{"report_id":"824ab7d2-833a-4f61-8eb7-6c5d6fb054c8","version":6,"status":"done","tags":[],"date":"2025-10-26T09:53:55Z","url":{"schema":"http","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"title":"16幼女"},"submit":{"url":{"schema":"http","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-30T09:53:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ad.xsddh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cc.16nh.xyz","ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-18","domain_rank":0,"first_seen":"2025-10-26T09:53:55.42249Z","last_seen":"2025-10-26T09:53:55.42249Z","alert_count":0,"request_count":19,"received_data":507218,"sent_data":8579,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"ad.xsddh.com","ip":{"addr":"172.67.154.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-05","domain_rank":0,"first_seen":"2025-10-26T09:53:55.420903Z","last_seen":"2025-10-26T09:53:55.420903Z","alert_count":1,"request_count":1,"received_data":5244,"sent_data":402,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"c-hina.kkkcom.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-09","domain_rank":0,"first_seen":"2025-10-26T09:53:55.418883Z","last_seen":"2025-10-26T09:53:55.418883Z","alert_count":0,"request_count":1,"received_data":1084,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"img1.souavzy.org","ip":{"addr":"104.161.25.242","port":443,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"domain_registered":"2024-12-15","domain_rank":7039838,"first_seen":"2025-07-26T06:21:28.482432Z","last_seen":"2025-10-24T08:01:27.282841Z","alert_count":0,"request_count":1,"received_data":286094,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.kkkcom.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-09","domain_rank":0,"first_seen":"2025-01-01T11:53:02.231939Z","last_seen":"2025-07-16T14:06:16.812915Z","alert_count":0,"request_count":1,"received_data":535,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-25T02:19:05.767969Z","times_seen":148377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/js/jquery.min.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b18a3f7f2f5a0c52c6269f408e48b6b","sha1":"c7b51b843e9808fac615e9d07048616a89ef50e2","sha256":"20823cafe0bbe3e2dc93843456e900499cca28f13de30259592522c1a65099cf","sha512":"4003e7dd76ab28518a7595bf2a0dd980c2e10b42ae5ed71b05c96a3ea5fbb0d45f0621dc1df1577704cbce22438538b4c607c655648df9daae8a292b64e810a5","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRxZIVI6xSb8xh2ZbQnRq:R+41ZqLTW8xRtqSb8qGH77da98Hrq","tlshash":"40a3e8d9b7d67162977730b840bf510bb07a98eab80c4ca0f064c8e57d78a99507bf2d","size":99202,"data":"","first_seen":"2025-10-13T15:35:55.719253Z","last_seen":"2026-06-20T13:45:12.639263Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/js/ajax2.10.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bee90f5fe81b8a5f02cbbbf347664829","sha1":"7566d24e362f84a85d52b7dcbab1238a9cd89592","sha256":"6b89dfdc5d18fe5d5377bacd505ca004c68dbe87f366c817c4dc0690c4f43a9e","sha512":"4ac99409f65ef63ccbfa15c0d9494d7d7993694bde7349280bb20287d2df68f59316fc8749aa54399ff5c7a8a5c2566b5d939b249df21e8c5387ad9d881f0e71","ssdeep":"192:fKFNH5/XODDWSRM2deOPHsw261bwkkgevd7rI:f48LRM2gOPn39EHI","tlshash":"3d22ed147a9b60f8e07bf339ca8bac44ea7996ab111926c3f41c68911fb141643f5f78","size":10385,"data":"","first_seen":"2025-10-13T22:27:33.345863Z","last_seen":"2026-06-20T13:45:12.447545Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/js/jquery.superslide.