{"report_id":"7f877fc0-c4f3-4c01-8144-7e34ecfab7d3","version":6,"status":"done","tags":[],"date":"2026-03-10T20:20:38Z","url":{"schema":"http","addr":"m.cflgroupltd.cc","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/#/","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"title":"CFL Group","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.cflgroupltd.cc","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-14T20:20:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"m.cflgroupltd.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.cflgroupltd.cc","ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":15,"received_data":153374,"sent_data":8436,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pc.cflgroupltd.cc","ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":42,"request_count":21,"received_data":3021899,"sent_data":9527,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"m.cflgroupltd.cc","ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":27,"request_count":9,"received_data":360711,"sent_data":4112,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/chunk/views9bd65ac8.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"c71247bbb9aac4a368ef79b0d6aef7d0","sha1":"930fd4e1e28e3cc913502b90e93d72b981bb55d3","sha256":"6f6a55b0b3c33deed4785bff8ca78a1a306c852637b339eac110b95d92d00c4a","sha512":"eb64ad99978d3a1f0fd46336f35d6351241f59c722a89c8f648cca16b06cab3f46bcd46666a37258a6a0774903873bb18fe817a91b178fd68456a1b35fa3ebf0","ssdeep":"3072:ouhWSn3ztqpJhFGGlUkE/ChHClXXjLOm5OSi5F87tbV97ukjZ5izDNs:vnSJhFGGlUkE/ChEzOfkx7ussze","tlshash":"64346c55b4a69dad8a739658f44e3450b0482fefc246d8f221fc8e2123f3d256699f3c","size":245577,"data":"","first_seen":"2026-03-10T20:20:46.428448Z","last_seen":"2026-04-21T09:31:00.593271Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/entry/index693d18c1.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb7aa657e2faa7053d227e454578791d","sha1":"033bcbd2fe00f726bd1569d9861420040f335c7c","sha256":"f3babcf162fe5a810fb34250913651551f3290496d06d0a8755913f8d118c815","sha512":"b1925b7d129399dd722a8d86c4c67857837a2de7dec05f0c63159ea335724e633cfc93625140b3b83250923478724ccbc8776a7444dba0154ff1ac727eed16fa","ssdeep":"384:hUNHKgnCIOKWbTr9AtTtGgkAzfGqrWhRCMw:hsHKgnCX1XgZ9vzuqy7pw","tlshash":"5992d8f91b3c91fc55c70abebf2541d4370e64bb76b285d462ae9e385583c48e20be40","size":20279,"data":"","first_seen":"2026-03-10T20:20:46.414058Z","last_seen":"2026-04-21T09:31:00.571786Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/chunk/vendoreb8d9334.js","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fcb34c6a1faddd4489916f89b9ef72f3","sha1":"f13da779d0b30c9402d624da5845b92eb4aa09e6","sha256":"151ea7ca6d2293860567908108cb0b30b7624ef7c233526f7015c04a05ba14af","sha512":"ddfeaa54f25b99d51991b23a1d5dfa194e3b18873bf62eebe8456f6a2bb6073d4371f7c0d1f1e78e1464abc0f32bba8d2221cf1c9cb217c8e43fb3da021e13eb","ssdeep":"24576:VF2jLGtu9tlKIPl7Q5UYRQ5Am3Y265teDdWs:VF2jLGt8tlKIPl7Q5UYRQ5Am3Y265teP","tlshash":"18255dd4ba55b46c43b781e9107f1002b33e3a9d740e8864b1bdc9e9296bc49d2a7f7c","size":1001737,"data":"","first_seen":"2026-03-10T20:20:46.36878Z","last_seen":"2026-04-21T09:31:00.577948Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-12T17:54:25.08224Z","times_seen":41388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/chunk/vendor3c382679.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"0bb0ac607f715e43f5a9058b98325f58","sha1":"6198b8dbe10e70423a63cd9e8d85f2f384fcbe34","sha256":"c5ec4b87fadf7e12e178aa5a1ebc259c45d3120bede55b34373e0e16ed864457","sha512":"730118f4f57a0a92615be599093b6ed4d54485aa4da88f268bea2c2866b738d48be1b4bd56fe72f3d6bfd55d139fc901959ea17a6d71cbaab80cc9775ad5f1b9","ssdeep":"3072:bUzqNCBOqub3kGCC6pmLv1nym3oVToxiizD+AuI1XmYJF:bDOOqubUPkL9nVmT9izDX","tlshash":"70141ae93182b46253ba19e640771006f33a1919380dc8d4f2adeddb3d7b84a91b7f6d","size":191128,"data":"","first_seen":"2026-03-10T20:20:46.431727Z","last_seen":"2026-04-21T09:31:00.59129Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-12T17:54:25.082902Z","times_seen":42853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/chunk/uib03e1cbd.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"119fba85566de26a861ba0a7f08c6572","sha1":"012097ad2dce27e5f3cff09e0fb77688d22c6e0a","sha256":"2e9f0a5600c64aa3c27c4f8753cf113a48b4638e53e1c1073f978c0428c1a657","sha512":"79d05cc5c428d2f45d9d21bd507f665db2a66a0c011dc4bee1ddf2c6c600abfbcbe23f529121eca6914e5c8a27df4269ed7c63a56cbad5d6194268e2e981ba38","ssdeep":"3072:bMeK4FrjJDnaOGhRV0mh0OzJRfA5d2J2bT0ly4QEiQEBH+ZzY1AXHYCX2i1zNIp:bMeK4F4OGhRV0sfA5fFAXEBH+Zzg+YC0","tlshash":"5ca34ca1b586b43c477b94c550aa1600b62c0f89f409c8e0f0be9d4627eedd8b1b7f39","size":104479,"data":"","first_seen":"2026-03-10T20:20:46.434594Z","last_seen":"2026-04-21T09:31:00.573718Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/chunk/chart7ae778c8.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"56b65a09fa37902eb33645fff24cd6ef","sha1":"5f1f32a870fa7999d0335715b714650cf6ba604e","sha256":"8ff46c196428b15085edf4b3f691e5c1f6afb778b4d04256246c65432d95a8c3","sha512":"f65ea983fed324b906a3f1844fc2a0754ce919f016f4e52f7d4c9e94f88ef6483fd48761e1c23ef3a2d9ede62e237c9faec5fa65d5e6629b2be6995b858a7550","ssdeep":"3072:qRAfIwOQrBJgkQKXCMWeLPFNeCcQN2Z+yyfBGZLHgG4:9fpgkQKXCMWezFNeCcQNG+yyfBGZLHgZ","tlshash":"ef04d884fb6570155263a1b9423f1907b336369e940b86acb56fc9da2c6c0ca3277f7c","size":190221,"data":"","first_seen":"2025-03-07T20:39:04.974003Z","last_seen":"2026-07-23T14:25:29.941152Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/chunk/request6af0a6fc.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2151564a6d907e0b7ff4020e44b27332","sha1":"f31ccbdff54a19795230bb4683bba6a64ec92ecb","sha256":"b22f3f62e348b7716fe8934f7748139cac911884ab590a966146b36b3c1d4491","sha512":"bde37941dd29147256b0fc15cacd7897787ddd1eec5239b7df21eeedf8d0c46e630f0e1e4cb03deb6be40f4ef0b22c1306af5eeb34e90f0342b28b47953e69e2","ssdeep":"768:syAHbqmO9MJMGRAmvPCnA2998K9xLkj9JmzPawuAEndiF85FvG7BMB08Sd6H3EH4:oIybPEESQv60nTVBN5ao","tlshash":"9ef219d576d2b06153aa20f140af0906f3399629744d84b4f168aceb2cb610e97b7fbd","size":34825,"data":"","first_seen":"2026-03-10T20:20:46.372677Z","last_seen":"2026-04-21T09:31:00.557374Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/chunk/routere929fe69.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"852ffdeb9d7f24512af76413382e1d14","sha1":"8db0a785fe9e0288f1ca727d1a056e8b83b255cd","sha256":"c91cb7663ded5d99d4081310294a8deb3018de8af2d3a15aa7526674a9e19bcd","sha512":"11b03b72a9440a9ad724dabe5e5cc4b17b338da84f36956984e7ff660d035e5e1e0db7005eb63bc7a31562aa2e3aa09f3d23dcc69b29cc92c6ecd0abe8f9d4f2","ssdeep":"384:wsVP7Z3ulkPXheuChsL0M/kIX5HJXenNFViuk7KPjsUxfOB2ziuM5JUION3bQg/m:7Pwl2XLChsL3/BX5HJONFVm7KLsUxfOP","tlshash":"82a2e8e532c2b025a7fa19e6507e2115f23649c6384e84d1f21c6cd33c37d99d2bbe69","size":23190,"data":"","first_seen":"2026-03-10T20:20:46.401163Z","last_seen":"2026-04-21T09:31:00.581104Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/entry/index9c959216.js","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aff8ac27c14a246fa706ec83729d75e9","sha1":"ec2faa8f63efc10f57644f1dd573e5916b06eb07","sha256":"bdb288a4ffa7c6cd2f6726e4f317994cf8a24dd620994618739969303eed40c1","sha512":"4c6f9019c88ff4034eabd22b10c153af91587d3d65cb4b2f26494e941fb3f40e43f22b16eed6e05080c8872a6ebbadeccb0eb39231097a0fbf17d054dc31efb7","ssdeep":"3072:+KgaGf3XnALfB7pgnSQ+YfLzO34XR03LyQGkJ6ZO6e+gTPp:+Kg9n89gS6TzO3RHYjmp","tlshash":"08e36e7a5185288d0c72d709f48f3b5858d82cebfb86d8d509fc8a6823f2d199197e3d","size":145755,"data":"","first_seen":"2026-03-10T20:20:46.38213Z","last_seen":"2026-04-21T09:31:00.577066Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/chunk/i18n30c5fd81.