"","tlshash":"4d817d778e06278d7402ebab02bce036d831881d44499de14eb2bb65d7f850c396cf51","first_seen":"2026-03-03T16:12:25.375759Z","last_seen":"2026-03-03T16:12:25.375759Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@cg-gj7GXBFN.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:44.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/@cg-gj7GXBFN.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:45 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-5918\"\r\nExpires: Wed, 04 Mar 2026 04:11:45 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22808,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22807)","md5":"2f67c60f5e2248291ab113749bf17af1","sha1":"3bb397df41f44ad9d2e177bb2909ff625300091e","sha256":"69b9978e158acdbba9d62b4f0e46b749bcf0078c8f782a39cce215e75ff191bb","sha512":"aa96817c7dae23fe7a7a401bf2233f8c1143a8daa85aafe00aae33a19e62b8e916bbf6a02c7fd76dc7c50a1b14361c469ecd97e12626f6b455498a283d2e7662","ssdeep":"384:lHNz4tbyCmydEZG/ZyUTXB9iq9ZIRNBLB4Ck0YTsgDNtUxUyztuGon8M+EDWzW0q:z4tbyCmydEZGlTXmgZIrBLBlk0qsuNGQ","tlshash":"2ea2b3f83093b47153aa14e7407b0102f36a3994300e9594f69dadeb3e7641a52b3fbd","first_seen":"2024-09-23T04:34:25Z","last_seen":"2026-04-17T05:18:15.339386Z","times_seen":4588,"resource_available":true,"data":null}},"time_used":1354,"timings":{"blocked":551,"dns":56,"connect":243,"send":0,"wait":249,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/vant-Bx1Nn4mE.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:44.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/vant-Bx1Nn4mE.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:45 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-6241\"\r\nExpires: Wed, 04 Mar 2026 04:11:45 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25153,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24864)","md5":"0d927aa42a006a8ac41b97df6193f8c1","sha1":"54659d28059e78eb4c5c3cef7af3afba2d1c00bc","sha256":"e1400d71107a32a130fb73330c93affdc1aa45901df35d4b9cb8d2888d8b86ca","sha512":"3256e8a2cadcb109a62392e2d8aea27da5749a73d5b0fa7741a50c9e1ae4cdc97acbc6871b05e4abc1b3182e6c7631e4fd70e6636d2e595907f8fd63882776fa","ssdeep":"768:/HcoeRdR113jDKzaKhIP3aJZmHD19BOoTEwVde0ewh6Kg462KIGsEnCrE/jXg:ko0DKzO3aUnMULPKXg","tlshash":"54b219993087f43f63f585ee40290201a3291b6a341ec4ecb53ceedbb299c5974b6b35","first_seen":"2025-02-21T19:40:40.350954Z","last_seen":"2026-04-17T05:18:15.324995Z","times_seen":2323,"resource_available":true,"data":null}},"time_used":1077,"timings":{"blocked":830,"dns":0,"connect":0,"send":0,"wait":246,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"146.103.81.185/bewcdn.txt?t=1772554307640","fqdn":"146.103.81.185","domain":"146.103.81.185","tld":""},"ip":{"addr":"146.103.81.185","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:47.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"146.103.81.102","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 22 May 2025 09:33:59 GMT","end":"Tue, 23 Jun 2026 09:33:58 GMT"},"fingerprint":{"sha1":"A2:A9:4B:43:6F:D9:56:1B:47:D2:4B:FC:80:BF:DF:30:C2:F6:D2:BA","sha256":"0E:6D:3E:6E:4C:B5:F3:96:13:73:43:88:78:12:08:02:12:46:62:F0:6A:C8:02:4F:D1:83:88:3D:C0:D5:FA:9B"}}},"request":{"raw":"GET /bewcdn.txt?t=1772554307640 HTTP/1.1\r\nHost: 146.103.81.185\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:48 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nserver: AliyunOSS\r\nx-oss-request-id: 69A70844100000363458960B\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\naccept-ranges: bytes\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Tue, 03 Mar 2026 11:07:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v7.1.89\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 2\r\nvia: 1.1 PSxgHK6px178:6 (W), 1.1 jp18:7 (W)\r\nx-px: ms jp18SIN, ms PSxgHK6px178HKG(origin)\r\nx-ws-request-id: 69a70844_jp18_19151-3969\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-17T06:16:40.61675Z","times_seen":269389,"resource_available":true,"data":null}},"time_used":1831,"timings":{"blocked":769,"dns":0,"connect":181,"send":0,"wait":286,"receive":0,"ssl":592},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@vue-Dhdcds7m.