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62d370036a1cfb15a244376ebdfa747c","sha1":"230be49bb7421935e573725498b9ef69729a9288","sha256":"d4c24ae2f3b1cbab45ba48ac3d3486c5aae1552a5f5b90de85c4809f9a204c01","sha512":"ee43db1b5cc18d6ed61ead0cdac28152dac041f3addc51a571d5373f5c3012bd0dec8806d8930ccfbe86d25538c3bfce9ef0597d52f1658b7103043881c71878","ssdeep":"192:G/K1uHRX42xdRGLa6+uGI4QjIlaHwmIuTNSaXHZe2HNc0SqaFvKm31H0ryWQMP3O:GSgx1xdRGL95YlHhlwyT1Xh6+L39EHI","tlshash":"b832945ff9b6359945e773f2447f980d6236616579468ca1f03883c86ab8e0d203beac","size":11029,"data":"","first_seen":"2025-08-08T05:54:55.664876Z","last_seen":"2026-06-24T21:27:13.945931Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-25T02:14:23.192268Z","times_seen":377696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e66a8a3f4b9d4f023b211d5cf867857","sha1":"ac1ff2cd6c0a3192b3fa0a9acfe9dc6ec8b2a7c8","sha256":"78d645a13b21db4b37b64de9712209c0e4aa7d725e143806816860c3f63e6c57","sha512":"2f82359acb12c2d7c5f86061c53b6ec16e7aed049a67f4cd1b79e3c474f5b3b3f1e861bf6cb89b55e68a536c0c6bb9ab9ce5ecfd62f4a3a731ab47f42538d204","ssdeep":"","tlshash":"5bb012140d1e800348d331c1471d4a2702fd2570d17f4f9c4506bc04cb4e1c0070c3c4","size":104,"data":"","first_seen":"2025-10-26T09:54:01.610959Z","last_seen":"2025-10-26T09:54:01.610959Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c06775735c4f721bd4a3f2d21a6276a","sha1":"79fc9eb27e5ed78e783ea6cbc80037efa48f56f8","sha256":"90fa85da97497c36da4f10168433c591066ee3844239949a934cae85a7e6b5c4","sha512":"96cba5b46bdf020c1120ac3c76a4232f9152886b8a39ca516ecf74c3fce7030c0a6e0610180a66e464506551c63b07a275aad00d00806b4ad78a43adce7cb377","ssdeep":"","tlshash":"669004f1105445017fd131f7cc310c34d01d75155447d4c15c4500d351cf074f351015","size":44,"data":"","first_seen":"2023-03-07T18:04:51Z","last_seen":"2026-06-24T21:27:13.941609Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/js/jquery.lazyload.min.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3a60f2438362b0e02d1c4aed459eaec","sha1":"c68b40d7cc18813a483af504652234f6ca5a81e4","sha256":"d13b70343715b11e0247d30323b81b1efb7d0ae9f3fc47412d479b11f64925b2","sha512":"5704e65ab580c791a8688418988a2d1b35ddb977b3fd3df37615ad7c15dc76d6437abea35a4d62c529526872b9d6e617368664ce7f33810a487cfd1f805864b5","ssdeep":"96:jgJkXLLcc1JfDvupezu6a6+mD4YP2GOY/FrR26BHbwKlaxEkgVYMQd7xR1q:jgSbtJT1MoDV2GOYNrR261bwkkgevd78","tlshash":"ada1955a7f93383ab0693a9f431f7006653ad42b46558c54f08de8d49cecf960137faa","size":4899,"data":"","first_seen":"2025-10-08T22:30:40.66299Z","last_seen":"2026-06-20T13:45:12.478739Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/js/bootstrap.min.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e494d983af56862901ee924e235cb09e","sha1":"1591983ced1d09d518d97fba8a09f73bd0949b95","sha256":"f76b0a727dee16478b91093906023cd96114e5ae150d6058f224f1bbb1245019","sha512":"30e4848750e06d81b7dd17e67d0e832a324436276b52fb3e2ca622bea0bed716e4ac4c65a0b23c7b7205d28a709ffb22493f3c8c741a4d042688aa2bb3b3b297","ssdeep":"768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbAI:z/76whqKGvlm3ZXAI","tlshash":"36039606b23031a147efb1e1525f020a7239696ee906907c78b9dae53db9c48717bf3d","size":38386,"data":"","first_seen":"2025-10-13T22:27:33.183641Z","last_seen":"2026-06-20T13:45:12.410246Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfc24d0fe769bf77f195bb622316498a","sha1":"654bdb89b9fdd9145820f4496