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7f050c3c726b49323c5036a3e86b2040","sha1":"17526f7333b629c426786d8da813e1ebf568e84a","sha256":"27d74ecb2070e3ac21960e031abaec8fb84b3d9b4a7f2f9552e2751c5f7844d9","sha512":"4fbb6a2c65dce9cddbf0328a5ab58f7008e47aeec39f46272a84e93bb72a4bf62ff1cb0d7eef9c724faea1313e441e144b8eb79d85400df7a03089b8f4089cd2","ssdeep":"768:JPatiWKGyfxs/jZIaGhqGkIAyVhRWIohYpz7hjOGdDGAlEmCmBCb+4JqiB/2YVZV:AE3sFIHhIIRlj4Rv","tlshash":"65e2c7c671e6b0020b3582d671b311139f2d075d385ee9c8f8a9e7873a27c4e43a6f69","size":31691,"data":"","first_seen":"2026-03-10T20:20:46.419681Z","last_seen":"2026-04-21T09:31:00.564163Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.cflgroupltd.cc/v1/api/forex/trade_list?t=1773174020600","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:20.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"OPTIONS /v1/api/forex/trade_list?t=1773174020600 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.cflgroupltd.cc/\r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:20 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gck427DEE%2Bl8X4JRgtTgVVbDoy4ulx0Z4cYQ6aOdgJKioran6XFEG5Hv%2By1%2F9Ci%2Bu3BP5NMfo4Q8Sy%2Fp9GseULwcbML9Q01%2FYDEeYpngcs13YA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da504fcdd9e9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/id4917741a.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/id4917741a.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-105e\"\r\nexpires: Sun, 05 Apr 2026 17:42:20 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 355081\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1G%2BRG2%2BPeFjZmwBADPP3rTcQo8zsGmYi6ZdutfhqFu6fZ5aKVfVK7YJPOOG%2FzQZgfunHxD7gXY6aGlPnYc86y2%2BFuPorPEObLvt3RT0fYcTd\"}]}\r\ncf-ray: 9da50502ae469e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 665, 8-bit/color RGBA, non-interlaced","md5":"71499ce07038e88f422fedfff05b0840","sha1":"30b4191941bec4643183153f1f3812d66697daca","sha256":"4917741acdecf2a08521949978ec90266afd014fbfac790751e2406bab84b40c","sha512":"6733e1b6a5b02bd141dd9546770bb51532d20a2b3d6b80694cdf8a2f2a52f1c9424f466589a42635c7690f64f9414719d637ffcf61c0cb9480cb99821c2e6ee3","ssdeep":"48:L8v3333333333333333333333333333333333333333Xd3333333333333333334:ic","tlshash":"4a81224af30468dad1dc5b6a98231d7bbeb4410687b38d0d4403a29bc84ce653d97d89","first_seen":"2024-11-21T01:45:06.776093Z","last_seen":"2026-08-01T23:22:20.437306Z","times_seen":84,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/file/ui138b8a52.css","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.cflgroupltd.cc/","date":"2026-03-10T20:20:16.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/ui138b8a52.css HTTP/1.1\r\nHost: m.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.cflgroupltd.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-1b314\"\r\nexpires: Wed, 11 Mar 2026 08:20:17 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zi2V7f1jXcbiYnCsBL0%2BLtqLjWrSkl88H0mTkGMgNuAMcb6LNA7HT9GltV6Of2aMMnCNyAZQxh50gNsaoxF1McEJziJn3v6HmPzZOYrcVJc%3D\"}]}\r\ncf-ray: 9da504e60ae79e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111380,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"9569a86f7e756b72d65e96d6970be3a2","sha1":"f7128fc8b90e55730756ebe61ff842a917367808","sha256":"138b8a529d281b66f4b087aec295987c8e31e54c7e0dff015f4178d5e412a688","sha512":"a197ce47b2f56a24bf73d005ec9be55c011d08a3812015a909e7318d661cb89a55222c549b8cbb06fbdcbd3d504827c7e2a48751c3c924003fc4f17f3526b214","ssdeep":"1536:aWIyNBi3MFYaQj7FCwsBlDOFIxuVoxeXoUe:a6NIClDsIxuVSeBe","tlshash":"a0b3d6a5eac091fc7f16f265ab8766d8f13cb970cd40caa5f105515d0ecbbf50223a2a","first_seen":"2025-06-01T05:36:04.776565Z","last_seen":"2026-04-21T09:31:00.56264Z","times_seen":11,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":361,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"m.cflgroupltd.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/v1/api/forex/trade_list?t=1773174020600","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /v1/api/forex/trade_list?t=1773174020600 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nm%2F9%2FpWdrxmewvYnLFNW2hAEpvQvS6P7m9pR1RDUbHxR4dPO0bJbllcNipbF5o1VXniFOD%2BJr9ktnpU6JvMcOAy8OkQ0Ra1gyvb%2BG3oMVrsffQ%3D%3D\"}]}\r\ncf-ray: 9da504ff4df29e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60837,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"92e5bf56676393691a4d271a33e0a416","sha1":"f4d6250d843f6805b6619f13a422bd29942ef9dc","sha256":"b1cd4904e07d9a3b4996e83d6b097d2d52f9ad2c437c756a2ca2ca916092d110","sha512":"6ec72b3115afb1ab2b7b374ccc41fb7b31ab0be720e34f5f82ddac1cfa5c27a2201d0152673b84b197a54fbda581e0114703e8cf6c8524e48316d3de8b45af2b","ssdeep":"384:Av3ZmX3EqI8N3TWWRp1PfuRPveT9HwxKd9bz2XGX/x:rX3bz3TWWRp1P/T9A2J","tlshash":"7b53682799fdd1f4e59127ea6b733f94b849f0ad05c60bd8bf8dc24854800b5248afa7","first_seen":"2026-03-10T20:20:46.365664Z","last_seen":"2026-03-10T20:20:46.365664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/api/default/setting?key=is_show_mobile\u0026t=1773174021982","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:22.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"OPTIONS /api/default/setting?key=is_show_mobile\u0026t=1773174021982 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.cflgroupltd.cc/\r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BUSseFx8Bl0oafpi4S3D3TLYYC6HxddhZaQmfvcXwu5fikqAiySY0YKNXNkWReTTidUiymbn89bRYhYDYgoGbJ8MDTj%2FLocKEbZj8%2FfddiC7Lw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Tue, 10 Mar 2026 20:20:22 GMT\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da505077ef79e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/v1/api/forex/kline?forex_id=6\u0026period=1min\u0026from=1773144000000\u0026to=1773174000000\u0026t=1773174021983","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:22.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"OPTIONS /v1/api/forex/kline?forex_id=6\u0026period=1min\u0026from=1773144000000\u0026to=1773174000000\u0026t=1773174021983 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.cflgroupltd.cc/\r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:22 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgxCGnYdPwvF%2BDXtSPwG2qew%2BKJuM7opvr2CB2Eysk8L%2FZfkMxs0nbRFRJHNosuhAzuETTwjxKdl92nuGUZkdXgBAjBqC2n3JUwpb3SJiV0dyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da505077ef89e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/chunk/vendoreb8d9334.js","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:20.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/chunk/vendoreb8d9334.js HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pc.cflgroupltd.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-f4909\"\r\nexpires: Wed, 11 Mar 2026 08:20:19 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tx5s9QUOp6UJznn7qIAyiP%2B6LPuP4FmatKL1FFh4QzZmtZaV0hG53wk8Z%2BSfZ320FYxGAwB7eIWTUZJsGy%2FNCVG7c%2B1uLbUSSva9FwtrJLkx\"}]}\r\ncf-ray: 9da504fc8d8c9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1001737,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32148)","md5":"fcb34c6a1faddd4489916f89b9ef72f3","sha1":"f13da779d0b30c9402d624da5845b92eb4aa09e6","sha256":"151ea7ca6d2293860567908108cb0b30b7624ef7c233526f7015c04a05ba14af","sha512":"ddfeaa54f25b99d51991b23a1d5dfa194e3b18873bf62eebe8456f6a2bb6073d4371f7c0d1f1e78e1464abc0f32bba8d2221cf1c9cb217c8e43fb3da021e13eb","ssdeep":"24576:VF2jLGtu9tlKIPl7Q5UYRQ5Am3Y265teDdWs:VF2jLGt8tlKIPl7Q5UYRQ5Am3Y265teP","tlshash":"18255dd4ba55b46c43b781e9107f1002b33e3a9d740e8864b1bdc9e9296bc49d2a7f7c","first_seen":"2026-03-10T20:20:46.36878Z","last_seen":"2026-04-21T09:31:00.577948Z","times_seen":4,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/pt2d69992c.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/pt2d69992c.