{"report_id":"7e9eb2c4-92e0-4d4c-8eab-57949f2c1bd4","version":6,"status":"done","tags":[],"date":"2025-09-30T14:13:35Z","url":{"schema":"http","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"title":"2985676 - FD2"},"submit":{"url":{"schema":"http","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-04T14:13:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"fd2ppv.cc","ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-31","domain_rank":0,"first_seen":"2025-09-23T13:31:04.441168Z","last_seen":"2025-09-23T13:31:04.441168Z","alert_count":13,"request_count":14,"received_data":109681,"sent_data":7491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google PageSpeed:1.13.35.2","description":"Google PageSpeed is a family of tools designed to help websites performance optimisations.","website":"https://developers.google.com/speed/pagespeed/mod","common_platform_enumeration":"","icon":"Google PageSpeed.svg","categories":["Caching","Web server extensions","Performance"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-28T22:11:36.689828Z","alert_count":0,"request_count":1,"received_data":422469,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fd2ppv.cc/js/common.js?update=0928","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e0f5c38c2951fd22e85f3c3f88725b8","sha1":"e6eac3059a6dfd6de681729e50567497c7ce5f64","sha256":"bd62b4af7e78ca3f650f187cbc17cc701cea348e28f62bd968390809eca9cf1b","sha512":"61403790b9ab8cf976576347e8a603c7a6ada156bd8a90a6df87f677a2dc6b51c1bb4c7a89504fefd739001502a291fc8aaa7768a1566c71cfe0770b584cfd21","ssdeep":"192:2miyiFiiyU3RRrvVk8imnbSC77kAmU3aWrv4X8iTtLiivqR7ijsPTMRtCCF6c6Qa:VmRtvVL3wma2v4xS1j5GhCVF","tlshash":"1722414e31f318310eb3357b0b9fc2997932440b6448de497e9c86506f85b24aaf3be5","size":9927,"data":"","first_seen":"2025-09-30T14:13:36.705839Z","last_seen":"2025-09-30T14:13:36.705839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"23eb31cfb94a3bf4b49b071f400aae46","sha1":"09cb84bd036a5f8f5228b8cf79de5beb33672e5d","sha256":"b742decf0c5d8d6cb508a7b99482827fe1fe98c874ad138a6d6296583a1f0317","sha512":"374b2476e1906b6a16b9879f8365e58324e437e1bcfa425813055ba08a5843ddf7a9c65901051068488e8cc4db599336ea1fd644172bf9a3708e3fa9c6e25736","ssdeep":"","tlshash":"49d023a91c79843451d4025b50b6e399657021507711734082dadc1fbf15ed354b1a68","size":217,"data":"","first_seen":"2025-09-30T14:13:36.713535Z","last_seen":"2025-09-30T14:13:36.713535Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4949d0c0b8c1443a62b75ffc1b7a9d5","sha1":"c04c5c4ae1793893657b611e7171c6c63ba7c170","sha256":"5b0ca4aec88768604207819c508da87a624345da988053b88741e6edab48af56","sha512":"7229e293c0db93c5289f340a6d7fdac1f92011e9b85ba29042563ac5dd56b4a01a529fc4090cd9a764fb2ed250efd311c9b08292dd66d55af8156c1884c08749","ssdeep":"","tlshash":"00c09b9d22479c7555ef0781072fb5416555311049910c31051572497521d57d695d95","size":133,"data":"","first_seen":"2025-09-23T13:31:10.12254Z","last_seen":"2025-10-25T00:56:38.439384Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6a93640a3468bca4d6c6163f652cdf9","sha1":"77bdd3df41c9257a5270952646b4983490eeebd0","sha256":"354b557cdffa2709f328de7819570c5f51ee5680d65e4aad82c752db303cae71","sha512":"925c375cf0999127adbc1452ced62ca3007e4ca1e647136a340f339c6587621c15e517cb29899d45518eca1d0453c3d68b7bbfeb91f4baecd74b56ed2ef8e1ac","ssdeep":"","tlshash":"3981e964b346b476949f1579325fc28bb83224362e46b8e0560cc0984c74ec785effba","size":3963,"data":"","first_seen":"2025-09-30T14:13:36.719435Z","last_seen":"2025-09-30T14:13:36.719435Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