084f5fd4f0973b8","sha256":"f8e7cfe61a06f5d7a309e0339e93bc16a5ea9d03d1b11f3e3520ae173af06a9b","sha512":"12e1780806969e09cfd3f8e2b163148a8e760bc6c6b91f6f154e2e6a439e5d0a2bae7b04846f67d2d01a2c6ba4e0e42f5ba5bee583c3b7b257b7845e2f51edb9","ssdeep":"","tlshash":"f8e0ab2998e706384cf67a481039ca3930fc38a0aaa3d027525cc83cce39fc50c14aec","size":424,"data":"","first_seen":"2025-10-26T09:54:01.612276Z","last_seen":"2025-10-26T09:54:01.612276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-25T02:19:05.767969Z","times_seen":148377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/jquery.min.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0bd375fb4d9488e1e864cf01b20d627","sha1":"a9614fbd0e959e60e6d245e4ef16215ff6573826","sha256":"10d4d60d60fc1ba30afbc187c5ce27a85e7e8a4e7842c4bf2c04ef1419511904","sha512":"4322cabba1c8dad6402367ed6b8a3d5323e74c2391f3b5c2aad03482806071e50f0f39f5c881575096a0c0961b9082cd7c12335949ad206dd9db0508a3653f4a","ssdeep":"","tlshash":"b8319b269bb72074846363ad6fcb8945366eb2077184cf497eadc2814fa053894a2bdd","size":1537,"data":"","first_seen":"2025-09-20T23:54:03.678881Z","last_seen":"2026-06-24T19:49:45.725564Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/static/js/jquery.autocomplete.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"932466cf2976a99330383be9ffe8ca6b","sha1":"732c55aa5bbb6efb63fad871db9773139929d0e6","sha256":"22a879d897b0c6559e8a4f0e1d7f8866471478740a5b5cace3c29c97c8fdaf18","sha512":"e1ea60c13642bbc8ed8cd448007d5096c4067596b1fee2bea55f1fea765bab59f97f92fa973bdd329ccf78087be301325b14a206592a76c3699128459559159b","ssdeep":"384:EC8MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:Ed7Dr7OtZTqE","tlshash":"d3b2ec0979e3226292a7707e8faf0008b676a557240cdd50bd1ca7d02f54938b6f7fe9","size":25108,"data":"","first_seen":"2023-04-07T04:49:34Z","last_seen":"2026-06-24T21:21:37.800206Z","times_seen":20956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-25T02:19:05.767969Z","times_seen":148377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-25T02:19:05.767969Z","times_seen":148377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-25T02:19:05.767969Z","times_seen":148377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/js/jquery.base.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aad17cd60958b53c40e6edfdcbd14e35","sha1":"d568b297c8ae99bf997804eca0622403a17aad2c","sha256":"8429897b5c4b08f73f98a4473934a141a04d8211819e2428256c0be67989e400","sha512":"8888b1988c5bfd9044d9293309fea8100b191d8e3d0af3eca89a61992d75eb3c4027c003d25622225a7014161d4a4f13945f9e390a4e0bf4f73181e246b50dd4","ssdeep":"192:0OWMtuqzxkEMuFF9wr+4WNztsukQvjXFj261bwkkgevd7rI:HzxkMF1toQ39EHI","tlshash":"12f13059f616257591ff35bb1a6fa588303a14232a068801f83c84a41ff1f695e3bf7e","size":7715,"data":"","first_seen":"2025-08-08T05:54:55.592868Z","last_seen":"2026-06-20T13:45:12.637099Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.xsddh.com/mc.js","fqdn":"ad.xsddh.com","domain":"xsddh.com","tld":"com"},"ip":{"addr":"172.67.154.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8e2da179c56a26605a6dd7ec2fc9991","sha1":"4aa77241abc94a9a171ad2bcd4a5a6ab9614a009","sha256":"e94c3eb3fc5a0eb01acfbe468a6f2466bef049d1c820a6898c784131e6908774","sha512":"9233fc64d7230c934d7a8b029d5683ebf9cb5829b9ab5af2d83447375eed166763c490df94f66a8fd57bd1fdc3176a1e868b308791b13c1dd0725c434608b62f","ssdeep":"96:8fSl3lfxpkJ7oiQ0VBTw87Cy5DyQGP9ZPdoWyJsBG1DJ7M:8fSlfpkJ7oiQ0Vxw8eydAFtyN6B4g","tlshash":"6f9109126ec7603c4913b06d4f0e1d0860bf7fb70dceda95badca1888f4195224ba7b8","size":4408,"data":"","first_seen":"2025-10-26T09:54:01.597164Z","last_seen":"2025-11-01T19:08:38.554435Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.xsddh.com/1/h.php","fqdn":"ad.xsddh.com","domain":"xsddh.