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-212c\"\r\nexpires: Sun, 05 Apr 2026 17:42:19 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 355081\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHK3tYFkG92fR16yLoSX1gPOb8QXoltF5DVyzYXZYgtrIpcr7h920wrWoaWi%2BrLaxNVWVhE9aIfX20bqwCxGLAMMnJR5MCLDtTEXLLhNgi0d\"}]}\r\ncf-ray: 9da505029e409e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8492,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x332, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87f1fc44bf8f73da7835c810e4877d75","sha1":"eae24266f4a23df02e9e568ddb2012420abbfc14","sha256":"2d69992c9039b18813d29f5ba4625c197cb22c932c082d974c3eaa7282fc5fff","sha512":"0496cb107f73b3c80ac1ea70d6186cb97612ed5df1ae71af3c05dc5917d44de94e3b6cb4365fcd0ba65e0d8fc28f4495ad617f36b0cf19123d0256ad99d02f00","ssdeep":"192:hTA2gbbSzN3ascve56Fk8JNi2sIkxY7u3OMDBdVqaGijzeZexBp:1W9/rOY7O1ZGiPeZePp","tlshash":"2402b0d20b4b8ab9ccd016feb5859da4b44fa7043f2853507a1c56f9dc51534e3ec9c9","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-08-01T23:22:20.414671Z","times_seen":241,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/chunk/request6af0a6fc.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.cflgroupltd.cc/","date":"2026-03-10T20:20:17.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/chunk/request6af0a6fc.js HTTP/1.1\r\nHost: m.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.cflgroupltd.cc/assets/entry/index693d18c1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-8809\"\r\nexpires: Wed, 11 Mar 2026 08:20:17 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MMQsvMcCM1hNsqH4Idmoki1HbsfW847eFYyV7A39N6lGvwEutpwxwYLpWxrOoXvdKOsYK1IeY9HVgXlxFCjLlClbb0%2FLdDTFylJ9PjZFPpI%3D\"}]}\r\ncf-ray: 9da504e8ab3b9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34825,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34824)","md5":"2151564a6d907e0b7ff4020e44b27332","sha1":"f31ccbdff54a19795230bb4683bba6a64ec92ecb","sha256":"b22f3f62e348b7716fe8934f7748139cac911884ab590a966146b36b3c1d4491","sha512":"bde37941dd29147256b0fc15cacd7897787ddd1eec5239b7df21eeedf8d0c46e630f0e1e4cb03deb6be40f4ef0b22c1306af5eeb34e90f0342b28b47953e69e2","ssdeep":"768:syAHbqmO9MJMGRAmvPCnA2998K9xLkj9JmzPawuAEndiF85FvG7BMB08Sd6H3EH4:oIybPEESQv60nTVBN5ao","tlshash":"9ef219d576d2b06153aa20f140af0906f3399629744d84b4f168aceb2cb610e97b7fbd","first_seen":"2026-03-10T20:20:46.372677Z","last_seen":"2026-04-21T09:31:00.557374Z","times_seen":3,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"m.cflgroupltd.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/api/company/getCompanyStatus?t=1773174020594","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:20.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /api/company/getCompanyStatus?t=1773174020594 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: no-cache, private\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\nset-cookie: cflgroup_session=eyJpdiI6IjBHQ1Z0NEVnWnJiZDZrblN2UkdCRXc9PSIsInZhbHVlIjoiWE85ZWUzeDN0Y3Rpd3N0WmVDRUxnSXJidzREUmxWXC83XC9IbENUc3F2K1VUMVR3MjhkN1Q5MnlsQnVNYzZ1Qmc2V1QyWW94Z3AzbTd0NmhqYlA4cGlFWmtjWUN2aW5sYW1McVdleGNyNXZYQ2x2NW5BT21HTVBzRkkxcVVsekY1cyIsIm1hYyI6ImYwODhkNDBmNTI2M2UyYzBlOGIyNDMwNDc1MWZiYWEwNTNlM2Y1MTFlNGI1MjllNWNhYmIzMTQ3NmE3MzUxOWUifQ%3D%3D; expires=Tue, 10-Mar-2026 22:20:21 GMT; Max-Age=7200; path=/; httponly\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tsKwGgLt5Uow0XLNCYawqj6QJcrhqfbVmNmSxPvJ0vlMe4TqLeXg2d9662raUX305J1Q5J47ZEW4xPRy7e86ZJHHNtZsXBSpc1U2CfXOVapysQ%3D%3D\"}]}\r\ncf-ray: 9da504fe7dde9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f0880d637b5cd6378f24013c8ccfa70a","sha1":"bc387e275e3ffbf0faff0c9956ff8e1439a47794","sha256":"7ac9b3cd9be1f05d7124910d870ce48b43f032bce9b1e9fd4598d5318dfaa16b","sha512":"8b2d855ca0b6fdacf78bebd0214ade44edbf68be3297c1b2b17930ed6043c1de7fce441d2823ed1c7a820c0a3974131708087a83553495fcc00c0a4cc2d1f708","ssdeep":"","tlshash":"69b092a0a469418768a662c94858217783b6b143c900ab84078daa7840dd0ea611a56b","first_seen":"2026-03-10T20:20:46.375315Z","last_seen":"2026-04-21T09:31:00.569232Z","times_seen":4,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/logo.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-4ab\"\r\nexpires: Sun, 05 Apr 2026 17:42:18 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 355082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMQkiee55t1y6Cs5MxY031d1Rx2rln8ifNacWHmEC%2BwJGhzzImVbU84ofTNFf3Jf8%2BuI2Ohyf5rsl7FFsYpL3D2p%2F60rIqIBK5mdW8T%2FR2%2Bk\"}]}\r\ncf-ray: 9da50501be1e9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1195,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ca2332137a39edd943c3894e32823c69","sha1":"079cb006bcbcb57e3090a4332eb7c015bc44b25a","sha256":"d98a6bdccd10457561fa5b3fea376530457ad07618bb5987e707b3e15b0b5bfe","sha512":"6f3cfa0fd504c264d33ebc5cf3179be8b7921cd4943d5b21b6a526a1588433d374c0f6c1b7765c404eb96d393a711527420d9198ff0b2f71c1eb0763626d1ca9","ssdeep":"","tlshash":"2521b7a7ef088975054e53b45385682283b2f1226a94c0ed34ba055ff6922f45e162da","first_seen":"2026-03-10T20:20:46.377891Z","last_seen":"2026-04-21T09:31:00.570405Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T20:20:18.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.cflgroupltd.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:18 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IPO2y%2FY0s24FDAW9zJfy7jDp0GD2e6WTGoY0TlEkkP%2FgWKNRaB1mK84BFysaxbRQl9atSG%2B%2F2fGcqUm7E6NfveAxOrhBbDCNc%2F3zQahv03mA\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9da504ee4bbd9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a0921a783cc19a1d743245a134adbf02","sha1":"ce6ae03666c52b96ae9ad31d30593f682746fcfd","sha256":"c9fc3566eea6df9e94b8a41373c9b08548c99464e2f86efe8465c64c8e70ea76","sha512":"66906395066a9e80f9677830d637505f54a34694dd08bea46cd1957cd64df8ebc5f3c3e480d539d32bffabf0abce58e871930c4b9c0d69b4c301a6604e6f303b","ssdeep":"","tlshash":"a251cb484793495491a3e1044f9e983563b3d02b924efc42bfdfa098cfe6b7da8d7680","first_seen":"2026-03-10T20:20:46.380113Z","last_seen":"2026-04-21T09:31:00.568386Z","times_seen":4,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/entry/index9c959216.js","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:18.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/entry/index9c959216.js HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-2395b\"\r\nexpires: Wed, 11 Mar 2026 08:20:18 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HYtoI%2BmOaclJPWjP5moqRhd8uTEF0TweT2ATW9xGefU4PovTltCR0R7GH6I71jOpUCQJTB9doZQ6QsON0D0l3J3JgqYjM7V%2BNLTuv9ORuIJD\"}]}\r\ncf-ray: 9da504efdbfb9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145755,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52561), with no line terminators","md5":"aff8ac27c14a246fa706ec83729d75e9","sha1":"ec2faa8f63efc10f57644f1dd573e5916b06eb07","sha256":"bdb288a4ffa7c6cd2f6726e4f317994cf8a24dd620994618739969303eed40c1","sha512":"4c6f9019c88ff4034eabd22b10c153af91587d3d65cb4b2f26494e941fb3f40e43f22b16eed6e05080c8872a6ebbadeccb0eb39231097a0fbf17d054dc31efb7","ssdeep":"3072:+KgaGf3XnALfB7pgnSQ+YfLzO34XR03LyQGkJ6ZO6e+gTPp:+Kg9n89gS6TzO3RHYjmp","tlshash":"08e36e7a5185288d0c72d709f48f3b5858d82cebfb86d8d509fc8a6823f2d199197e3d","first_seen":"2026-03-10T20:20:46.38213Z","last_seen":"2026-04-21T09:31:00.577066Z","times_seen":4,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/vn1ebb558a.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/vn1ebb558a.