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:43.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/@vue-Dhdcds7m.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/js/index-BPSXan64.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:44 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-116ee\"\r\nExpires: Wed, 04 Mar 2026 04:11:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c6aeb50904c2b0cefc86d2c352cf9890","sha1":"6532dce3f5f4b064b9945152e90ac84a795a3484","sha256":"4fdb776a11b806f8443684362524dc999b24cc9165a123604075fdda7e7684a6","sha512":"64186490f4d6b60b0bb05b39985abda1215448465a2287c7cc821e94370285a2f0999cc93e47d0c0de904fb2cb634aa31febff67522e5896e0c267beaab3f6ab","ssdeep":"768:BaxDn7WN0FXq3YmibvZ3aODa6P5s0hrj4tRGMEozk7iOpT6EGukWE42VVhvpwXnv:hPS356IbmABYL0HBHCPAERDzt5Y","tlshash":"9b63f8e83192b46163fa19f2007b0406f3392d56384ad998b26dfddb3e7240551bbebd","first_seen":"2025-02-21T19:40:40.34669Z","last_seen":"2026-04-17T05:18:15.338535Z","times_seen":2325,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/crypto-js-BH_E2a6S.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.180","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:43.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/crypto-js-BH_E2a6S.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/js/index-BPSXan64.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:44 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-10c62\"\r\nExpires: Wed, 04 Mar 2026 04:11:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68706,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cdb4ca0e310f499c43f1b943f23a1a5b","sha1":"1b69d808334b455f965d2ec277c72d741a7a2138","sha256":"7625e727f0ef0b21e0be752cf81d57d2c69956774577d14770b11392ee25a849","sha512":"b5bb25cf594092bceebd532d1ec1b752e16eec59570f21188cc2854f1d574b85e13c0d45a23367cc8187e17592a876b677dd5d70ee772a1269e896b46e653d22","ssdeep":"1536:/GrdeoUguEaND8nKC5XYDyPtNPU9ArHMt:/Grsik","tlshash":"2e634ac5368874d2a3ab34e0193f644bb27739e60aac8598e164e9ddbdbc6cc4035d3d","first_seen":"2024-12-20T00:48:17.454242Z","last_seen":"2026-04-17T05:18:15.359694Z","times_seen":3453,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":482,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.21.4/hall/api/agent/downloadSite/regionAccessV2","fqdn":"153.43.21.4","domain":"153.43.21.4","tld":""},"ip":{"addr":"153.43.21.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:49.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"153.43.21.2","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 30 Dec 2025 08:33:37 GMT","end":"Sun, 31 Jan 2027 08:33:36 GMT"},"fingerprint":{"sha1":"F6:83:67:B1:3E:90:B8:15:01:1D:80:4C:41:D0:AE:25:A3:D9:C5:5F","sha256":"03:52:F2:C4:B9:04:1A:94:CE:CF:EE:1C:67:88:3C:48:12:65:3C:43:F6:DD:39:AA:11:08:4C:A1:D2:C3:DB:D0"}}},"request":{"raw":"POST /hall/api/agent/downloadSite/regionAccessV2 HTTP/1.1\r\nHost: 153.43.21.4\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nlanguage: en\r\ndevice: 133a8883bd7b949110f72e188eeac691\r\nx-version: 6.1.2\r\nX-Request-Id: 4d4e4c63-def9-4f37-bb3b-b9ca5565e63b\r\nX-Custom-Referer: https://p20.vgpjm.guru/?cid=9671283\r\ndomain: p20.vgpjm.guru\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 4d4e4c63-def9-4f37-bb3b-b9ca5565e63b\r\ntimestamp: 1772554308\r\nsiteCode: 1860\r\nsign: VvG3ZNGd/lTrQKEm4rKTGw7sn5ZckRKGi6WvaAH1PIuFCEycW2iCdNf/geARLYdC\r\ndevicetype: 4\r\nplatformtype: 