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"abfde06e53eb3cbb1813e83080797c93","sha1":"dc04149562c0f0622ef3e0f2981500f8ab3665ac","sha256":"c26bba7055631b07b5586aa9c546f0721aece3dad711436959cbecab267c2837","sha512":"dfdc507aea09f6481b29b9918a15284b41c4bb0bedf350888b2b6909054e282c6ed684c239f2d4798a9c9a6c3acce5e86c1a92ed0b76307500e3c52f92f5466e","ssdeep":"","tlshash":"08e0e572e1c45527c6615cc0c4a4f7b8e53230bccf379642c0bb041f3508bdb0445454","size":428,"data":"","first_seen":"2025-10-26T09:54:01.613111Z","last_seen":"2026-04-12T22:56:31.002147Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"78390ae1ede4279800e30e3ae5c93295","sha1":"c7011a1514f67f5d6161aa710597de08481b3665","sha256":"154bf3b65281f10a66cfb8e69ababebc7ab7593f898400815564ee4e7aef1607","sha512":"d1211e7869fb0fac9128a38eae835aa95b736189fbd2109d70eb7a24749139d363d0efbd1625f06709229d3680b36abda1ca77810a1dcefca7ce55e7d246dfe7","ssdeep":"","tlshash":"0431960f71a210f4879a70f3151f660db832d41a0d2ec5619557d5c46d385fe8a1fe8b","size":1749,"data":"","first_seen":"2025-10-26T09:54:01.613851Z","last_seen":"2025-11-01T19:08:38.588194Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/static/js/home.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cad1c3f471985362421b035fc3eb01f","sha1":"3e7ea64952a39a9e69c2619529204368206d69cb","sha256":"3fa6128ce756337d6fc107aa01507a7c9fc5f11c93d0a3f492513b770a6b9579","sha512":"4f201dcf17bdc9045bbbb807898f713f708ba2d542a21753f45d77c026250db685c9b2e744e0d79757ee6d5cd5226c9422444ef83bb37d0ca592bd526f427fdd","ssdeep":"768:hR0cTTu8eWbZLbhpa6a/b7z9SsbhbeA5gr9GiSo5E7Iw4TQv5:hRZXde36oRiG5","tlshash":"e203a55d7af3142050b3317a4fbf69082276815f190ddd88fe2d11a48fc4a4eba66bbd","size":38310,"data":"","first_seen":"2023-03-07T14:00:21Z","last_seen":"2026-06-24T19:49:45.80263Z","times_seen":568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"a1693e54ead981498ec95d5f31e449ec","sha1":"9a5d47dfb651e9893ed383afc4050a1b277caebe","sha256":"9b7cfb485ee7aa44d7aa625559ef73359c2b78b95afd5a538b443a03542d5f20","sha512":"b9483c7f737b7c3ef1e541008fd6071bc88a0f3bc239dd00e56f60b2c1f3c2f0958b6793bdd179c7a692167377cb79409e74ab89a1f67fa489a52dd6092a897f","ssdeep":"","tlshash":"28b02b62b768602c4005036224551c6040041644f284ce30b9f4216322180d81421d1c","size":123,"data":"","first_seen":"2025-09-20T23:54:03.891602Z","last_seen":"2026-06-07T07:27:59.928208Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d39f307e3ed4dec624a5c3c6ee6b412b","sha1":"d18288361ad0d5ae3d1b8d469df08bd649518e1f","sha256":"3456e1c7704ca2283d43121453d6d39e79d0575cf37f4a7d23cac4ba6a090a35","sha512":"142b01079007aa03b1aa8cf9a499e82d703bab2ad7991c27ba5b2c421d9354df8a86658fab88a8abc2334fac87ff66d81e2bd7855dc2a8001486f32ebd9451df","ssdeep":"","tlshash":"0db01273f1c84827ca92acc0c8a4fbacc61324ddcf7bda86d475542b360c9e74816464","size":121,"data":"","first_seen":"2025-10-26T09:54:01.61518Z","last_seen":"2026-04-12T22:56:31.01031Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"270a67259556277d28431c1bd2cab375","sha1":"4e17031d628cb271419f5bfd4058983a73a5047d","sha256":"9ce5da2ae7154674a7bafbe95dfd945c57fa110e26365052cb42bbdd2ca7d76e","sha512