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-19af\"\r\nexpires: Sun, 05 Apr 2026 17:42:18 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 355083\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aquuYDawCUJFPUFPCiPbpqHOVS8WQO0EH6I9PGkS2D9uk%2Bz2howtieVocpznAIlByOswNzuwvBU1Fu3akfp1PLtIY%2Bld31Ao9wFtRq8UBR1u\"}]}\r\ncf-ray: 9da505028e3b9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 86, 8-bit/color RGBA, non-interlaced","md5":"f8ad79b8e3e7e4985afa5ac18c05a511","sha1":"fd97fa80ffc00ce5e94f239649bd442680ffc219","sha256":"1ebb558ad547d5408153a2ff59021b6de1d65c42dd3253de9124ec3700cee40c","sha512":"f7f79e53722aa1669d0511f318cf2b0bf75eecdf806a3d22a87058f0a99caec7d05c0e197f5d6d21129bef8debd23378c707633970fda7ac6a85943a1f7b79b1","ssdeep":"192:JDV9Cy7Wec2PyJcmpwAQuP4XDBlRBjDbVAumhew:hV9FWz2PyNm8PkpBvZ9mhJ","tlshash":"45d18df7bb8049a1dc6dac737104f3d01567e98fa17890ed87a8408ce22125c8b20ba3","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-08-01T23:22:20.376175Z","times_seen":282,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/chunk/uib03e1cbd.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.cflgroupltd.cc/","date":"2026-03-10T20:20:17.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/chunk/uib03e1cbd.js HTTP/1.1\r\nHost: m.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.cflgroupltd.cc/assets/entry/index693d18c1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-1981f\"\r\nexpires: Wed, 11 Mar 2026 08:20:17 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXzX0xNWRXmafrCNLXpwZTKndwHd6LBdcCOgKjWkvKM88w613hPjk94168%2Bn0zwWYy3fhYg6NozvVQ3vXP1V0qh9U0FGGowGowJz3eHQVUk%3D\"}]}\r\ncf-ray: 9da504e89b359e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104479,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65248), with no line terminators","md5":"0758f46d14374c29a55cbeba65ee837c","sha1":"6b283c7843e7da1e51c41b735446af65c467dd62","sha256":"45838b9bdf4b66957d1e495351860c08195d7ec320911e1a00fdf1dbdc8556ef","sha512":"f4c5158e2d641c8e7054eede9ade40682501ccf7ddcdd5f91394b9df5e00762ac1f947c644c96c1398de3833ec2a1caa96a2cb6a36b1dd6adc808a6fd00b3b35","ssdeep":"3072:bMeK4FrjJDnaOGhRV0mh0OzJRfA5d2J2bT0ly4QEiQEBH+ZzY1AXHYC8dSE+mTp:bMeK4F4OGhRV0sfA5fFAXEBH+Zzg+YCO","tlshash":"b6a34b91b586b43c477b94c550aa1600b62c1f89f409c8e0f0be9e4627eedd8b1b7f39","first_seen":"2026-03-10T20:20:46.387056Z","last_seen":"2026-03-10T20:20:46.387056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"m.cflgroupltd.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/vendora7459804.css","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:18.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/vendora7459804.css HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"672a437a-1b135\"\r\nexpires: Wed, 11 Mar 2026 08:20:18 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tbOZFAnXN0f9a8L0hIMeBeOl7%2BFEEa4n6c8jaD7lIoUDDSo2PkdIvqHgXJ9%2FGcUSnrmJgpd%2Frv%2B28SbujuPjHwjADjLkDIX0DLBtkPN3DDf3\"}]}\r\ncf-ray: 9da504efdbff9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110901,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"1c77cd5714f84e3e96b804d4f50253b8","sha1":"b4fa2f0f1a348e0a51cb222bdb55b667555e80c2","sha256":"3db7123247c8f0b8a1898d65580c92d3f5ca87e6a44d2db26f95bf6500c698ed","sha512":"78524bb21dee02db3052b0f59d67b2873f07b2a79ffa28969e3b95a0a9ccbddd129a94f742101a132df4e16f16c7c4548329c6003c52ff0ee0c4949ca127378c","ssdeep":"1536:98C7zB+LIcZVyVOdmMJ2E067cjcviYJkrn2kcndljjn8PRWTo:kURwo","tlshash":"0ab3a59ae753993b2c135a7d2ac4d9a9ab15cec1c8011765f784e00cd1c7eb123e7e3a","first_seen":"2026-03-10T20:20:46.392431Z","last_seen":"2026-04-21T09:31:00.583645Z","times_seen":6,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/indexa1954df9.css","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:18.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/indexa1954df9.css HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-c5a5\"\r\nexpires: Wed, 11 Mar 2026 08:20:18 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=07oR5tS0k7Tyb9XlRbTATADSdwiUx9CGvcot5tPZTKAueN4cA%2BPRdeQvuB46xEVUYscV6mcidFwbH9eVYuuRn6yclzv05ZAetOIpMA8h%2BjnW\"}]}\r\ncf-ray: 9da504efdc019e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50597,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (50588)","md5":"a756d3767de24d812b9d35122065dda7","sha1":"1e1c527b46e1fd54267f544c8511839d860731ed","sha256":"a1954df98f28cd3cdf4c0fc070523c6832747b44cba91a5f9f40a99b35d6569b","sha512":"3ba145a059962c53961693e952cbddbc449761f97f28f10b298ec9617eef4b3415feb914b0b371a7037bf24ea9376a1237032dfbbcd1ea98da743cd2873eb0e3","ssdeep":"768:7J84Fk6ztMlk6ztM3FM6mkKb/biZym8EG0oLPHzlUf8f7O2+:7ZztM3ztM3F96/biZym8+o/lUf8fY","tlshash":"1033f673f2a51465fd379aa2e081bb7e3d2de0d38f224a9df145b33486c62e70a1254d","first_seen":"2026-03-10T20:20:46.395519Z","last_seen":"2026-04-21T09:31:00.581933Z","times_seen":4,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/home63023cc0.css","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:20.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/home63023cc0.css HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-83d\"\r\nexpires: Wed, 11 Mar 2026 08:20:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l46xthdpSLBWWD82b9pj9juZ1wthtXoDhrjY5jCcDV4d4%2FAjGS5EsKld0fLm9RdaRMtxrP43ldXTxQkT0YRwAqSQR8F22wHzilIXvQtP1KS8\"}]}\r\ncf-ray: 9da504fcdda09e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2109,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2108)","md5":"af9e18493bb308d80b87d13bc571d593","sha1":"e328386f0dee9632a691f6790c4f47a1d3c9b5ce","sha256":"63023cc0414eaba702521f8c683940e00aa82d1b6251d025b9cdbf9bfb025119","sha512":"5a216d0dd2c9c3b3ab068b2a4790518000b40c7c80c415374cbfa3a997ca19856515b8646a1a155f29fcd7e9a28bb44bfc9c234345c69371bc291a0136010f0d","ssdeep":"","tlshash":"f64142b6f794033e6406da3eb2e15aedd726e733c3010664fb80232883c75d525a5aad","first_seen":"2025-07-12T17:27:09.497942Z","last_seen":"2026-08-01T23:22:20.412647Z","times_seen":22,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/chunk/routere929fe69.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.cflgroupltd.cc/","date":"2026-03-10T20:20:17.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/chunk/routere929fe69.js HTTP/1.1\r\nHost: m.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.cflgroupltd.cc/assets/entry/index693d18c1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-5a96\"\r\nexpires: Wed, 11 Mar 2026 08:20:17 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNMiFQ7Iq%2FMcUDu0xAMrm45jwNI5xKIWQYncKwGu9Nsu2KYGKQfNFaR1Wc6NO%2BgEAiN36lNjv1imcbpRAWhcFW5JK8jAI2Iky2NTTHQYJ3o%3D\"}]}\r\ncf-ray: 9da504e8ab389e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23190,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22989)","md5":"852ffdeb9d7f24512af76413382e1d14","sha1":"8db0a785fe9e0288f1ca727d1a056e8b83b255cd","sha256":"c91cb7663ded5d99d4081310294a8deb3018de8af2d3a15aa7526674a9e19bcd","sha512":"11b03b72a9440a9ad724dabe5e5cc4b17b338da84f36956984e7ff660d035e5e1e0db7005eb63bc7a31562aa2e3aa09f3d23dcc69b29cc92c6ecd0abe8f9d4f2","ssdeep":"384:wsVP7Z3ulkPXheuChsL0M/kIX5HJXenNFViuk7KPjsUxfOB2ziuM5JUION3bQg/m:7Pwl2XLChsL3/BX5HJONFVm7KLsUxfOP","tlshash":"82a2e8e532c2b025a7fa19e6507e2115f23649c6384e84d1f21c6cd33c37d99d2bbe69","first_seen":"2026-03-10T20:20:46.401163Z","last_seen":"2026-04-21T09:31:00.581104Z","times_seen":3,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"m.cflgroupltd.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/api/company/getCompanyStatus?t=1773174020594","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:20.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"OPTIONS /api/company/getCompanyStatus?t=1773174020594 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.cflgroupltd.cc/\r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dl4ieK6GA4M713sLKLiTCkHs%2BwoTrQR1Z96rahRdiTIoszVNVCa4bPX7B0WtlW8h%2BdnuggfN8eSOg6z%2FbI46pboLtLt4aGt7VoFTQkxdAkUMdg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Tue, 10 Mar 2026 20:20:20 GMT\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da504fccd9c9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/api/default/setting?key=is_show_mobile\u0026t=1773174021982","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:22.