{"report_id":"7cb8197d-07a5-42a3-88c9-23075642782e","version":6,"status":"done","tags":[],"date":"2026-03-22T20:12:48Z","url":{"schema":"http","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"172.67.131.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"title":"Savedata-│2D.G.F.│ [160527] [Black Cyc] EXTRAVAGANZA ～蟲狂編～ + ヘッダー＆アイコン-GGBases","dom":{"size":29523,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (524)","md5":"df0aa79b8736d91094e36b84fe645449","sha1":"9ba85ddadd88c9e2c035e74c63a5a2a972b3d833","sha256":"8fd3a6de2663f10c2feb7a0888bfa199640bc255f5fc50072e3dc9844c110745","sha512":"eb249b197f347e2fddba219475a957130186f3a0636fb542ceb37deaf38c41977a1acaee64ed24ecbfa8c5a9916ea98583bd81af688ca25b09628f5f9c11d7d3","ssdeep":"384:xZpNeCfh6OTphqe4fZWXu+QWM9ua4fjriPqz13zoaOkag4J:/Lfh6OTwZHhuzjriPe3zoJkag4J","tlshash":"87d20c10eb89041a703751b5d0a1f7e8757640b3e602aff4f87664b0bec8e6e763b694","dom_hash":"domhash2a5ad9f7e9783c71ae43cbe1def7e64f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"172.67.131.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T20:12:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.ggbases.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.ggbases.com","ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-10-07","domain_rank":1277073,"first_seen":"2016-06-20T01:04:41Z","last_seen":"2026-03-21T10:54:53.208999Z","alert_count":5,"request_count":5,"received_data":161812,"sent_data":2635,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.7.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b63c1fd5602e7b71c918766819ebe906","sha1":"31d70da3041f6efdb2f75514fd37368ef850496a","sha256":"e68adc8c47d2c85065e5bc26d5d7e04577b60dcc041f46d8d19739335d6c5aef","sha512":"11c2ebc4679099158bdcd2fbdc93c0ab45392accf041f4092c21430b874e93178c5fbb3f018507b540adfa3e594e59ca43542086e423108720a261e43cc392dc","ssdeep":"1536:sYRKUfAjtledITmtaFyQHGvCXsetOgRc9izzr4yff8teLvHHEjam7WpX3yzSiLnM:FUbHGvC+09q2o2skAieW","tlshash":"4293e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","size":94783,"data":"","first_seen":"2025-01-05T18:54:42.127454Z","last_seen":"2026-04-09T05:47:56.180437Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"14c7343be72fcdc1a1e2013f6610bfb5","sha1":"751297c7bc3df39dbb00c8c55fb4227e058a79c0","sha256":"df5dd0824b3867b7a3beca0d9230423f1dfce73fabc0d80fa72c4f748ec1fb53","sha512":"80a05c7df98b1f37bf6ce11fea34db009f8437f9f98b1ade35bb01945f91e1d406db7270358dd1917fa2d374ee558a2d0e84517e4d217cac6fe6891684a3cbd2","ssdeep":"","tlshash":"bd017b65fb4c064e503d13e8452b35f6a46c80b2db308ce2bcf021608078b28b1668b8","size":721,"data":"","first_seen":"2026-03-22T20:12:49.467756Z","last_seen":"2026-03-22T20:12:49.467756Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ac80deb016aaf659bfae1253b4916e5","sha1":"5e3cf5f09e5408e12e4c7ab79dc14995a022b9d5","sha256":"2aa4d38e12a059c93195b94600f1d2259fd51a7766e3952394093dc37f813dca","sha512":"60cc9614debeb585ac25f2b4ef29a020ff8bb59962a1a7a0f4812eaaf5e8d39d796f89710936ca053c19dd77878162766141b39a751d94cbfc681ce7989ed8a1","ssdeep":"","tlshash":"54d012f0f29c5e1995e534994a2e678e641f5041c9722fd9ac362c620ad530710266b5","size":200,"data":"","first_seen":"2025-10-07T16:37:29.382539Z","last_seen":"2026-04-09T05:47:56.179573Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"94c271510cc573bf4c08a55e44ffd2b6","sha1