0dfc7ebb992741a88b9db9ab250121a6","sha1":"f6c5cb5ebb7e553764bdd3d019889b3070bcb67e","sha256":"a521836bbe305c961fa2723f768c20004bb509628f5aab74876481003e71c129","sha512":"7a0e32226fd92202bdf5f73596a488a6f9d7b96d6e0a9aad6071e1cae144295ae6be671671d0c9bcc07774a939ce4303b70287fd7829baf39b8bc079b03415dc","ssdeep":"","tlshash":"4df0283dc6ca491a954756a21608d3c3a601cc8afd67373518bfd1a03bb5b0ff8a48f8","size":618,"data":"","first_seen":"2025-09-23T13:31:10.123854Z","last_seen":"2025-09-30T14:13:36.721469Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be3e548254e735ff1cddf2dbea521875","sha1":"2066a8afc03738a446ff143a0800c975d3768c05","sha256":"78d24a45f1a304d40d77dc1ea194d3970092aafa1297e028f6d108f2d2116602","sha512":"e9cb32d1cbc994d21de1a000780f547ce8c95b60bd4ce36e13adbb503f764705019b77dab119104087080f1ab5f7118920e9ba95709a621be0b8e2fb39b1f414","ssdeep":"","tlshash":"0a80044305d007713711100145444371f40ddc0350d4c0515534c03ff4101444440113","size":37,"data":"","first_seen":"2025-09-30T14:13:36.723519Z","last_seen":"2025-09-30T14:13:36.723519Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"f7479439d687ba8676a10540e27228fc","sha1":"b2daaf518a98530a1cf0a96f88e1eb92ff561c02","sha256":"33133a2bab2c1c7312d3f55c19a597dd763420b9edfaba29f66a24954681dc23","sha512":"5c28dc17d85ceecf967e557efb210d7c52ddf4730b2cae37905f3fd51af8b41581480bc6ff40dd414fff5e843c22c1779c51408afe99cc639af824dac8fc2b1e","ssdeep":"","tlshash":"8e900206903b14c82854d31834c541c35d3104590980366152a9a5345051291c5d7a53","size":56,"data":"","first_seen":"2023-04-10T23:56:21Z","last_seen":"2026-04-27T16:18:48.104556Z","times_seen":13207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"79971c8188d3d1038f5e2e8aed0ea923","sha1":"175ed96d3cf0da9bf5ce7ae6b64304b2e5dae9b7","sha256":"1d22470d505ac09d178639e4fc2a46a0a9118781be8e3fb7918dd8ae55ff5064","sha512":"991a4a037d793cb9c1aeb478a3eb3fe6c32fd69ae79d85b5a9ad576b84f6b96c93a7ee70a3a43bd01a2491a577690c216408fc77182a043f2902d77ef9c202da","ssdeep":"","tlshash":"79c01266b4c150760ba66576041262999114ca55e9011559d41e94897af1f06c26372c","size":185,"data":"","first_seen":"2025-09-30T14:13:36.72625Z","last_seen":"2025-09-30T14:13:36.72625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"01e88bdc255e20c695dc0a75fb4b8216","sha1":"f8fbf83ea12aeb08b07a610672568da6fb65d9a1","sha256":"7a85afbf50289284403b1479dab582f1a768066d315023becfcdca7b814fbe64","sha512":"61c1560294496345672c759385847f4ab34e2eeb8955bf320ee9ae9841bf5c4f2dd83ad6da3b49da6fb510abda44a1bf6166ad53acd4be422ab9bb8dc65f342b","ssdeep":"","tlshash":"16e0689af0f3a0304933227b864b4659e42046277d444819bc0c8432afe1b72adf7ab8","size":413,"data":"","first_seen":"2025-09-30T14:13:36.728081Z","last_seen":"2025-09-30T14:13:36.728081Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"83a081c855671b642d03f99705386154","sha1":"fc78654bc9966552b846b4f8878ba10a95b4f47c","sha256":"e16542c1b84938c2eb8d35333e86c556aa6c9016e68bfcf50df20635d7893df3","sha512":"c42385ee8510ed00dc567997f783a832e33779f3c074ec31a36717dd29f9b26af8d6afa77a832b2ffcb021aedc7ba70fb729f67911c964392135496166f1f3da","ssdeep":"","tlshash":"6c1100793a1a1534c5c5418b317ee7a93d3220217a02a184c36cdc299d1ce8714efdbe","size":902,"data":"","first_seen":"2025-09-30T14:13:36.730087Z","last_seen":"2025-09-30T14:13:36.730087Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c639c8d6e2f0ab06f3cac36e87ce4e18","sha1":"832cc31edeb59ffefc15ed2bbdbfcc0e9ae8075e","sha256":"8e62286216dbb2265df0bf825de6612072066c52ef243d0c5d4e8b0dff6899df","sha512":"bced6678af3977f7fd27afe103a34aae8a3387