3\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 278\r\nset-cookie: acw_tc=0a094e6517725543092545265e4e2df4d5da0b6d7afac087c9d1bbb40642b9;path=/;HttpOnly;Max-Age=1800\r\nx-trace-id: a3c39e98c9b70025e8c872b68d5314b4\r\nx-env-apisix: 0\r\nx-env-go-biz-agent-server: 0\r\ncache-control: no-cache\r\nx-saas-server-id: 844988bcd4-c8jnd|f36adfdaad6a5665b8ba42f5203625c3\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 jp184:2 (W), 1.1 jp18:20 (W)\r\nx-px: ms jp18SIN, ms jp184SIN(origin)\r\nx-ws-request-id: 69a70845_jp18_21925-39023\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"70a26976633ec8dec19a77c80cdca121","sha1":"2214ebe89eee7fa46bb533d44a5da0470707cd4f","sha256":"9e7fbdbe850617088c6da1d6d0e6e3622da49c99fce975ca51328ff20471da0e","sha512":"353e8cdc2320484f3e96d4748482a7ca81dced197d5553d5d1e288fccf7b335199e452e197d56ed845e8b92a20709ca5a5d5cb03b6c3b71eda5a9d391d05d556","ssdeep":"","tlshash":"f8d05e1e1735adbdee9592a9602a6ed175ec5401204da738fddf2e2422d838e433125a","first_seen":"2026-03-03T16:12:25.37788Z","last_seen":"2026-03-03T16:12:25.37788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esfsgdh42448.rtrkg0530.com/hall/api/agent/downloadSite/getDownloadTemplate/tid/4500870.json?t=1772554","fqdn":"esfsgdh42448.rtrkg0530.com","domain":"rtrkg0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:49.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esfsgdh42448.rtrkg0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 May 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:91:C2:94:DF:77:69:8F:DE:C7:53:5B:14:B9:07:D0:0B:30:01:96","sha256":"94:34:31:66:1E:1C:74:2D:E9:57:D6:65:B8:98:A9:E0:FF:CB:55:96:91:BA:14:52:32:AC:32:8A:81:BA:17:ED"}}},"request":{"raw":"OPTIONS /hall/api/agent/downloadSite/getDownloadTemplate/tid/4500870.json?t=1772554 HTTP/1.1\r\nHost: esfsgdh42448.rtrkg0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: clienttimezone,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:50 GMT\r\ncontent-length: 0\r\nx-oss-request-id: 69A708465337553631E2C839\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-allow-headers: clienttimezone, device, devicemodel, devicetype, domain, language, nonce, platformtype, sign, sitecode, timestamp, x-custom-referer, x-request-id, x-version\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nx-oss-server-time: 0\r\nserver: gocache\r\nc-type: pf\r\nrid: 6b95436ca6d67274e15a549f43112e90\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T06:13:31.670337Z","times_seen":13848739,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esfsgdh42448.rtrkg0530.com/hall/api/lobby/config/getAppDownloadInfo.json?t=1772554","fqdn":"esfsgdh42448.rtrkg0530.com","domain":"rtrkg0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:50.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esfsgdh42448.rtrkg0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 May 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:91:C2:94:DF:77:69:8F:DE:C7:53:5B:14:B9:07:D0:0B:30:01:96","sha256":"94:34:31:66:1E:1C:74:2D:E9:57:D6:65:B8:98:A9:E0:FF:CB:55:96:91:BA:14:52:32:AC:32:8A:81:BA:17:ED"}}},"request":{"raw":"OPTIONS /hall/api/lobby/config/getAppDownloadInfo.json?t=1772554 HTTP/1.1\r\nHost: esfsgdh42448.rtrkg0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: clienttimezone,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://p20.vgpjm.guru/\r\nOrigin: https://p20.vgpjm.guru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:50 GMT\r\ncontent-length: 0\r\nx-oss-request-id: 69A70846533755363136CB39\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-allow-headers: clienttimezone, device, devicemodel, devicetype, domain, language, nonce, platformtype, sign, sitecode, timestamp, x-custom-referer, x-request-id, x-version\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nx-oss-server-time: 0\r\nserver: gocache\r\nc-type: pf\r\nrid: b4d4efb4d3b52e2b3ccd48d52a00a82e\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T06:13:31.670337Z","times_seen":13848739,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-CI2NfpH3.