":"260a425677543a2f52526b6f1fd49920b3fab21e69afc798f408ea2cce99e80864d1de816989f1a3977d2abc6fdc71e96205b856ae87bfbc2af59d5d0aafb49c","ssdeep":"","tlshash":"fdb01273e1c95837ca82acc0c4a4fb68d62324ddcf7bda87d4b5542b360c5eb4816468","size":121,"data":"","first_seen":"2025-10-26T09:54:01.615969Z","last_seen":"2026-04-12T22:56:31.014769Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4608326b4559c5eb697cee5ef391f039","sha1":"b4712e4830c08078a9cc915cfe2d3d809428b310","sha256":"4dc12057620a2ec733e7cd8cfe077a2d35c646c1d5bd3eb11314bd554e044ea1","sha512":"725b3368ed814bfc622a8ac1d223f0477fc8ff7c90a4de2f791cff79c1c94741efc517587e05beaddf348293c8f612b5b10ee86ec6621d00b5d85ad82238f799","ssdeep":"","tlshash":"eeb01273e1c84827ca82acc0c4a4fb68c61324ddcf7bda86d47b542b360c5e74856464","size":121,"data":"","first_seen":"2025-10-26T09:54:01.616763Z","last_seen":"2026-04-12T22:56:31.015378Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"cc.16nh.xyz/favicon.ico","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:35.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 09:53:35 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Mon, 22 Sep 2025 15:21:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\netag: W/\"68d16996-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fwa75FUmSN8xJhiHxITyrsU34QRc5rFVsz0cd16p0bOKLgpUc8QG0Y8sowt5UcDt%2BELMSK%2B20UAVmqwXJBjxuHv04vjpBTLcYw%3D%3D\"}]}\r\ncf-ray: 994911428ae20b3d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"5f7fb46a289f3034b1855cb520a15b16","sha1":"eef01ff07ef6134436eb7713dd0036deda221187","sha256":"9378213c11ae411011790702951b279c766be68398faa12e72d264f68955462e","sha512":"1c4184c6b78869ab79566cb46690a52bd6f8c4c2f80f4d4a5115a7751702a740c8c9953ed1f012095c40f989dbdf0083dc9618cb272038ca1951f9b353c70cb9","ssdeep":"24:su74p3ZTZrteoYMovONydDPK341M9ItDuKimK1kqgksXAACIkeiB7A85zlqRGtV5:gUo/okydDiI1M9ItDYkqhUTG6l4rblOg","tlshash":"db912429a945883bef8872ba414fdb233125b8b9d3153e8a3be6fd373070118d514692","first_seen":"2025-10-10T05:45:41.833485Z","last_seen":"2025-11-27T07:04:46.004008Z","times_seen":3,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":563,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/static/js/jquery.autocomplete.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /static/js/jquery.autocomplete.js HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Aug 2021 10:34:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b90c0-6215\"\r\nexpires: Sun, 26 Oct 2025 21:53:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=li83KzluKMx3hyYL%2BoUqwlLcwSAL4tMb1ytBQQVsjONkAItVIHhuRZIpw4NRhNBhwDSR8mAKUnEvjo0wDA1gCeNJ9KPUcGIq%2BPQE\"}]}\r\ncf-ray: 99491135a87f5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25109,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"932466cf2976a99330383be9ffe8ca6b","sha1":"732c55aa5bbb6efb63fad871db9773139929d0e6","sha256":"22a879d897b0c6559e8a4f0e1d7f8866471478740a5b5cace3c29c97c8fdaf18","sha512":"e1ea60c13642bbc8ed8cd448007d5096c4067596b1fee2bea55f1fea765bab59f97f92fa973bdd329ccf78087be301325b14a206592a76c3699128459559159b","ssdeep":"384:EC8MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:Ed7Dr7OtZTqE","tlshash":"d3b2ec0979e3226292a7707e8faf0008b676a557240cdd50bd1ca7d02f54938b6f7fe9","first_seen":"2023-04-07T04:49:34Z","last_seen":"2026-06-24T21:21:37.800206Z","times_seen":20956,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/css/tjall.css","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/html/style/css/tjall.css HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=khE7jDpEvK2QFC5eB5jVYqEVw8Rz95KMr2g3u1dMu9u6GjWa1LFgnDZXt19tuvTuHUq9NopLTGO4Pj5k5f%2FO4u2V%2F00e0%2FovFpI0\"}]}\r\ncontent-encoding: br\r\ncf-ray: 99491135a85c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-06-25T02:15:01.466903Z","times_seen":530746,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/js/jquery.superslide.