a89c97d211b97e22091bab9278b13d4eba08f069b3f03535fad9b781d1b1aa002bf17f49d8e5aed9c49f526a02","ssdeep":"192:qK8bKNgxO3Dnvhz2RJ2fxVfaArOmW1T+hqBtn1muIgTbnZjF:gbagxcnvZ2ReI4qB1QuI4ZR","tlshash":"5f22e8cefe986a02c133206188073dc725a9f90590ad5952ef50d9e8bb7d788779ff48","size":10046,"data":"","first_seen":"2025-09-30T13:42:44.175696Z","last_seen":"2025-09-30T14:42:37.142708Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YGF3M7RSZR","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c850bb335dfffd26679cb8ec5e8055ec","sha1":"1612104aa304e35db7dd68814615545d244ed5fe","sha256":"acd8df35ea843bb208f3cd9445a8e3d20c0a88f7b4339a3ddfcb21769963409b","sha512":"ea8ce76eb674db2560b34e0547da1c28000b26215585600fd3fcdca1bf005e95510f7ad21e6d26a4a48906fa81680a77ca9bed51b35c557c75d34c0e15080899","ssdeep":"6144:vB5SmbjQOBQy5Coq2BvK7Dpr5Ssu1eJ+kM:ZYcVeyPq2gO","tlshash":"c2940ace73d674665396e478903f018ba5bb28a2f44cc899f189cce42d74a9a4137f7c","size":421865,"data":"","first_seen":"2025-09-30T14:13:36.709602Z","last_seen":"2025-09-30T14:13:36.709602Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fd2ppv.cc/css/fonts/icomoon.ttf?i2q2dt","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"GET /css/fonts/icomoon.ttf?i2q2dt HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fd2ppv.cc/css/style.css?update=0927\r\nCookie: lang=ja\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nstrict-transport-security: max-age=3153600;includeSubdomains; preload\r\nlast-modified: Tue, 30 Sep 2025 09:11:09 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IeJzc%2BpIHCEFDWb3wl6EeOTUWMhACyCyrdzLtzP9Y%2FRHzePksd0AlqTLqC9ENERsjIlBE4t%2FBv202JMQp9quJsPUMCX5mp9nhQ%3D%3D\"}]}\r\netag: W/\"1bf8-6400121f34540\"\r\ncache-control: max-age=31536000, s-maxage=10\r\nexpires: Wed, 30 Sep 2026 14:13:13 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/ttf\r\ncf-cache-status: MISS\r\ncf-ray: 987451d74eb25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7160,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"debdd1a7d5a2d25483fa90d63a7d651f","sha1":"40443ff12cba486cdf70d160de76e2f583ee5dc0","sha256":"d6638bb00bb1dabce2b93ed2654f240143b06a3d23350eeb580aad5f7552a9b8","sha512":"7c0ede21a30800d8f699a0fc95c2b19bd7a0e2854e1d0d860fd01ba9bf4218d8158903f4ab956e66df64282aeea3b659558b8a67346611f4e29bfeac441e42ce","ssdeep":"192:EqpXDWhLa8T9B+RdScaq1s3AVyZg7/FUlPV2K:EOP6BsdStlcyZg7Sd5","tlshash":"c9e19600933cf945fd0b933409efa20ac7fd9911df16d28b4c0a74aee9259e98c6ce64","first_seen":"2025-09-30T14:13:36.686692Z","last_seen":"2025-09-30T14:13:36.686692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/mod_pagespeed_beacon?url=https%3A%2F%2Ffd2ppv.cc%2Farticles%2F2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"POST /mod_pagespeed_beacon?url=https%3A%2F%2Ffd2ppv.cc%2Farticles%2F2985676 HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 41\r\nOrigin: https://fd2ppv.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fd2ppv.cc/articles/2985676\r\nCookie: lang=ja; articles=OUJvMjhGNzRZ; cf_clearance=yqkVqHic7GhlsHowO6RA0r9YW.CuprMAsmceymZQd5c-1759241593-1.2.1.1-AdzEo.pk2tMRAOFn8fYZ_77nBI.hFwkHcAswm_04cv8KV7xIIY8XnX7z28_HM.qAn6SfEHQH5t9dzi2g85R3GnMPg5bLULVN.x5lHfZULXPwlw.b5VhY42EUtW.LurEe9o7TWvNLLgCrNh4h7MQJNLMNq0OurWgdRFebBLguO7BSDqU3rmaCKMLvikL6VMH0eaZffpS67h4MF0k_iEMVWMG9.gnDF3yjeqgQ8EWMhHE; _ga_YGF3M7RSZR=GS2.1.s1759241593$o1$g0$t1759241593$j60$l0$h0; _ga=GA1.1.145560941.1759241594\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nstrict-transport-security: max-age=3153600;includeSubdomains; preload\r\ncache-control: max-age=0, no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0DTGOcLMjh2uYjY4vzCLq5h76PGZThkptM%2F83y2i4m1eLNmmXhSg%2BS1u77Emy9URIw67bHxiP58RdlytU3Mmc53BvO3SLAIn7Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 987451d83f1c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/css/style.css?update=0927","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"GET /css/style.css?update=0927 HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fd2ppv.cc/articles/2985676\r\nCookie: lang=ja\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 842\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nstrict-transport-security: max-age=3153600;includeSubdomains; preload\r\nlast-modified: Tue, 30 Sep 2025 03:59:46 GMT\r\netag: \"b88-63ffcc85b5080-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 14:13:13 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umZ%2BhxxJa15DkzJhU3PA5zj1jSbZ0ry7%2BtVe35d0BTYQltRd66Sg9p6IwIcEg%2BG%2FeHzVvhtElXkGcmcS33w5s5mdNv0F8CE%3D\"}]}\r\ncf-cache-status: MISS\r\ncf-ray: 987451d69f6db517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2952,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6ca58fa8af9ac14c2a8c1e391f05833b","sha1":"1e5a6c5400249a0a6e1289744d3bc29c7d6e6ebb","sha256":"40df6072df9bcc6d80f3769dce5c4a3d80c502e8785684198c7306debd2ae3d1","sha512":"c07b5a9ff2358053cae2e0b2125325590be359569cbfb7ee145e6e5597faf0ac831837f7c0fa95aeab6844f51cc9313d8d0ac13908ece541ab64585f5e355392","ssdeep":"","tlshash":"20515ae498bd18804311e8d127522660ff1ca3299d9f2c5af6a7788cbbf2605d1d63fc","first_seen":"2025-09-30T14:13:36.690233Z","last_seen":"2025-09-30T14:13:36.690233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/css/articles.css?ud=0927","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"GET /css/articles.css?ud=0927 HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fd2ppv.cc/articles/2985676\r\nCookie: lang=ja\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 674\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nstrict-transport-security: max-age=3153600;includeSubdomains; preload\r\nlast-modified: Sat, 27 Sep 2025 09:49:03 GMT\r\netag: \"7dc-63fc54ff7a1c0-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 14:13:13 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5airBKfrAoTAkx7U9tn%2BhZCalWYZPx%2BiLKb46aqNWTTEufxSLyM7jMRdPaCHT6NYGKPiptHjgS8dG8vXIUfq03Pk4Cx2Wk%3D\"}]}\r\ncf-cache-status: MISS\r\ncf-ray: 987451d69f73b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2012,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"aa69bef191c329fb3e0816ff7d78f00b","sha1":"ecccf52c019c984b04fea56610bae573b51d73b5","sha256":"007d13b752ace2f834cbec09c91ccb7d37cd43fdb5bcf58e3454c7060569df00","sha512":"529064c2dacba82bea12b9872aed188c9776cbe9fd6c14ecd05cbf6fe7b5e5a2146ad58259c36a0e34cc8af568f939231116d58ef0eedb94ec3d224fe442e837","ssdeep":"","tlshash":"3341ae3a5e02510aa876b7909ff78644f7c21573c20982b67eedb2808fbd5a59435f8c","first_seen":"2025-09-30T14:13:36.692761Z","last_seen":"2025-09-30T14:13:36.692761Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/image/logo.png","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"GET /image/logo.png HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fd2ppv.cc/articles/2985676\r\nCookie: lang=ja\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 3040\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nstrict-transport-security: max-age=3153600;includeSubdomains; preload\r\nlast-modified: Wed, 10 Sep 2025 16:53:12 GMT\r\netag: \"be0-63e75418b2e00\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 