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.180","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/index-CI2NfpH3.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/js/index-BPSXan64.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:51 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-156d\"\r\nExpires: Wed, 04 Mar 2026 04:11:51 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5485,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5482)","md5":"9051c7064ae4dab6436821b2cb52c17e","sha1":"4169db4ae90958140d4fe4d8a29ff29ea06d7644","sha256":"d853f9df8125b638c1960c7ef3c5c2996c886c71fabc0e3c945d6553bcebb412","sha512":"08246b01ce8d827d13b3594ae440401f0578378bd4e5f8d17793b6d053974311403b17106ad0a52c0570cd7cc21158696aaed105ab0d2dc309000ef3e949d4df","ssdeep":"96:S1cRIUAnJLBLA4xRlb5cPtG5bdsVtWGQsqYfPpVI6dieuMk9NBK6XsK6XbHqoYNd:SOshBjxRF5a2bdH+K67FsN4676e7","tlshash":"4eb1c68ef076c83aa2b7853c951e0852a249efd29076a36436fe8e3c17f6d144367359","first_seen":"2025-06-10T13:59:43.281149Z","last_seen":"2026-04-11T09:39:25.371703Z","times_seen":126,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/index-DImzadBO.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.193","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/index-DImzadBO.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/js/index-D1IkuzHd.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:51 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-58b\"\r\nExpires: Wed, 04 Mar 2026 04:11:51 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1418)","md5":"124d32186e00b82694129065952da9bb","sha1":"be5f966da05e7efb2567f71080e9936271f8aec2","sha256":"17c88b9c32d825b5a4b03f5410e3562dd79f52438391f477e359d3a1cab118ea","sha512":"a59f39a7ad2254b458e5f1de6fbc59e294aa3349d3b0b115029f2870b5ce9a08d13391816776fb00a91e17274bb8fbe2629a272c494bf69cf5aef6743b982cee","ssdeep":"","tlshash":"7c21410af145acb902b644986004006122ea4bae42f8d7e0a2fd8f9943b4c70d57ed7d","first_seen":"2025-06-10T13:59:43.278807Z","last_seen":"2026-04-11T09:39:25.388749Z","times_seen":126,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esfsgdh42448.rtrkg0530.com/siteadmin/upload/img/1966070426118279170.avif","fqdn":"esfsgdh42448.rtrkg0530.com","domain":"rtrkg0530.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:51.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esfsgdh42448.rtrkg0530.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 May 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:91:C2:94:DF:77:69:8F:DE:C7:53:5B:14:B9:07:D0:0B:30:01:96","sha256":"94:34:31:66:1E:1C:74:2D:E9:57:D6:65:B8:98:A9:E0:FF:CB:55:96:91:BA:14:52:32:AC:32:8A:81:BA:17:ED"}}},"request":{"raw":"GET /siteadmin/upload/img/1966070426118279170.avif HTTP/1.1\r\nHost: esfsgdh42448.rtrkg0530.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 16:11:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 818437\r\nx-oss-request-id: 69A70847710AC133374C30B6\r\nvary: Origin\r\netag: \"997B4C762933074598D1E9C898B0FC01\"\r\nlast-modified: Thu, 11 Sep 2025 09:25:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11478962702957538167\r\nx-oss-storage-class: Standard\r\ncache-control: immutable,stale-while-revalidate=86400,public,max-age=86400\r\ncontent-md5: mXtMdikzB0WY0enImLD8AQ==\r\nx-oss-server-time: 24\r\nserver: gocache\r\nc-type: pf\r\nrid: 