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/js/jquery.superslide.js HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 23:27:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b8cece-2ac6\"\r\nexpires: Sun, 26 Oct 2025 16:50:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 18212\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fjt36e%2FUCbeRcLuSxSagTGEciD6XNdsAdNfkJIE5iT9STYbHl%2FF%2Fy6JYdTsNEc8zm4ZfN1tvK%2Fj1Br4R3RvrZWRjCBXtrY3OnKzU\"}]}\r\ncf-ray: 99491135a8815ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9089)","md5":"ca8bbfc6c4ba25d89794c6d2c5174033","sha1":"357451c024365600e0256698d462a801ccce8e0e","sha256":"63f1ac67b714b7becef6918ed87846aedd19b747eed119006269cf147c93cfce","sha512":"bbcf725427c0157fc1a22614406f1fdb20ef79c6d713f6f7555ce4631c07d91444ed9247b914eee46c562ebcbfa93c6020cb0d1d348ba7ecdde15e1fc31dbdce","ssdeep":"192:G/K1uHRX42xdRGLa6+uGI4QjIlaHwmIuTNSaXHZe2HNc0SqaFvKm31H0ryWQMP3S:GSgx1xdRGL95YlHhlwyT1XhAly39EHI","tlshash":"fc32955fb9b6359945e7b3f0447f940d623a5165b9864ca1f03883c86eb8e09203feac","first_seen":"2025-08-08T05:54:55.636981Z","last_seen":"2026-06-24T21:27:13.929692Z","times_seen":39,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/js/ajax2.10.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/html/style/js/ajax2.10.js HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 04:48:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b7c89a-2891\"\r\nexpires: Sun, 26 Oct 2025 16:50:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 18212\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vcALuXThm2iqE8PdOyXI5S1x%2B6sb%2BiU0557IyLPAiGHcC%2BBH0kEoqd5PnTBhjbS0bMVhqLLFsadn4vSpG23tVCocNUy8QsRcbHvX\"}]}\r\ncf-ray: 99491135a87b5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10385,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1504), with CRLF, LF line terminators","md5":"bee90f5fe81b8a5f02cbbbf347664829","sha1":"7566d24e362f84a85d52b7dcbab1238a9cd89592","sha256":"6b89dfdc5d18fe5d5377bacd505ca004c68dbe87f366c817c4dc0690c4f43a9e","sha512":"4ac99409f65ef63ccbfa15c0d9494d7d7993694bde7349280bb20287d2df68f59316fc8749aa54399ff5c7a8a5c2566b5d939b249df21e8c5387ad9d881f0e71","ssdeep":"192:fKFNH5/XODDWSRM2deOPHsw261bwkkgevd7rI:f48LRM2gOPn39EHI","tlshash":"3d22ed147a9b60f8e07bf339ca8bac44ea7996ab111926c3f41c68911fb141643f5f78","first_seen":"2025-10-13T22:27:33.345863Z","last_seen":"2026-06-20T13:45:12.447545Z","times_seen":8,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.xsddh.com/mc.js","fqdn":"ad.xsddh.com","domain":"xsddh.com","tld":"com"},"ip":{"addr":"172.67.154.