":"a23f5e34c158348e3563f3e89bc25273724909ca","sha256":"a3ce2916a3a4ef474e249de7ba8d123436582ecf6fce8924b7c4a79a3ceca968","sha512":"5d9614e03283de4faf08fcd770241debec517e52be51dfdeb2cbe1dc51907799cdd7920d16a48730c80287455f0a563c28b00fa7db1b9d8fc9ca79431dd9a74b","ssdeep":"","tlshash":"dcf0c0b0b0d0995da297231b9a3f13f57ce53363152a8025d07e98b0162095fc56bff5","size":527,"data":"","first_seen":"2025-10-07T16:37:29.384107Z","last_seen":"2026-04-09T05:47:56.180932Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f83374200b897049e57357adf181d3e","sha1":"f38d7d6f497455916072c0f9d59fa1696eb4bf7c","sha256":"25c3a3c53582b76394cfc3fa69e9ce19c9309867c798f99c2bdf49003b7f683f","sha512":"5d7d73a3f0b1e6b38ce80b713ff5d0d8aa7a1e088468f08cc3acda6e5c4ee6d322b62fe33f748c174b40e3e602eaddc7b5cd405dfcd17cd0e90ae09d48ef19f5","ssdeep":"","tlshash":"eda01108f2aa0aa2003023ac822a28c8202820023e088808cc30003c888af0e8022e08","size":84,"data":"","first_seen":"2025-10-07T16:37:29.39467Z","last_seen":"2026-04-09T05:47:56.181438Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ac80deb016aaf659bfae1253b4916e5","sha1":"5e3cf5f09e5408e12e4c7ab79dc14995a022b9d5","sha256":"2aa4d38e12a059c93195b94600f1d2259fd51a7766e3952394093dc37f813dca","sha512":"60cc9614debeb585ac25f2b4ef29a020ff8bb59962a1a7a0f4812eaaf5e8d39d796f89710936ca053c19dd77878162766141b39a751d94cbfc681ce7989ed8a1","ssdeep":"","tlshash":"54d012f0f29c5e1995e534994a2e678e641f5041c9722fd9ac362c620ad530710266b5","size":200,"data":"","first_seen":"2025-10-07T16:37:29.382539Z","last_seen":"2026-04-09T05:47:56.179573Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"94c271510cc573bf4c08a55e44ffd2b6","sha1":"a23f5e34c158348e3563f3e89bc25273724909ca","sha256":"a3ce2916a3a4ef474e249de7ba8d123436582ecf6fce8924b7c4a79a3ceca968","sha512":"5d9614e03283de4faf08fcd770241debec517e52be51dfdeb2cbe1dc51907799cdd7920d16a48730c80287455f0a563c28b00fa7db1b9d8fc9ca79431dd9a74b","ssdeep":"","tlshash":"dcf0c0b0b0d0995da297231b9a3f13f57ce53363152a8025d07e98b0162095fc56bff5","size":527,"data":"","first_seen":"2025-10-07T16:37:29.384107Z","last_seen":"2026-04-09T05:47:56.180932Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ea1c452d2ded8984f60249d88ca06ad","sha1":"85a9a87d8e45ad234915a0e40fda32757baaeb51","sha256":"ebbdbf09b9e9b3b92dbd8b3816e2b09964626ce1728b067e8eb174405f0bd153","sha512":"ed479cb5ce498af7ca82ff65b80e9ccdb324ead2d4d30844669388fcaa573b089a541611062932133b9df89e7bf614e1521b905e0144dc25bf685206069c4e2e","ssdeep":"","tlshash":"4c612284ebac271350f9707a48eb22e4622c9db39f418833f930145174a8f3ea7b7e55","size":3331,"data":"","first_seen":"2025-12-20T05:57:07.624418Z","last_seen":"2026-04-09T05:47:56.182402Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/js/backTotop/jquery.backTotop.js","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cc8923ddaf1f45012b6f0c9fb3a16a7","sha1":"545520daf8840fc17a38dd11ec6b32b883a4ddb9","sha256":"eecfea171014eaab12ce46150ab57cf86ec8691da3d3da38734f3e6e19e0d3bb","sha512":"eea88931c3784383b1f682d150d9814f5daa3588919c7a3974f5996d35427e704f5739921f4e6f4a6966e884ed9866e68c5db55ed876cfef5892f43ca48e8df6","ssdeep":"96:NXfaKs9oiHlVn1MI2G+Au0Yu/C11j1XWl1BUC/wXHXKBJBTo:5faK1muI2Gv3dq191XWl1BUC/wXHXKBg","tlshash":"c3c1bacb529d292382b76a61ed274704fb2a4fbf24929a1d3c7c79d41f71025024afb6","size":6036,"data":"","first_seen":"2025-10-07T16:37:29.