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /api/default/setting?key=is_show_mobile\u0026t=1773174021982 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: no-cache, private\r\ndate: Tue, 10 Mar 2026 20:20:22 GMT\r\nset-cookie: cflgroup_session=eyJpdiI6IlwvTWlPRFRzdm5MTXo1NmVxQjYrdjNRPT0iLCJ2YWx1ZSI6IjJFR2dGVXBsWG5NWnZiNHRVUWhnUVIxdFc3dHF5YytaQjlpUVBMSDBYaWJYb3NLdTlyUDhXMUl1UnBrY0xBRjRZZUhWeEZKWTNNWGh6ZHZcL2dHeTNhRVllYUd2OW01SWpBNEwya1l2N2RLajJHS2FkT1R3NVViVENHcFR3UU9JUiIsIm1hYyI6Ijg0NGY1MDNjY2IzNzU2ZGVmNTc3ZWMxNTkyNDk2MGNhZDRmYzVlZmM3N2VhNmRjMjQxYTcyMDUzYWZmZjU2YWQifQ%3D%3D; expires=Tue, 10-Mar-2026 22:20:22 GMT; Max-Age=7200; path=/; httponly\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JB7VH%2BtVt3pW4n6D66bu4q22jz1Ridwkwe3XEb0xP41ZyLTRb2RNGtj1VOZZQxvrbRQzqBRZn%2FPJJHpiFGwSMgDr0APjEE84pr60HHvDGP6S5w%3D%3D\"}]}\r\ncf-ray: 9da505094f4a9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d74deccc0fb757d23b74f81f4ee7485d","sha1":"d7028902a64072c909c3b04ec6737d1290ed004f","sha256":"67978f037237e2dcc09819b32dedc6f8ae340e171613d288d3088206163b8971","sha512":"0f37f9dde3b9094ae72c37a7127ccadf1225f96bcc2c9a9bad0b62646d2a343a8817e482bd0ede7920e303989bc4479017693798822be93ffdbb04b9407e74e1","ssdeep":"","tlshash":"2c900282241b00828606104894088f09115471821400432a5d8e91218e5d1952142470","first_seen":"2025-06-01T05:36:04.735562Z","last_seen":"2026-08-01T23:22:20.413373Z","times_seen":149,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/api/basicSet/getBasicInfo?t=1773174020599","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /api/basicSet/getBasicInfo?t=1773174020599 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: no-cache, private\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\nset-cookie: cflgroup_session=eyJpdiI6Ilg3WEthOGVkdEtjXC9taGlXOUVIdWJ3PT0iLCJ2YWx1ZSI6IlNPZVRcL2YrZkJuVytnTis2blNMaTNqOTI1RE9wNUYxa1VOT2VuXC9XK0tOamFZSHp4aUhnQ1JWcTFQK042VFN5bEVsTWlOaGNySEY4RW1KRnNxOVp1S3BJTXRva0RVSTFoMU15cVwvUzB3aWhrNjBnNFcwOVo1c3BFb2FUZGhhVWxUIiwibWFjIjoiZDU3NTc5OWU3MWNlNDkxYTMxYTUwN2Y3Njc0MWU4NzM4Yzg1NDQ1YmZmNWJmNTM0ZjllY2Y2ZDg3MmI2MjEzOSJ9; expires=Tue, 10-Mar-2026 22:20:21 GMT; Max-Age=7200; path=/; httponly\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kDN43EGSjE4f2sDBrGr61TZZ6fzP4Zu1XdO4UWvE38O4q7dqtkW8k9ao214MLc5EzUz9TcGmDKzU9KeDt6%2Fpa02XtWiKcVQVusDrh%2BHAlrvuFQ%3D%3D\"}]}\r\ncf-ray: 9da504ff9df99e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":496,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b2339564231099238bb2b154e26754f0","sha1":"c1d8297e217c9728feaad9b45e1f195ef994bb1a","sha256":"7189fb5c958ffc89beb4a1a3f44e2b0e019383722dc66e12cd189543807a0456","sha512":"cca6c2af4647e88e091a8758fe19b7294b81878b4eb5dd0c267b153377a27fb3d26d662343205cadf4b749f83d0035e657744c73d9762835620522bba0cf07d8","ssdeep":"","tlshash":"66f027d230fea3e1623700d0acdb7616b59e705d8cc8ef629bf008286486c59361a81a","first_seen":"2026-03-10T20:20:46.405321Z","last_seen":"2026-04-21T09:31:00.56664Z","times_seen":4,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/logo.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:22.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-4ab\"\r\nexpires: Sun, 05 Apr 2026 17:42:18 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 355083\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8p7bJiHAw2Y3CpLx%2BHGjAIhn2zZbzcbzIjkGDzoiFjxSTjPvl%2BkykD7tO%2BF9RO3x%2BfjWJlxwrS3ufD7AmHAXapVmrPVE2LlTZdVoooj%2BfeJ\"}]}\r\ncf-ray: 9da505076ef59e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1195,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ca2332137a39edd943c3894e32823c69","sha1":"079cb006bcbcb57e3090a4332eb7c015bc44b25a","sha256":"d98a6bdccd10457561fa5b3fea376530457ad07618bb5987e707b3e15b0b5bfe","sha512":"6f3cfa0fd504c264d33ebc5cf3179be8b7921cd4943d5b21b6a526a1588433d374c0f6c1b7765c404eb96d393a711527420d9198ff0b2f71c1eb0763626d1ca9","ssdeep":"","tlshash":"2521b7a7ef088975054e53b45385682283b2f1226a94c0ed34ba055ff6922f45e162da","first_seen":"2026-03-10T20:20:46.377891Z","last_seen":"2026-04-21T09:31:00.570405Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/chunk/homef7df4856.js","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:20.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/chunk/homef7df4856.js HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/assets/entry/index9c959216.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-429d8\"\r\nexpires: Wed, 11 Mar 2026 08:20:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7mtnnbapXy4jvYo5aEE3VXdV67vBSxO8TSTwTfX2isJr8cq3OE2wcVr1%2B9qdGlEv%2Fmfipxk5xPY8Gbyqu%2BGJIgbIZSqSndtEWkSFGsva4y9\"}]}\r\ncf-ray: 9da504ff4df19e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272856,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e4f0f2fde41cdb0476559e348d9d489e","sha1":"41d68cb7890e5c6e3a0df5be48fa4fb0a7bb3dda","sha256":"0be07f6df37846a18e48075b3b29537cb4b7612cbb3dc273086729ee6fec9c10","sha512":"5458d45aee566b2e29c302b5db42378915be6e92f14e9bf4da1a7f34107c5f43a359e24c425b0ba7787fa7eb7b7151c3206e6da2ee2d551183803049469eb61b","ssdeep":"3072:FaIVtj8HwYp0/ptTg7s/1HXOgCkKq4VfbIl0kbk+xfc12X6f2fJLj2WvMxOlz6NI:FaMrT9XOgNYqZphlzxpR3","tlshash":"5e444b82b396d3fde273049e601ab000b1553deef690d9d1f1be8e171a62ce151adf26","first_seen":"2026-03-10T20:20:46.407353Z","last_seen":"2026-04-21T09:31:00.574595Z","times_seen":4,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":14,"receive":373,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/ru9776c19e.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/ru9776c19e.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-1421\"\r\nexpires: Sun, 05 Apr 2026 17:42:18 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 355083\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NDHR89Ec%2BA6sDum%2FxJHPGXqcsbIsHkJaNo0NIzjWoU2Idn7r%2FwA3kL1p%2FCQMdRPJWM2P4pyIdC2Wt7AT9jc5S7hHYX6za6cmOLXlwdzAOzO0\"}]}\r\ncf-ray: 9da505028e3c9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 853, 8-bit/color RGB, non-interlaced","md5":"25037156513edecc307b7df26ce86da3","sha1":"2bcb7ca963fb0deb1616ecba74b0dff336ad9f10","sha256":"9776c19e1cb70b592cd49f533f90e7cbeb42e9f413e8e4d3255d6a5e39da4d44","sha512":"762c9cc6a236c33bf02400d9b3b7cc0fbab8258e9389a13cbb276894cff160d2a3e83dd772fd0a56f58b2c69ca92376f9fc21f2a01cc19464b852d0da44ed1b4","ssdeep":"96:6kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk8kkkkkkkkkkkkkkkkkkkkkkkkkkkB:A","tlshash":"5cb122aa9fa108adca25133cb7cf833e34735e9cb006871723c91c34ce8d10e1b5206a","first_seen":"2023-11-27T03:55:54Z","last_seen":"2026-08-01T23:22:20.427918Z","times_seen":239,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/tra980693d.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/tra980693d.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-a5a2\"\r\nexpires: Sun, 05 Apr 2026 17:42:20 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 355081\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPi30F3UEHHM6QJFGVjNcTluSaVpuC1f%2Fgvm3EQc7zlnb0DU7qfTZ19hx5d3F%2FAS%2FTZ02vOBpLSHGFqEkjuOeYVNrkya7SDXLBbeUb9edBVJ\"}]}\r\ncf-ray: 9da50502ae449e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1458 x 972, 8-bit/color RGBA, non-interlaced","md5":"ea9a979dafd4239b8688f64510dd26e9","sha1":"178dafa36af6b166800e22895b27265223a9e1f8","sha256":"a980693d226cb177662d6d1a9f3dbad754d3d13fc1aa042dc5d6eb31c6bb1c3a","sha512":"fc85e2f963c8cc6a81099d2bbf29103323d5e21fd3e7123f06c745af070a9611621111b9a376625a7bb84d3d0447578aaa90b74d1ccbd9e6ce71212bcb2269ed","ssdeep":"768:u7cqCtyQKjwJVuqpVtTrUQW0anKcn/mpt391+XxrQdU1F:u7cqCtyQK8sqpVtTkPnJn/mvaGdSF","tlshash":"ff139e1f873e5185f782107f6c372b18813effd86a46770f854da42e2e293ce52a6168","first_seen":"2023-11-27T03:55:54Z","last_seen":"2026-08-01T23:22:20.415415Z","times_seen":234,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/v1/api/forex/getCategories?t=1773174021980","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:22.