14:13:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32tWqcyqRT%2FELaIgvKIKhF%2Bq3YnTpsjVTO7roKCLu0ctnCVi9LK6ONTs6twWqKqp6nR6aWdnlxVbsy84XhpRSE%2FipWivA5w%3D\"}]}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 987451d69f71b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 90, 8-bit colormap, non-interlaced","md5":"f39d1c4530b57156135301cd12a5f647","sha1":"3082727ea0ccf8aafd6f06f3a16f6d9865b94872","sha256":"4dceccef38c0d6aa0b60bb7324e982a9509d8d19b86679da833460a36d301cb3","sha512":"07d2eaca491a8fcf4d78e5089ff62f2c5c60f7042352945605b012366dd97ce17509cd7748e72e76212fb60adbe1f6810e286411e9f7297cd422ebfc3ab94f01","ssdeep":"","tlshash":"5a516e600006d560233e99a025d49773e8888cff421b5707b66290fe4f97bc6afe8fd8","first_seen":"2025-09-23T13:31:10.119709Z","last_seen":"2025-11-26T10:07:08.743486Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/fetch/views-add.php","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"POST /fetch/views-add.php HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fd2ppv.cc/articles/2985676\r\nContent-Type: application/json\r\nContent-Length: 39\r\nOrigin: https://fd2ppv.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: lang=ja; articles=OUJvMjhGNzRZ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nstrict-transport-security: max-age=3153600;includeSubdomains; preload\r\ncache-control: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 14:13:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yj%2Fwuu42vJKB8bOGFkBQFIcsqUk1Hj5HM6qsIudYOjnY63utZUJfDAwtQJMRV8DMxsMCS6d6MPx2yMpyXtX%2BTw%2B9tr%2B%2FG2UIxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 987451d74eb45ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"575bb268e30faede6fb0acb5e390cd4d","sha1":"de10af5b40cdd0e2aa4651b2dfeb639cb9e58896","sha256":"7e58d2487a2aaa36b6c1f57dbe1b513f1637fce9b58bb771797daa980dcdb3eb","sha512":"abc918645603f68f56a291e43d5b28155c4c881d3363b3cd98ebf99f599848bb5d5ecfe2bfa28bb27297540a3401506ad6993f6354862b58b61891672d7351ff","ssdeep":"","tlshash":"b4300000000000000c0000000000000000000000000000300c00000000000000000000","first_seen":"2025-09-30T14:13:36.697665Z","last_seen":"2025-11-26T10:07:08.735548Z","times_seen":4,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/cdn-cgi/challenge-platform/h/b/scripts/jsd/5783333ceb22/main.js?","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/5783333ceb22/main.js? HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: lang=ja; articles=OUJvMjhGNzRZ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\nserver: cloudflare\r\ncf-ray: 987451d79ec65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10046,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10046), with no line terminators","md5":"c639c8d6e2f0ab06f3cac36e87ce4e18","sha1":"832cc31edeb59ffefc15ed2bbdbfcc0e9ae8075e","sha256":"8e62286216dbb2265df0bf825de6612072066c52ef243d0c5d4e8b0dff6899df","sha512":"bced6678af3977f7fd27afe103a34aae8a3387a89c97d211b97e22091bab9278b13d4eba08f069b3f03535fad9b781d1b1aa002bf17f49d8e5aed9c49f526a02","ssdeep":"192:qK8bKNgxO3Dnvhz2RJ2fxVfaArOmW1T+hqBtn1muIgTbnZjF:gbagxcnvZ2ReI4qB1QuI4ZR","tlshash":"5f22e8cefe986a02c133206188073dc725a9f90590ad5952ef50d9e8bb7d788779ff48","first_seen":"2025-09-30T13:42:44.175696Z","last_seen":"2025-09-30T14:42:37.142708Z","times_seen":8,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/image/favicons/favicon-16x16.png","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"GET /image/favicons/favicon-16x16.png HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fd2ppv.cc/articles/2985676\r\nCookie: lang=ja; articles=OUJvMjhGNzRZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nstrict-transport-security: max-age=3153600;includeSubdomains; preload\r\nlast-modified: Fri, 26 Sep 2025 15:50:44 GMT\r\netag: \"178-63fb63f9b3d00\"\r\naccept-ranges: bytes\r\ncontent-length: 376\r\ncache-control: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 14:13:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XREFgiQOeg17bjqsxgLzffUk7d1wcg%2BnEUMQyxxNPnfElhCFpX62dzBmm%2FREDS3qgMpiP3n5MpKLoR4U16O0XYSi5MmrAbEFag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 987451d7fee85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"23efda8ed6b45b549fcf933cbdd84f93","sha1":"06161f9a9feb542499549bbdbbadbc024dde1390","sha256":"99ab1461733256b530fd7f3031920a3b5e5c90a33673e093a893c95ef46c2f5f","sha512":"a6dfdf796bdd1983eed83e6c586b8437648af3a3e38a86425b2e9842ce696e470abface106a8d2340051e70604ec21acfd610db95b7e21346459420f66505701","ssdeep":"","tlshash":"fbe06003b37c6f3cc34f003b80e261b0a00e03aea12a301b8780083d2499fb6b038ec9","first_seen":"2025-09-30T14:13:36.701798Z","last_seen":"2025-11-26T10:07:08.741504Z","times_seen":4,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/articles/2985676","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-30T14:13:12.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"GET /articles/2985676 HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nstrict-transport-security: max-age=3153600;includeSubdomains; preload\r\nx-mod-pagespeed: 1.13.35.2-0\r\nvary: Accept-Encoding\r\ncache-control: max-age=0, no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=feJuspGvrIuQPprudMf5reoJO1L7RjYvn8NtWMDxOxPskR%2F30gSVOJT8HCiZikXe5rktcfo2baxjCV3iy5v5c4pbyYn2qiM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: lang=ja; Path=/; Max-Age=2592000; Expires=Thu, 30 Oct 2025 14:13:13 GMT\r\ncf-ray: 987451d59e9eb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google PageSpeed:1.13.35.2","description":"Google PageSpeed is a family of tools designed to help websites performance optimisations.","website":"https://developers.google.com/speed/pagespeed/mod","common_platform_enumeration":"","icon":"Google PageSpeed.svg","categories":["Caching","Web server extensions","Performance"]}],"data":{"size":22607,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3945), with CRLF, LF line terminators","md5":"6119b4d61142ed9b8b0a28271dcf26ad","sha1":"a638524e717e347410049a9fa773112f63822a01","sha256":"04b3e957bd243f12770426b5732f67e9d7e01ae92760e8a66d24c83aed0d74d2","sha512":"1c9f15421eb28ece262d2905516f94c88e737b8a434ec49a6d31bc1aa1a576cf2af44ff1dd10502bd4146619779348d10271aa0564922fa9a638fb5f2624c1dd","ssdeep":"192:Sy7Vjg0jLABQx2H3Y4roEJ8dZ0418dt6VykuHzxbb1vtbiNZN2pyjtyLLrkV438q:b0e0H3nSZnIt6VkPgQyJYTnx//","tlshash":"eda2832820c2283346f380f25a5a9787f952d907cb46694432fc93e76ff2e46dc97979","first_seen":"2025-09-30T14:13:36.703798Z","last_seen":"2025-09-30T14:13:36.703798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":231,"dns":0,"connect":2,"send":0,"wait":106,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/js/common.js?update=0928","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"GET /js/common.js?update=0928 HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fd2ppv.cc/articles/2985676\r\nCookie: lang=ja\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nstrict-transport-security: max-age=3153600;includeSubdomains; preload\r\nlast-modified: Sun, 28 Sep 2025 08:45:11 