371559Z","last_seen":"2026-04-09T05:47:56.164528Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"936d5457bf7a8267149d0b99ff5c6f59","sha1":"716cc821664709b13d99411072cf5db5005e47ce","sha256":"5429629daef68daa799b7977f2b458d16dad8a7b73da76ce198490c0038a09e7","sha512":"e87c3d52fac2682acd25ff94024487a39043024890e07e5dd0bdaecd5030dea86de9c2d9809048b507b44b24fbdcc4177fcf105145400274a008bfac3966be29","ssdeep":"","tlshash":"b601c0063cb0102ab6b5f402851f82023752911bd940dc04bf1d9c957f88d03a5e15fd","size":703,"data":"","first_seen":"2025-10-07T16:37:29.398729Z","last_seen":"2026-04-09T05:47:56.183306Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbd81fc6448737d377b76e61bb2ab870","sha1":"e2997515d0d4d402b1dc669b120af1e1dcc00aab","sha256":"dc2fe1354b6ac73ce80c9a1156b40aa6f5ca06983aa21aeb6a01088e48aa9fe9","sha512":"4058b5bb951ec52bb205880e9b29632175dab279fd0ccd0c6da775c90534e35a6c3f0e7ec80f9a9407eef2d353ac1f7651d712b1ecb21bdb884c566ce10135ce","ssdeep":"","tlshash":"d5417668e1500a9ac17a30b5dd67a14d683295732a15f226611e90f05d34f0fee3fee9","size":2170,"data":"","first_seen":"2025-10-07T16:37:29.400392Z","last_seen":"2026-04-09T05:47:56.18401Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/js/jquery-1.7.2.min.js","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce7d5e7d2f4455696c319d73ec1a75b5","sha1":"ecbbc198eb3419b46aae5206f3b63e91685ccbbc","sha256":"be423d142e44ec752a2ca13869d5c4ec5d8f0711012e3c419009515315f19d65","sha512":"ec15491be5639bedcf4f2b80ec729e877fc16733d472d1661d237dc631c922a54aa4c5650b118d71bd6c913249d4e45c64d5ca68f8f4d3bb2dfc4489d840a511","ssdeep":"1536:O09C+4uqJ1JNKrUXHf1YMf5xYlisoq473LXs1P3hx8EN/WEui:O0MRvRf5OVoV7ORjui","tlshash":"bd6309e210d8117323b4e6d82b5f8112368b57ffbc299d71b1aceed852a4cf51097e26","size":68437,"data":"","first_seen":"2025-01-05T18:54:42.121709Z","last_seen":"2026-04-09T05:47:56.177831Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0564b709e9fb89e314141f43ba9f02d9","sha1":"55e90d2eef034c0cf8b6cd6157dc0239e046d539","sha256":"68f060d520df7284091328ee506fe683901590b203d0c967a4b4ca87e8db46e2","sha512":"f301a8e3293f75da21b37c1bbfe7207bff9b075b98c295f792d77197dd322822548dd265ff795f66eb6238bcb90c3f5996681a60d2366d2080a26f59fae4bc8c","ssdeep":"","tlshash":"e411ef48f1840a0121f93039963fb0b578268423e88aae52b67126f534fcf2ec257e19","size":887,"data":"","first_seen":"2026-03-22T20:12:49.473099Z","last_seen":"2026-03-22T20:12:49.473099Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0036939c678ae8e2274b234e688e67e","sha1":"4cf4026f3f21abf4800c0e57d985e5133fd38500","sha256":"73a2dc236b421c69ab3a5b7ec9e3adad8085f135dd02be8a5f2b63033f7a75be","sha512":"e90ea1987286293210a7afdd2af2055ace8d560a1d4b2351fb0979f870e74beef1fbd3c9083679891bb8214251af83a02c9a955e51965445adaffa4c41b1f0f0","ssdeep":"","tlshash":"4de026b9008d22264cd170da4a8fdaf8bd63c3099ac6da84502967933c9092bc1c61a9","size":342,"data":"","first_seen":"2026-02-11T03:19:30.500364Z","last_seen":"2026-04-09T05:47:56.185719Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a8cc4d6157c7673d8054edfc80dfd26","sha1":"47c37693f4d7dfb365477605d4efff60fdfa4c11","sha256":"983a0821d5736d343394738da600852e1590d4fa8ce08b425b8d1e39900efcdf","sha512":"4b04bcd6e8181c42d6efca941b571d24d1eacb9ae4bf3767d7cc1e0be8952a512ef6fe776c77ee5ff11115ff7875fe34f4eca27330984edf85a4f2fe4ae2a4ea","ssdeep":"","tlshash":"57019c99e48206284cf66d058027f63931fa2de08991d016545cd8d4c26bf9f882dadf","size":724,"data":"","first_seen":"2025-10-07T16:37:29.402453Z","last_seen":"2026-04-09T05:47:56.18988Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.ggbases.com/js/jquery-1.7.2.min.js","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ggbases.com/savedata.so?id=32695","date":"2026-03-22T20:12:26.