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"OPTIONS /v1/api/forex/getCategories?t=1773174021980 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.cflgroupltd.cc/\r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:22 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1COrvdEc2g1hhJ3UbPpKVNP3TMoJoFRjp%2BppfG7bLp2ypKGbnlg2BuNj7tMIpRPb%2FPH3KVyXHs8N0L%2BOcRL%2BGt4PY6y9fuik%2BfoqTpyZ%2F0pVtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da505077ef69e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/file/viewsc8e63083.css","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.cflgroupltd.cc/","date":"2026-03-10T20:20:16.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/viewsc8e63083.css HTTP/1.1\r\nHost: m.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.cflgroupltd.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"672a437a-f11\"\r\nexpires: Wed, 11 Mar 2026 08:20:17 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kS%2Fm8%2FDL%2FSEElUW2ky0%2FCLASwP4vaJAhhaC5AtKn4h9xY7HuQsWCXsO8GFvjJuYWYGZ5u29DoLdkHMLW%2B7JaElVJE9Xfhc613U1N0bG9gVo%3D\"}]}\r\ncf-ray: 9da504e60ae89e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3857,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3856)","md5":"3563d72cffe78f57adde29707d3c5979","sha1":"064bce04f5b83b3bd5081ef3101d5c21f9d7c20b","sha256":"c8e6308328399961d5f0a81d18f68edf7272eb62488d4a348e10fc8dbf4a6220","sha512":"e32f82e5ed1e9ad9f0a9bb2c8759f45fda6db5b8e5b883dada02a03c445421fc61f7a7eca2543f650a010fbddc42ed50fccb15898dd6e41d69b0d067dc730d85","ssdeep":"","tlshash":"92817572ab1a503ca426e71bf8d0f9cc555ed112f3824d66f72438734ac77e625b110d","first_seen":"2026-03-10T20:20:46.41131Z","last_seen":"2026-04-21T09:31:00.584935Z","times_seen":10,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"m.cflgroupltd.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/v1/api/forex/getCategories?t=1773174021980","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:22.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /v1/api/forex/getCategories?t=1773174021980 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWbKA502V6VKSE4ZKViziDZSTJK1hGBwmAC9KDqU9UeDGrs1RPdZa%2Bj8%2FPrsiJLE2vZ2lKv7chlrYPZD3nS13VE9RNAhKb2OHdVvNJ8g4ZWJgQ%3D%3D\"}]}\r\ncf-ray: 9da50508bf2f9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b871b10e3da2312834f75c1d050436eb","sha1":"052811b8f19383582dce8e79b4358253d59f6523","sha256":"aade7b2e83a6390eff4fa5ea8b28102d5a16060eacc933cc8e0e36ad847792d2","sha512":"4631cb7da8cd0f87aaf8e56b8f0471d2066850a01b2191d781173528d80f854e5cdc6f7121d6790ed1abae630303821000db2e55bcc0d03796765a2f310c6276","ssdeep":"","tlshash":"3c3103042f98f8cedc418d6c26b12d7fb5090a7f93416ea447cfd43e72aa9b52e92484","first_seen":"2025-06-01T05:36:04.731096Z","last_seen":"2026-08-01T23:22:20.383558Z","times_seen":68,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/entry/index693d18c1.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.cflgroupltd.cc/","date":"2026-03-10T20:20:16.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/entry/index693d18c1.js HTTP/1.1\r\nHost: m.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.cflgroupltd.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-4f37\"\r\nexpires: Wed, 11 Mar 2026 08:20:17 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yOQRMTode%2FXOfxLveyu3W8563CYIvPqzFnLvWG6CFjbPZRLyIidtpz7Xvvsu3S40es4FQ%2ByX8HJhnF1HFpqLvFyADbrMYsEiStoeYAp%2FCF8%3D\"}]}\r\ncf-ray: 9da504e60ae69e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20279,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20278)","md5":"bb7aa657e2faa7053d227e454578791d","sha1":"033bcbd2fe00f726bd1569d9861420040f335c7c","sha256":"f3babcf162fe5a810fb34250913651551f3290496d06d0a8755913f8d118c815","sha512":"b1925b7d129399dd722a8d86c4c67857837a2de7dec05f0c63159ea335724e633cfc93625140b3b83250923478724ccbc8776a7444dba0154ff1ac727eed16fa","ssdeep":"384:hUNHKgnCIOKWbTr9AtTtGgkAzfGqrWhRCMw:hsHKgnCX1XgZ9vzuqy7pw","tlshash":"5992d8f91b3c91fc55c70abebf2541d4370e64bb76b285d462ae9e385583c48e20be40","first_seen":"2026-03-10T20:20:46.414058Z","last_seen":"2026-04-21T09:31:00.571786Z","times_seen":3,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"m.cflgroupltd.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/en140ceb36.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/en140ceb36.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-b18a\"\r\nexpires: Sun, 05 Apr 2026 17:42:18 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 355083\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=avjykS5PfTPud6Wmw0S0FTC42qB5LwHQmFbZSJEL6nnILzzGfYyB3N0MhW8pPzxBLqWI1WZnJgsZ%2Fqr27tkPTnLdwcLGn77iD3fne%2BpBaEIB\"}]}\r\ncf-ray: 9da505027e389e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45450,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 674, 8-bit/color RGB, non-interlaced","md5":"bbe24ecfd14ccaf03c3d2e129dda43f6","sha1":"d94634c905fc9f686c9cac6d34b28d7b6bfccb6b","sha256":"140ceb367bbf5b758adeca9edde1a0997636beb738f25e8c58aa8ad4fc0a8b67","sha512":"f429befdc35dfb252955c62c0c7d34f8328ecf78cb30046e7c3805b6321c8d0f1b562a7fb1f7f499f22f149318f7af96f60b3917e6a48289e77515b6cd3f38ba","ssdeep":"768:LDHOMVkhoc/xNEdxnencUk3ybpRL6zuiptHAV3YmYFTukO:LDB0oc/oGncP3ybfxirClJl","tlshash":"8813c03cf8d2b791d11c8937a0d62367dd325e5d2058cba30b09bd256ec0d668beed19","first_seen":"2023-11-22T06:43:07Z","last_seen":"2026-08-01T23:22:20.403556Z","times_seen":225,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/v1/api/forex/kline?forex_id=6\u0026period=1min\u0026from=1773144000000\u0026to=1773174000000\u0026t=1773174021983","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:22.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /v1/api/forex/kline?forex_id=6\u0026period=1min\u0026from=1773144000000\u0026to=1773174000000\u0026t=1773174021983 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAEe0rT0grPDYYL7%2FtQhpg13cM0ZbeUnyDEyBsccWMhMBlrMZQy82yqJ2jWppnubuZw18dl%2FYGSOaOkC68KGYBoVTUiyeuYt6wDxgtlX7ze0sw%3D%3D\"}]}\r\ncf-ray: 9da50508bf2e9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74273,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7648cee5c620d0a209457b8afae979a8","sha1":"0ae6428bc69ed9487bb41fee04662541f14c49b5","sha256":"4552981831820056bec8b1324b6708c7310072558fdb549cea83c10705fbe862","sha512":"cba1bc74f6f54c3e57eaaf8ec12f6e44e986b3793457a7d98a5456459527845ce2ddafa16f04625d066a72fb76edd641efc45ac4223ef7e1d00827c6ab0252f4","ssdeep":"768:onnGcjVRcUYyQAi+u2bnoRHCX4oN52nsT0UmXvSbCWfjK4HE5sU:on9jVRpTi2GHojy/fCjRI","tlshash":"85736a55377f01d0c0256ace6967bcfadb6933ea8bf55f9ea1bacd7f00d001a0009a45","first_seen":"2026-03-10T20:20:46.416427Z","last_seen":"2026-03-10T20:20:46.416427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T20:20:16.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Mar 2026 20:20:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *, Origin, X-Requested-With, Content-Type, Accept, Authorization\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE, GET, POST, OPTIONS\r\naccess-control-allow-origin: *, *\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\ncache-control: no-cache\r\nexpires: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQcSPO8WrIh8%2FDB3MjDoqM%2FOkSBZQHVEF74NBMJNViXFuDG1rXT82AKaV562LUwReXkEgHh2PsrH6Et8aBKJMxSzur7eV9Qc8pHHSqJjaiE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9da504e26d8457e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4405,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (433)","md5":"bfb289379bc95f142c2dcb050967592d","sha1":"11fbca4c7a691c2ce019779e5e676cf7621282f2","sha256":"9d4576fecae4de3655872d42e9d0bbec3524eedf95c5d26059d4a4d59f857daa","sha512":"12af8b806405ef638c3ff21d838ab0e4932d8da7bb02c10fca817a6229d62861095ede2078a6b9a0687192c52a7166b027b7c8529cf265576b736e1bd811173f","ssdeep":"96:TbYd4uJLc+ytJQwJVJiiMY3r6zCZydHRH/eeMuB1XiHUiHAH/XM:TbYiuJLc+ytKwLciM2ZCxfdMuB1Xi0ib","tlshash":"a091754597a3886681536a069e9df41436e3d213840efc01b9df90e8cf50fbd9ed3d94","first_seen":"2026-03-10T20:20:46.417978Z","last_seen":"2026-04-21T09:31:00.561598Z","times_seen":3,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":38,"dns":3,"connect":8,"send":0,"wait":375,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"m.cflgroupltd.