85c5b784b1b1a7747835ad2b0e0c2579\r\nx-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":818437,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"997b4c762933074598d1e9c898b0fc01","sha1":"2735f5c2cd7db985d6dbed541c38bf815214f476","sha256":"243586169e3a013a1610308720558db1031718e06726006089f88a7f1059b718","sha512":"9e5c5e8f88221af1348b88032e192bf37b8eaa56fd491acbdd4be038f3a246729fc6e6c336af290d8deffb02071da5202f8656a33f5ddaf6dd8c526b5db32218","ssdeep":"24576:HVDp8wxJKPEHpLi0Rou/MwxVcYuIRxx4bq:pp1x4+FiSou373Rwbq","tlshash":"e705330c5d8b26d4b84ec59372d6434abeb4cdbac9b115d1834831d22897eb7ce3ea53","first_seen":"2025-11-01T12:58:23.246613Z","last_seen":"2026-03-03T16:12:25.379123Z","times_seen":6,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":610,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/vant-Bx1Nn4mE.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.180","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:43.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/vant-Bx1Nn4mE.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://p20.vgpjm.guru/js/index-BPSXan64.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:44 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-6241\"\r\nExpires: Wed, 04 Mar 2026 04:11:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25153,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24864)","md5":"0d927aa42a006a8ac41b97df6193f8c1","sha1":"54659d28059e78eb4c5c3cef7af3afba2d1c00bc","sha256":"e1400d71107a32a130fb73330c93affdc1aa45901df35d4b9cb8d2888d8b86ca","sha512":"3256e8a2cadcb109a62392e2d8aea27da5749a73d5b0fa7741a50c9e1ae4cdc97acbc6871b05e4abc1b3182e6c7631e4fd70e6636d2e595907f8fd63882776fa","ssdeep":"768:/HcoeRdR113jDKzaKhIP3aJZmHD19BOoTEwVde0ewh6Kg462KIGsEnCrE/jXg:ko0DKzO3aUnMULPKXg","tlshash":"54b219993087f43f63f585ee40290201a3291b6a341ec4ecb53ceedbb299c5974b6b35","first_seen":"2025-02-21T19:40:40.350954Z","last_seen":"2026-04-17T05:18:15.324995Z","times_seen":2323,"resource_available":true,"data":null}},"time_used":1229,"timings":{"blocked":484,"dns":1,"connect":241,"send":0,"wait":248,"receive":1,"ssl":252},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p20.vgpjm.guru/js/@vant-D2LFdCs1.js","fqdn":"p20.vgpjm.guru","domain":"vgpjm.guru","tld":"guru"},"ip":{"addr":"137.220.156.187","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://p20.vgpjm.guru/","date":"2026-03-03T16:11:44.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p20.vgpjm.guru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 15:27:03 GMT","end":"Fri, 24 Apr 2026 15:27:02 GMT"},"fingerprint":{"sha1":"FD:23:D9:41:57:29:89:95:39:75:80:DA:F6:0F:3F:D2:F9:72:6D:54","sha256":"20:AD:38:26:41:CB:D6:E4:E7:89:C0:A9:1B:12:BD:AC:61:BA:77:F4:8F:B5:1B:58:B9:C8:86:60:20:2D:81:8C"}}},"request":{"raw":"GET /js/@vant-D2LFdCs1.js HTTP/1.1\r\nHost: p20.vgpjm.guru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://p20.vgpjm.guru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Mar 2026 16:11:45 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Nov 2025 10:43:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"690dcd44-a4e\"\r\nExpires: Wed, 04 Mar 2026 04:11:45 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2638,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2637)","md5":"5a31aa0fac503f32a3687ba82fb01690","sha1":"0404c8523b23c9744e43362e99df139dd3ab20cf","sha256":"4e1b691d592508249cf1138fff707c216f0905276259fb8239d19177bdb2b253","sha512":"05452e512d31804c25b783d741f8dfc3f5dc78ddcfeaa1b6c61340b13141571e63ccd921f44565aa51cfcb6459a797cd9ac305e99c786b193a841595fbb1b11b","ssdeep":"","tlshash":"e05165ac3a51bc34826a1ea2427f9ba9b2163924704b8050e008dd1539518a3c7fffee","first_seen":"2025-02-21T19:40:40.367652Z","last_seen":"2026-04-17T05:18:15.344081Z","times_seen":2325,"resource_available":true,"data":null}},"time_used":1428,"timings":{"blocked":581,"dns":48,"connect":264,"send":0,"wait":263,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}