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggbases.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 02:44:53 GMT","end":"Tue, 05 May 2026 03:43:31 GMT"},"fingerprint":{"sha1":"FA:93:65:B8:CF:11:91:8E:00:CB:09:8A:E9:19:9B:FC:D0:E4:44:14","sha256":"63:EF:F2:32:BC:17:99:B9:3B:3A:B7:71:09:2A:4B:93:31:90:23:24:CB:88:59:1F:2F:2B:F7:02:40:7C:C9:6F"}}},"request":{"raw":"GET /js/jquery-1.7.2.min.js HTTP/1.1\r\nHost: www.ggbases.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ggbases.com/savedata.so?id=32695\r\nCookie: GGBASESSESSIONID=0818542304A7FF8D7FE1616EA8113F72\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 20:12:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FfBs6wsNibR5lpfpclMV37R0Dyc7ec3qABFCd9ALZRwKatLiyYQeixrjAt%2Bq4RQ36k8%2BFdDocqrAIwPLh7g3b6OKY2NXwVErJnyh%2BIZtQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\netag: W/\"68437-1560625234000\"\r\nlast-modified: Sat, 15 Jun 2019 19:00:34 GMT\r\nexpires: Wed, 25 Mar 2026 09:31:11 GMT\r\ncache-control: max-age=259200\r\ncontent-security-policy: script-src 'self' *.dlgal.com dlgal.com *.galpic.xyz ye.plygainroundup.com vv.allworkovergot.com dilatenine.com tsaristcanapes.com addictedwonder.com renomeeguze.com bocoyoutage.com *.histats.com *.cloudfront.net edfsqfaeenij.com *.adsco.re *.cdn4ads.com cdn4ads.com *.dkypsidljq.com *.edfsqfaeenij.com ptewarin.net ulukaris.com clerrrep.com mailwithcash.com *.ggbases.com *.realsrv.com *.exosrv.com *.jads.co *.juicyads.com *.patreon.com http://*:2082 data: blob: 'unsafe-inline' 'unsafe-eval';\r\naccess-control-allow-origin: https://www.dlgal.com\r\nage: 38475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e07d9e9ae0057e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68437,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ce7d5e7d2f4455696c319d73ec1a75b5","sha1":"ecbbc198eb3419b46aae5206f3b63e91685ccbbc","sha256":"be423d142e44ec752a2ca13869d5c4ec5d8f0711012e3c419009515315f19d65","sha512":"ec15491be5639bedcf4f2b80ec729e877fc16733d472d1661d237dc631c922a54aa4c5650b118d71bd6c913249d4e45c64d5ca68f8f4d3bb2dfc4489d840a511","ssdeep":"1536:O09C+4uqJ1JNKrUXHf1YMf5xYlisoq473LXs1P3hx8EN/WEui:O0MRvRf5OVoV7ORjui","tlshash":"bd6309e210d8117323b4e6d82b5f8112368b57ffbc299d71b1aceed852a4cf51097e26","first_seen":"2025-01-05T18:54:42.121709Z","last_seen":"2026-04-09T05:47:56.177831Z","times_seen":13,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.ggbases.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/js/backTotop/jquery.backTotop.js","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ggbases.com/savedata.so?id=32695","date":"2026-03-22T20:12:26.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggbases.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 02:44:53 GMT","end":"Tue, 05 May 2026 03:43:31 GMT"},"fingerprint":{"sha1":"FA:93:65:B8:CF:11:91:8E:00:CB:09:8A:E9:19:9B:FC:D0:E4:44:14","sha256":"63:EF:F2:32:BC:17:99:B9:3B:3A:B7:71:09:2A:4B:93:31:90:23:24:CB:88:59:1F:2F:2B:F7:02:40:7C:C9:6F"}}},"request":{"raw":"GET /js/backTotop/jquery.backTotop.js HTTP/1.1\r\nHost: www.ggbases.