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/chunk/i18n30c5fd81.js","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.cflgroupltd.cc/","date":"2026-03-10T20:20:17.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/chunk/i18n30c5fd81.js HTTP/1.1\r\nHost: m.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.cflgroupltd.cc/assets/entry/index693d18c1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-7bcb\"\r\nexpires: Wed, 11 Mar 2026 08:20:17 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=If91SvDcRWBag6m3do7Ri7BLYd2N0hP7OPVGiYcA6bFYsYTTvYl5ABus8jce1QyWt3Vp%2BvM8%2FmnjCan80cBFKDUGsc8ChyACM1I5aDicRGU%3D\"}]}\r\ncf-ray: 9da504e8ab379e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31691,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (31516)","md5":"7f050c3c726b49323c5036a3e86b2040","sha1":"17526f7333b629c426786d8da813e1ebf568e84a","sha256":"27d74ecb2070e3ac21960e031abaec8fb84b3d9b4a7f2f9552e2751c5f7844d9","sha512":"4fbb6a2c65dce9cddbf0328a5ab58f7008e47aeec39f46272a84e93bb72a4bf62ff1cb0d7eef9c724faea1313e441e144b8eb79d85400df7a03089b8f4089cd2","ssdeep":"768:JPatiWKGyfxs/jZIaGhqGkIAyVhRWIohYpz7hjOGdDGAlEmCmBCb+4JqiB/2YVZV:AE3sFIHhIIRlj4Rv","tlshash":"65e2c7c671e6b0020b3582d671b311139f2d075d385ee9c8f8a9e7873a27c4e43a6f69","first_seen":"2026-03-10T20:20:46.419681Z","last_seen":"2026-04-21T09:31:00.564163Z","times_seen":3,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"m.cflgroupltd.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/api/user/info?t=1773174020602","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:20.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"OPTIONS /api/user/info?t=1773174020602 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.cflgroupltd.cc/\r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iv4j4xQquuutexM179r%2B%2F1KhDqh%2BWdZbx817oJk%2FldWL1fr1FjfGoYRkoFZvYKRfojZlMgqQUAGJ5tKb8EC9%2FkF0LOjL0%2B0LAvg8AYX854%2FDDg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da504fceda29e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/chunk/vendoreb8d9334.js","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:19.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/chunk/vendoreb8d9334.js HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/assets/entry/index9c959216.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-f4909\"\r\nexpires: Wed, 11 Mar 2026 08:20:19 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwu2YjoZX1gNvzdZ1p6bd6qiQm0U%2B2CmAIV5%2F%2Bl1reisP%2BToo9fD13Q1hqz6Sw%2BUlkwP1%2FVrExk5%2BmDN7de1WbeT3ccYvvywfrMNExcEersT\"}]}\r\ncf-ray: 9da504f47ca59e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1001737,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32148)","md5":"fcb34c6a1faddd4489916f89b9ef72f3","sha1":"f13da779d0b30c9402d624da5845b92eb4aa09e6","sha256":"151ea7ca6d2293860567908108cb0b30b7624ef7c233526f7015c04a05ba14af","sha512":"ddfeaa54f25b99d51991b23a1d5dfa194e3b18873bf62eebe8456f6a2bb6073d4371f7c0d1f1e78e1464abc0f32bba8d2221cf1c9cb217c8e43fb3da021e13eb","ssdeep":"24576:VF2jLGtu9tlKIPl7Q5UYRQ5Am3Y265teDdWs:VF2jLGt8tlKIPl7Q5UYRQ5Am3Y265teP","tlshash":"18255dd4ba55b46c43b781e9107f1002b33e3a9d740e8864b1bdc9e9296bc49d2a7f7c","first_seen":"2026-03-10T20:20:46.36878Z","last_seen":"2026-04-21T09:31:00.577948Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":406,"receive":752,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/api/basicSet/getBasicInfo?t=1773174020599","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:20.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"OPTIONS /api/basicSet/getBasicInfo?t=1773174020599 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang\r\nReferer: https://pc.cflgroupltd.cc/\r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pYMRP37K7d6jtIPzRmKduS5gZSnSwTeqS1LGEavoMMdT63n6vGxcr59TbvJ9B7lvJywhrnqev0UKt3r8L66Ttl4RCGelEIDQmvzbV5W0Uhurhg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da504fcdd9d9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cflgroupltd.cc/api/user/info?t=1773174020602","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /api/user/info?t=1773174020602 HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nauthorization: \r\nOrigin: https://pc.cflgroupltd.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: PUT,POST,GET,DELETE,OPTIONS\r\naccess-control-allow-headers: x-requested-with,Authorization,Content-Type,Origin,X-Auth-Token,lang\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';\r\ncache-control: no-cache, private\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\nset-cookie: cflgroup_session=eyJpdiI6IlZwTGRGZ0FyN1Qrc1dsclZDMzVpVnc9PSIsInZhbHVlIjoicEFpc25zZGF5WEs5bTZwWDhaYldDUDQ1bnVGdm5na0FVd3M0RlNrVlVHem0rSlNQRlkrM1l6Mldtd09uRklHcDg3dyt2dVJYcEk2bGxLWm91eG5BTytMWkVoQTRaN25MTGhrVVwvUlVPK3FGZmpYYWVSYm5WTlBocVl2OGN3QzRnIiwibWFjIjoiNGIzNzI2ZDYwYjgwMGY3Y2ZmODBhZjhkN2M1ZTYzZDA2N2E3NjUwYWRiM2ZlZTI0MTdlMGE0YzBlN2YyZjY4MSJ9; expires=Tue, 10-Mar-2026 22:20:21 GMT; Max-Age=7200; path=/; httponly\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UCwGANzXPgo6jdoz8cWdGVPo%2BRFQf5fYVPsDPec7Zfpg%2FyHTrNj2AcMaASHs0i2KMBeXBTfRQOcokYelOS9deZkh3%2Fa0UY9M5tpncK1FrE%2FFiw%3D%3D\"}]}\r\ncf-ray: 9da504ffadfa9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f7f1766c7a443d23ce403a825e98e969","sha1":"652183edee25a8d330833c6b4e001d636f183aef","sha256":"b88ebc64268dbebbafc19609aa684a323e676b48d8ef97cc8c032721819c1e23","sha512":"8b9f468f8b52e3944be138b4536d0b4719c9beac0351f25797bd9bd90c6e4e4e65a989f163d733f286da2a9d6b4036e6184b3e85a1959a61a4fbb965242a77a4","ssdeep":"","tlshash":"2880044f000c140311070055540c11100f54145001c1d3151d1d053410fdc4c17c1035","first_seen":"2025-06-01T05:36:04.794467Z","last_seen":"2026-07-23T14:17:29.058278Z","times_seen":194,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/kr65c1cb50.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/kr65c1cb50.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-3fce\"\r\nexpires: Sun, 05 Apr 2026 17:42:18 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 355083\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fVEhuEk3%2F9bhzFc7rqvedrAjK%2FyWJDVR6ll7D8Su5JgVvwfPSTNmVCJi5aEET%2F%2BcX0l6IUDlq9dNEAGZYgs%2BCWXnj0Z0BlSyaFZ1q%2BoP2JG1\"}]}\r\ncf-ray: 9da505027e3a9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 126 x 88, 8-bit/color RGBA, non-interlaced","md5":"12026204fd51a2f30b900c805c3ad0ea","sha1":"26ab28adc010c55f84ce5ba2987d60056d5f4c27","sha256":"65c1cb5071f0c761928cd14f5e0aebaace90c854f3e07e7724be1bdde5c033b4","sha512":"f5b3863743e3798cc97c5c04c75e56c4893f86115b65d6819b6e95d5e658f19791a0c6e8b10196a17d38f61976660558c26e17aeeac1b72a46eea8d7f1444a60","ssdeep":"384:c9n6C1FidkNl9G5i+UeFJvftAhm/NG9SzC99DlI:c9nYWv+xf+hm/Nd89i","tlshash":"5072d04b9345cbf8d2c9c2682a7e1d163352dbc51e8992449bb034eca7b104f598eab3","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-08-01T23:22:20.431378Z","times_seen":272,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.cflgroupltd.cc/v1/ws","fqdn":"api.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:20.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /v1/ws HTTP/1.1\r\nHost: api.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://pc.cflgroupltd.