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2BcCdTcPfSF2VBNBN9GfDK8%2FpSS%2FnkPgTxGF6YGIue2WaIhXMPmRvchjZNI%2FTNRBdsjRNmgdFu4klywZBA6HJYHAXJoHGbA%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"26c7-63fd8896753c0\"\r\ncontent-encoding: br\r\ncf-ray: 987451d69f6eb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9927,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"5e0f5c38c2951fd22e85f3c3f88725b8","sha1":"e6eac3059a6dfd6de681729e50567497c7ce5f64","sha256":"bd62b4af7e78ca3f650f187cbc17cc701cea348e28f62bd968390809eca9cf1b","sha512":"61403790b9ab8cf976576347e8a603c7a6ada156bd8a90a6df87f677a2dc6b51c1bb4c7a89504fefd739001502a291fc8aaa7768a1566c71cfe0770b584cfd21","ssdeep":"192:2miyiFiiyU3RRrvVk8imnbSC77kAmU3aWrv4X8iTtLiivqR7ijsPTMRtCCF6c6Qa:VmRtvVL3wma2v4xS1j5GhCVF","tlshash":"1722414e31f318310eb3357b0b9fc2997932440b6448de497e9c86506f85b24aaf3be5","first_seen":"2025-09-30T14:13:36.705839Z","last_seen":"2025-09-30T14:13:36.705839Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: lang=ja; articles=OUJvMjhGNzRZ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/5783333ceb22/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\nserver: cloudflare\r\ncf-ray: 987451d78ebd5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10046,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/css/common.css?update=09281","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"GET /css/common.css?update=09281 HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fd2ppv.cc/articles/2985676\r\nCookie: lang=ja\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 5269\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nstrict-transport-security: max-age=3153600;includeSubdomains; preload\r\nlast-modified: Mon, 29 Sep 2025 08:09:26 GMT\r\netag: \"5965-63fec27649980-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 14:13:13 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWgnBOhm76um2QzGMQ5Vz30UQwUxQMfhIzC31Gy0rlOO9u1rq%2Fx1sORRmfPYovvBn%2F0hgShd6SZmVkYgFIWhIoZLLA0%2BjPo%3D\"}]}\r\ncf-cache-status: MISS\r\ncf-ray: 987451d68f6ab517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22885,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0eae49daf6f55d92590bb7d951f2ce06","sha1":"0557b7fb519e830c71c4571ff09937c9fd5572ba","sha256":"5d927c05a05f2f3ced4378c38e8a84de9af3bdb4b54b349fef229ebe4640fe39","sha512":"d61599cff01e923c34fa2654fd2195fc7b4c0c266ae1c8439e5d96ff10c72dab72b8bedab197fe11632d88ba2479e34aabade3fcc23ba365d8039fa9b7b60911","ssdeep":"384:vZclF+qFwloWd7E92EGH38yAVI3ohXd5T1OWId637KEF28N7JFz:vOFrFq7E92EGH3dAOEjAWUcvFrN7JFz","tlshash":"2aa273da6ba61004b527d1682ed29b4163a98083d00fce7d7ffd105cdfcd2e859a6b5c","first_seen":"2025-09-30T14:13:36.70786Z","last_seen":"2025-09-30T14:13:36.70786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YGF3M7RSZR","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-YGF3M7RSZR HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fd2ppv.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\nexpires: Tue, 30 Sep 2025 14:13:13 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140547\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":421865,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"c850bb335dfffd26679cb8ec5e8055ec","sha1":"1612104aa304e35db7dd68814615545d244ed5fe","sha256":"acd8df35ea843bb208f3cd9445a8e3d20c0a88f7b4339a3ddfcb21769963409b","sha512":"ea8ce76eb674db2560b34e0547da1c28000b26215585600fd3fcdca1bf005e95510f7ad21e6d26a4a48906fa81680a77ca9bed51b35c557c75d34c0e15080899","ssdeep":"6144:vB5SmbjQOBQy5Coq2BvK7Dpr5Ssu1eJ+kM:ZYcVeyPq2gO","tlshash":"c2940ace73d674665396e478903f018ba5bb28a2f44cc899f189cce42d74a9a4137f7c","first_seen":"2025-09-30T14:13:36.709602Z","last_seen":"2025-09-30T14:13:36.709602Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":78,"dns":0,"connect":16,"send":0,"wait":49,"receive":43,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/image/favicons/android-chrome-192x192.png","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"GET /image/favicons/android-chrome-192x192.png HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fd2ppv.cc/articles/2985676\r\nCookie: lang=ja; articles=OUJvMjhGNzRZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nstrict-transport-security: max-age=3153600;includeSubdomains; preload\r\nlast-modified: Fri, 26 Sep 2025 15:50:44 GMT\r\netag: \"1fb1-63fb63f9b3d00\"\r\naccept-ranges: bytes\r\ncontent-length: 8113\r\ncache-control: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 14:13:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rGIOU7LBWFbY61P6TWeZbDMHPXLI0eSwsEbU8EKpTdc7ShlMegSkJR%2BdMSO6UJQAF68PsIA3JP2sZFYYU6TXla2e3N8sOpwOfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 987451d7eee75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"488ee02fc6d0a74c87e06ec06cb93f32","sha1":"ef28793b07d890cfc143031aa978af11dd7877cb","sha256":"ef7042743d8abf057ec29f669d310f856736bfa48ec81cf845e27b7ae440fe5d","sha512":"aec5ec204f69c8d4b92c3b2f3f90e7d023328acb60722f41085f13556c7af668bdca6af851b42891c3f0129d8d6616e39465703280f2716ea8da46b5a549ea5d","ssdeep":"192:hRMHLGk+UoGEcR1XgEJEFgeuL79RDDL40o5PhrQtv:hRdjUoiXvMoLZRfcaR","tlshash":"62f19eb1ad92c8ad1a8e0be4ba777184a9677116fa2723141822525d8f0e0f4233c8f9","first_seen":"2025-09-30T14:13:36.711627Z","last_seen":"2025-11-26T10:07:08.744657Z","times_seen":4,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fd2ppv.cc/cdn-cgi/challenge-platform/h/b/jsd/r/0.4802322914723804:1759239075:Fn2eAVrG8GwNWlw2YbWDx_QSvNeF4lvOqPoW6-LnFsk/987451d59e9eb517","fqdn":"fd2ppv.cc","domain":"fd2ppv.cc","tld":"cc"},"ip":{"addr":"104.21.89.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fd2ppv.cc/articles/2985676","date":"2025-09-30T14:13:13.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fd2ppv.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 14:18:07 GMT","end":"Sat, 06 Dec 2025 15:14:55 GMT"},"fingerprint":{"sha1":"00:3E:6D:62:84:69:EC:AF:EE:DD:42:77:37:22:21:C1:DD:29:1D:66","sha256":"74:AB:60:AF:F5:CA:1F:6A:92:FF:E6:49:36:AE:95:2B:81:AE:5A:03:04:06:2C:91:00:32:BF:77:53:0E:32:FC"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.4802322914723804:1759239075:Fn2eAVrG8GwNWlw2YbWDx_QSvNeF4lvOqPoW6-LnFsk/987451d59e9eb517 HTTP/1.1\r\nHost: fd2ppv.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12092\r\nOrigin: https://fd2ppv.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fd2ppv.cc/articles/2985676\r\nCookie: lang=ja; articles=OUJvMjhGNzRZ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Tue, 30 Sep 2025 14:13:13 GMT\r\ncontent-length: 0\r\nset-cookie: cf_clearance=yqkVqHic7GhlsHowO6RA0r9YW.CuprMAsmceymZQd5c-1759241593-1.2.1.1-AdzEo.pk2tMRAOFn8fYZ_77nBI.hFwkHcAswm_04cv8KV7xIIY8XnX7z28_HM.qAn6SfEHQH5t9dzi2g85R3GnMPg5bLULVN.x5lHfZULXPwlw.b5VhY42EUtW.LurEe9o7TWvNLLgCrNh4h7MQJNLMNq0OurWgdRFebBLguO7BSDqU3rmaCKMLvikL6VMH0eaZffpS67h4MF0k_iEMVWMG9.gnDF3yjeqgQ8EWMhHE; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=fd2ppv.cc; Expires=Wed, 30 Sep 2026 14:13:13 GMT\r\nserver: cloudflare\r\ncf-ray: 987451d7fef15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"fd2ppv.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