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ggbases.com/savedata.so?id=32695\r\nCookie: GGBASESSESSIONID=0818542304A7FF8D7FE1616EA8113F72\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 20:12:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbJArJ0woFKYkHQXqyTBV328Nz8YYKjMpBy6YJ2DtSFMWRksFXLh7c0NUhz7PcDYHvVqumqqbXzmWEeA2ozPTRT3yQiRrwEaHfu2GSK52Q%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\netag: W/\"6036-1560625234000\"\r\nlast-modified: Sat, 15 Jun 2019 19:00:34 GMT\r\nexpires: Tue, 24 Mar 2026 00:50:23 GMT\r\ncache-control: max-age=259200\r\ncontent-security-policy: script-src 'self' *.dlgal.com dlgal.com *.galpic.xyz ye.plygainroundup.com vv.allworkovergot.com dilatenine.com tsaristcanapes.com addictedwonder.com renomeeguze.com bocoyoutage.com *.histats.com *.cloudfront.net edfsqfaeenij.com *.adsco.re *.cdn4ads.com cdn4ads.com *.dkypsidljq.com *.edfsqfaeenij.com ptewarin.net ulukaris.com clerrrep.com mailwithcash.com *.ggbases.com *.realsrv.com *.exosrv.com *.jads.co *.juicyads.com *.patreon.com http://*:2082 data: blob: 'unsafe-inline' 'unsafe-eval';\r\naccess-control-allow-origin: https://www.dlgal.com\r\nage: 156122\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e07d9e9be0257e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9cc8923ddaf1f45012b6f0c9fb3a16a7","sha1":"545520daf8840fc17a38dd11ec6b32b883a4ddb9","sha256":"eecfea171014eaab12ce46150ab57cf86ec8691da3d3da38734f3e6e19e0d3bb","sha512":"eea88931c3784383b1f682d150d9814f5daa3588919c7a3974f5996d35427e704f5739921f4e6f4a6966e884ed9866e68c5db55ed876cfef5892f43ca48e8df6","ssdeep":"96:NXfaKs9oiHlVn1MI2G+Au0Yu/C11j1XWl1BUC/wXHXKBJBTo:5faK1muI2Gv3dq191XWl1BUC/wXHXKBg","tlshash":"c3c1bacb529d292382b76a61ed274704fb2a4fbf24929a1d3c7c79d41f71025024afb6","first_seen":"2025-10-07T16:37:29.371559Z","last_seen":"2026-04-09T05:47:56.164528Z","times_seen":10,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.ggbases.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/fonts/PayPalSansBig-Regular.ttf","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.ggbases.com/savedata.so?id=32695","date":"2026-03-22T20:12:26.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggbases.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 02:44:53 GMT","end":"Tue, 05 May 2026 03:43:31 GMT"},"fingerprint":{"sha1":"FA:93:65:B8:CF:11:91:8E:00:CB:09:8A:E9:19:9B:FC:D0:E4:44:14","sha256":"63:EF:F2:32:BC:17:99:B9:3B:3A:B7:71:09:2A:4B:93:31:90:23:24:CB:88:59:1F:2F:2B:F7:02:40:7C:C9:6F"}}},"request":{"raw":"GET /fonts/PayPalSansBig-Regular.ttf HTTP/1.1\r\nHost: www.ggbases.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ggbases.com/savedata.so?id=32695\r\nCookie: GGBASESSESSIONID=0818542304A7FF8D7FE1616EA8113F72\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 20:12:26 GMT\r\ncontent-type: application/x-font-ttf\r\ncontent-length: 46584\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\netag: W/\"46584-1590667010000\"\r\nlast-modified: Thu, 28 May 2020 11:56:50 GMT\r\nexpires: Wed, 25 Mar 2026 15:32:35 GMT\r\ncache-control: max-age=259200\r\ncontent-security-policy: script-src 'self' *.dlgal.com dlgal.com *.galpic.xyz ye.plygainroundup.com vv.allworkovergot.com dilatenine.com tsaristcanapes.com