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: xhK2sRe2jjE71wBBroeuiA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 10 Mar 2026 20:20:21 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: oN2pZsusy+mffVV+mD1QcZWJ4uQ=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7nR4xxYkVclmB9Duxx6ZNhoq5wSfoQNw176Uzne7s69JKinca11D96ihVctOs6RFPsNA7S%2FkDpuRJDc5Y7Wh4b%2BXuOGaYzPvnAzMzj%2B%2FY0A5mybqGIIYbWKlWdpGDcUqVULyG%2F8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9da504fcfaf49a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7947\u0026min_rtt=7899\u0026rtt_var=1740\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3196\u0026recv_bytes=1294\u0026delivery_rate=539627\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=7b3bf434e1c25202\u0026ts=420\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":405,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/chunk/homef7df4856.js","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:20.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/chunk/homef7df4856.js HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pc.cflgroupltd.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-429d8\"\r\nexpires: Wed, 11 Mar 2026 08:20:20 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fv%2B1Oial7ga%2Bo2iZmIkzjY9KCdyiJ86xKzf9zbf%2Bw3Lxs3TEqPo7HiMpC80RlNXMMAfyIEVhL8iBZMUFxghJVuNwJdCYZept0rXYfEN5ZVjD\"}]}\r\ncf-ray: 9da504fceda19e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272856,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e4f0f2fde41cdb0476559e348d9d489e","sha1":"41d68cb7890e5c6e3a0df5be48fa4fb0a7bb3dda","sha256":"0be07f6df37846a18e48075b3b29537cb4b7612cbb3dc273086729ee6fec9c10","sha512":"5458d45aee566b2e29c302b5db42378915be6e92f14e9bf4da1a7f34107c5f43a359e24c425b0ba7787fa7eb7b7151c3206e6da2ee2d551183803049469eb61b","ssdeep":"3072:FaIVtj8HwYp0/ptTg7s/1HXOgCkKq4VfbIl0kbk+xfc12X6f2fJLj2WvMxOlz6NI:FaMrT9XOgNYqZphlzxpR3","tlshash":"5e444b82b396d3fde273049e601ab000b1553deef690d9d1f1be8e171a62ce151adf26","first_seen":"2026-03-10T20:20:46.407353Z","last_seen":"2026-04-21T09:31:00.574595Z","times_seen":4,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":375,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/logo.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-4ab\"\r\nexpires: Sun, 05 Apr 2026 17:42:18 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 355083\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2r%2BBzWGn1oJByeNIy9dgPL8XPhDv33o5UvoB5HcFBhcWiFaI4SKP%2BM6T92L1ui6ALQfyb8AcxoxBkrB5jTKpVbu%2Bap%2BiTxWWoq0aE2FNYo%2FS\"}]}\r\ncf-ray: 9da505021e259e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1195,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ca2332137a39edd943c3894e32823c69","sha1":"079cb006bcbcb57e3090a4332eb7c015bc44b25a","sha256":"d98a6bdccd10457561fa5b3fea376530457ad07618bb5987e707b3e15b0b5bfe","sha512":"6f3cfa0fd504c264d33ebc5cf3179be8b7921cd4943d5b21b6a526a1588433d374c0f6c1b7765c404eb96d393a711527420d9198ff0b2f71c1eb0763626d1ca9","ssdeep":"","tlshash":"2521b7a7ef088975054e53b45385682283b2f1226a94c0ed34ba055ff6922f45e162da","first_seen":"2026-03-10T20:20:46.377891Z","last_seen":"2026-04-21T09:31:00.570405Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/spa84479ee4.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/spa84479ee4.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-20c2\"\r\nexpires: Sun, 05 Apr 2026 17:42:18 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 355083\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsojpX6OAW7cAqOYiRRXcpON2WHD7Vs4fP05julx7M8L7OLBCvx5zzANFC0z%2FzIdkXlG0gngRKTievLDyAtG0ZB4gRGnacT%2FUu667zq4IWGU\"}]}\r\ncf-ray: 9da505029e3f9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1458 x 972, 8-bit/color RGBA, non-interlaced","md5":"e6245ac0f8da16662b1f8da60730027c","sha1":"0f1560e6bc08b0e94bc258fbfca0c7210bfa448d","sha256":"84479ee4cd16a169c8fe1ed2e9dc4603a181a4167d2b6f68ba8eda2d86e452f0","sha512":"18099200046d11315551bd0a2c2619f99e926bcb7c9ac1cec1f019101b447376bf5a97bedf74ece82e3ea6c6ce7bf3b09f943dcf50ff871d38c2e55f477f2087","ssdeep":"24:LJeuhVu/KeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeU:LNhVuGacVOIhxEBei4yMPMJtJZ","tlshash":"8d0257fda316a061fc4230b77823e130a67a31eb451fab5be519b0874a0f5ff91a0548","first_seen":"2023-11-22T06:43:07Z","last_seen":"2026-08-01T23:22:20.399937Z","times_seen":253,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pc.cflgroupltd.cc/assets/file/ar7c042e25.png","fqdn":"pc.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pc.cflgroupltd.cc/","date":"2026-03-10T20:20:21.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/ar7c042e25.png HTTP/1.1\r\nHost: pc.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pc.cflgroupltd.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-1430\"\r\nexpires: Thu, 09 Apr 2026 20:20:21 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=89euaylMfQ6ZGi13c2x2yS1zgzB4gKeCICBRTT6CdhK7sBUM%2BsgADIx%2Flt4dIT60X4E1OaEI70dyiC9NPAnqsfnI%2FmnxH3BxPE7Kmbn8esAn\"}]}\r\ncf-ray: 9da50502ae439e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5168,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=ACDSee Ultimate 10, datetime=2020:09:16 19:35:15], baseline, precision 8, 626x313, components 3","md5":"97fc54e98bbebb9ca3a2251b69850f8d","sha1":"5c8030bdf9ea111df689e8fee05f69fb32f85ed9","sha256":"7c042e25b586e816050a329d1e603db9213736a1ba744a4776989a5d28848b7a","sha512":"aeacf2ac57581175a29fffac20070020633a915327c0fd8b4622656b6f69545946ef6c3b21d0bfd67d71850a67c7dd301f5ea5fd0a5b035f31fb43145dc1a44e","ssdeep":"96:H3qotXBoEwwVOIIIXd6xziiiiiiiiiiiiiiiiiiiiiiiiiiiiz:HbYSOIIIXwxziiiiiiiiiiiiiiiiiiia","tlshash":"7ab124bc1f1e083ec5293a3850639579696b4fdb9b320c5c9e4d6608b1c31f69ac5963","first_seen":"2023-11-27T03:55:53Z","last_seen":"2026-08-01T23:22:20.397191Z","times_seen":219,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"pc.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.cflgroupltd.cc/assets/file/index55d65bcc.css","fqdn":"m.cflgroupltd.cc","domain":"cflgroupltd.cc","tld":"cc"},"ip":{"addr":"172.67.154.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.cflgroupltd.cc/","date":"2026-03-10T20:20:16.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cflgroupltd.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 12:11:50 GMT","end":"Mon, 08 Jun 2026 13:09:21 GMT"},"fingerprint":{"sha1":"A6:96:4B:F8:A8:CF:2F:DB:7A:B4:3F:A1:6F:6B:64:D6:26:E0:D6:BE","sha256":"E1:6A:B0:72:C9:A6:E9:AE:85:6F:C1:0E:5D:FD:E9:23:FB:30:F0:FD:77:06:BB:9D:2C:22:08:11:9E:E3:4D:05"}}},"request":{"raw":"GET /assets/file/index55d65bcc.css HTTP/1.1\r\nHost: m.cflgroupltd.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.cflgroupltd.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 20:20:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Nov 2024 16:10:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"672a437a-47fb\"\r\nexpires: Wed, 11 Mar 2026 08:20:17 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pln7vDbiV9%2F5yn2N9dlKYqv6kmOq38yPJ4XPmCFz68KUa9oVnp1J9e9x9T8lJQDumvJaiYFD0wv9o2ncpbxnHyy0BLSCc4Vr8RR3I9MlyJU%3D\"}]}\r\ncf-ray: 9da504e60aea9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18426)","md5":"306520f530b96ad0a757493c97716e79","sha1":"206753d40d6c0d8b2aaa124716913fa5980888f2","sha256":"55d65bcc27d12c8ec33cc9f0cba5f0ec83ca0c7351cfc2b10cd4a4ba4cf7212a","sha512":"377979aec6e5334a283f16d8ba723862a3fee3b34200fb7f45d64def636b5dca439f4c122ad40b9e4f3b1784ecffc408d11b4b5fa220fbdf1c2dd646bc9dc1a2","ssdeep":"192:O9JyW9Jyyxwy1vGfgsfPsfsgsfksfrZGfXGlB+KANv6jT84GmgcH:kwW62gT84PJ","tlshash":"05822ae3f7cc20296c1681eae595bb7cfc3f99c1ab2a9de6e501373057912eb589010c","first_seen":"2026-03-10T20:20:46.425869Z","last_seen":"2026-04-21T09:31:00.575945Z","times_seen":3,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"m.cflgroupltd.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"m.cflgroupltd.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}