addictedwonder.com renomeeguze.com bocoyoutage.com *.histats.com *.cloudfront.net edfsqfaeenij.com *.adsco.re *.cdn4ads.com cdn4ads.com *.dkypsidljq.com *.edfsqfaeenij.com ptewarin.net ulukaris.com clerrrep.com mailwithcash.com *.ggbases.com *.realsrv.com *.exosrv.com *.jads.co *.juicyads.com *.patreon.com http://*:2082 data: blob: 'unsafe-inline' 'unsafe-eval';\r\naccess-control-allow-origin: https://www.dlgal.com\r\nage: 16790\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLH7wH0M8Y2qbbWCa5pdrgTRPUPM%2F4kguKbXei677toIxSTTXeN4IbkgYzO2LSKE7I96nqc6OliZJvKfgvCIHl4xaRUoIQfSkuQeTTJrzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e07d9ea6e1057e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46584,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"BASE\", 26 names, Macintosh, � 2015 Klim Type Foundry. All Rights Reserved.PayPal Sans BigRegular1.002;KLIM;PayPalSansBig-Reg","md5":"2a2a86cd3dbfddc0e6fade29fd36365c","sha1":"fd7a89d605f53774b4312ad8a2e8c0c3747c736f","sha256":"2a935b2ff958a096bc658aed075c3e2fa1b890a449484dc0bfc76251f6d9d8ad","sha512":"235113d33d7f7d94796136e1173485bc34b426f2e694b1beb6ca18443ae1564ff84d4e166112ab07c5ba0197fe9cf3e2c5f236faa5785a27f2f16845308d980c","ssdeep":"768:CAAGZvsLipeMM1ZZzwFR1n+8leP7Bo9hB8eM/FZmcZjazsRQ1zP:Cn0srF1jwFTnlly7m90/Pa5","tlshash":"17230706f753d399e91329f8ec63e7a31f18f8366a76878fb1858e7ad84a0c09d41741","first_seen":"2025-10-07T16:37:29.362343Z","last_seen":"2026-04-09T05:47:56.170052Z","times_seen":10,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.ggbases.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/favicon.ico","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ggbases.com/savedata.so?id=32695","date":"2026-03-22T20:12:26.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggbases.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 02:44:53 GMT","end":"Tue, 05 May 2026 03:43:31 GMT"},"fingerprint":{"sha1":"FA:93:65:B8:CF:11:91:8E:00:CB:09:8A:E9:19:9B:FC:D0:E4:44:14","sha256":"63:EF:F2:32:BC:17:99:B9:3B:3A:B7:71:09:2A:4B:93:31:90:23:24:CB:88:59:1F:2F:2B:F7:02:40:7C:C9:6F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ggbases.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ggbases.com/savedata.so?id=32695\r\nCookie: GGBASESSESSIONID=0818542304A7FF8D7FE1616EA8113F72; timezone=0; w=1264\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 20:12:26 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DiOfYj9qGRuUi0tfMFz12%2FAeVQW3rb800J8nhiGNmunPmbYAAlZNm0%2FlEwzcm25rVpTj5AQj63Dq8syHBmc0SynhXrWXxjMtguMVrDxCew%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\netag: W/\"4286-1560625234000\"\r\nlast-modified: Sat, 15 Jun 2019 19:00:34 GMT\r\ncontent-security-policy: script-src 'self' *.dlgal.com dlgal.com *.galpic.xyz ye.plygainroundup.com vv.allworkovergot.com dilatenine.com tsaristcanapes.com addictedwonder.com renomeeguze.com bocoyoutage.com *.histats.com *.cloudfront.net edfsqfaeenij.com *.adsco.re *.cdn4ads.com cdn4ads.com *.dkypsidljq.com *.edfsqfaeenij.com ptewarin.net ulukaris.com clerrrep.com mailwithcash.com *.ggbases.com *.realsrv.com *.exosrv.com *.jads.co *.juicyads.com *.patreon.com http://*:2082 data: blob: 'unsafe-inline' 'unsafe-eval';\r\naccess-control-allow-origin: https://www.dlgal.com\r\nage: 2768\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e07d9eb2e2457e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"fb716e878f738d504b1a3525742f8741","sha1":"9971892b545ee976a7c2068114bd0d33b1a46ca6","sha256":"155fb8ed5cf524d8109a56e141f6a7fe8842916ad059f39a7274d870c8987315","sha512":"c84731fd6c768fad9fd1005d06711722d06e9b182c8d01c06e694fe29a118202df9ad4ebbb412d441b93cb561689be9b0aa72f703f21b94210a300c0ade5a23f","ssdeep":"48:UUTIa8W3ImKbZuiZaiI6ZfrNutUJCLLU9g2xoBBOkX9X4wHboouTfC2Wkhk:E+stuIaiI6hpuaJgeoB7N4TTC2WR","tlshash":"8d91dcdcb1318146f1664b305c440ea5bfeebc6ba1fb714eb7c17d233122a909e28765","first_seen":"2025-10-07T16:37:29.374155Z","last_seen":"2026-04-09T05:47:56.173881Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.ggbases.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ggbases.com/savedata.so?id=32695","fqdn":"www.ggbases.com","domain":"ggbases.com","tld":"com"},"ip":{"addr":"104.21.3.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T20:12:25.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggbases.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 02:44:53 GMT","end":"Tue, 05 May 2026 03:43:31 GMT"},"fingerprint":{"sha1":"FA:93:65:B8:CF:11:91:8E:00:CB:09:8A:E9:19:9B:FC:D0:E4:44:14","sha256":"63:EF:F2:32:BC:17:99:B9:3B:3A:B7:71:09:2A:4B:93:31:90:23:24:CB:88:59:1F:2F:2B:F7:02:40:7C:C9:6F"}}},"request":{"raw":"GET /savedata.so?id=32695 HTTP/1.1\r\nHost: www.ggbases.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 20:12:26 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: GGBASESSESSIONID=0818542304A7FF8D7FE1616EA8113F72; Path=/; HttpOnly\r\ncontent-security-policy: script-src 'self' *.dlgal.com dlgal.com *.galpic.xyz ye.plygainroundup.com vv.allworkovergot.com dilatenine.com tsaristcanapes.com addictedwonder.com renomeeguze.com bocoyoutage.com *.histats.com *.cloudfront.net edfsqfaeenij.com *.adsco.re *.cdn4ads.com cdn4ads.com *.dkypsidljq.com *.edfsqfaeenij.com ptewarin.net ulukaris.com clerrrep.com mailwithcash.com *.ggbases.com *.realsrv.com *.exosrv.com *.jads.co *.juicyads.com *.patreon.com http://*:2082 data: blob: 'unsafe-inline' 'unsafe-eval';\r\naccess-control-allow-origin: https://www.dlgal.com\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXt5dCwMp08fHjkQ%2B8HyY4eeNm9MVg4ejMooJXSAlmcpy8j7S%2BgX2HuF0VN1PL9%2BMWL%2FEeoCcr3dbk7GLLZLkhh6K1ih8RLBwgBbkzPERA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e07d9e51c7da0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.7.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":30128,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (529), with CRLF, LF line terminators","md5":"4df1db0fffc04fdbd08d7285d2037d91","sha1":"38f26b54360fac899b1373dc2a30f427b43b7a59","sha256":"9fb130605e6a075a7990fbbd950de01111db9cf6f148f4610a0599e52f08232e","sha512":"d3060fa65d685183c66dd9ae994659cb660a07fe29b404fb51de8fc431db91c24d7354b96d1f7a5de9e3e251d7ddeb88977087904dae907ad2c20938b7b033f3","ssdeep":"384:3R821g0kddhMoJvWGbcBcruKJvl6WHSDIZFRyi3pQ4w:3ix0kddN5uGN6WHsqFRF3pQ4w","tlshash":"ddd21910f7c9141d727740b590b2e768ed76c063c202a7b8fc392473ba85e6a777b698","first_seen":"2026-03-22T20:12:49.465375Z","last_seen":"2026-03-22T20:12:49.465375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":37,"dns":3,"connect":8,"send":0,"wait":539,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"www.ggbases.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}