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xsddh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 08:51:27 GMT","end":"Sat, 03 Jan 2026 09:48:56 GMT"},"fingerprint":{"sha1":"0A:9A:0E:FD:6A:42:7E:7B:69:23:02:55:71:A2:92:AA:88:1B:AB:FE","sha256":"81:4B:82:1C:D0:61:18:11:50:CD:30:7E:29:FF:0E:CD:04:F3:36:9A:F9:A9:18:2F:A1:07:58:4A:2C:25:01:2A"}}},"request":{"raw":"GET /mc.js HTTP/1.1\r\nHost: ad.xsddh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 20 Oct 2025 14:02:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f640f4-1138\"\r\nexpires: Sun, 26 Oct 2025 21:53:33 GMT\r\ncache-control: max-age=43200\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67KrcU9OY8uR8SP59gFjXj5eD7YQBEmCOFC3G1CtcIytByZFbxOzWhfmPT03FeDwaF2cz%2F6SZwK8y7O%2Fd6SyKNgEJ7knr3MWBDs%3D\"}]}\r\nset-cookie: SITE_TOTAL_ID=9df1ee3be27b79bc6e8d0ed51b180928; HttpOnly; Path=/; Max-Age=259200000\r\ncf-ray: 994911360c79b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4408,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2354)","md5":"d8e2da179c56a26605a6dd7ec2fc9991","sha1":"4aa77241abc94a9a171ad2bcd4a5a6ab9614a009","sha256":"e94c3eb3fc5a0eb01acfbe468a6f2466bef049d1c820a6898c784131e6908774","sha512":"9233fc64d7230c934d7a8b029d5683ebf9cb5829b9ab5af2d83447375eed166763c490df94f66a8fd57bd1fdc3176a1e868b308791b13c1dd0725c434608b62f","ssdeep":"96:8fSl3lfxpkJ7oiQ0VBTw87Cy5DyQGP9ZPdoWyJsBG1DJ7M:8fSlfpkJ7oiQ0Vxw8eydAFtyN6B4g","tlshash":"6f9109126ec7603c4913b06d4f0e1d0860bf7fb70dceda95badca1888f4195224ba7b8","first_seen":"2025-10-26T09:54:01.597164Z","last_seen":"2025-11-01T19:08:38.554435Z","times_seen":2,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":8,"dns":28,"connect":1,"send":0,"wait":341,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"ad.xsddh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/jquery.min.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 05 Oct 2025 16:15:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e29994-601\"\r\nexpires: Sun, 26 Oct 2025 16:50:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 18212\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fuxcg06xfdJkyZZibOwu%2B%2FuA76Wr0SZSM0PQx5rO0kC%2F75qFkIh1Mp3a5A3VYMZiVAFw4NA5DKgeb5YenX9wODB1nXBtg%2BuB1nGZ\"}]}\r\ncf-ray: 99491135a88c5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1537,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"a0bd375fb4d9488e1e864cf01b20d627","sha1":"a9614fbd0e959e60e6d245e4ef16215ff6573826","sha256":"10d4d60d60fc1ba30afbc187c5ce27a85e7e8a4e7842c4bf2c04ef1419511904","sha512":"4322cabba1c8dad6402367ed6b8a3d5323e74c2391f3b5c2aad03482806071e50f0f39f5c881575096a0c0961b9082cd7c12335949ad206dd9db0508a3653f4a","ssdeep":"","tlshash":"b8319b269bb72074846363ad6fcb8945366eb2077184cf497eadc2814fa053894a2bdd","first_seen":"2025-09-20T23:54:03.678881Z","last_seen":"2026-06-24T19:49:45.725564Z","times_seen":175,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/link.php","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /link.php HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 09:53:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.kkkcom.com/link/a.aspx?id=16nh\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYBvz0owTGUoc4VuOC%2FFCOUnlhj2Lg7FA3ninx5ZifrwgVz5cjxc16WFc7OTP2H6JXGFC%2FQV2zY30RIYBbu54KM1jJBtI%2F4Ovw%3D%3D\"}]}\r\ncf-ray: 994911399ab30b3d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T02:14:30.679539Z","times_seen":16696957,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c-hina.kkkcom.com/link/a.aspx?id=16nh","fqdn":"c-hina.kkkcom.com","domain":"kkkcom.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:34.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkcom.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 14:12:19 GMT","end":"Sat, 29 Nov 2025 15:05:35 GMT"},"fingerprint":{"sha1":"E4:EB:4F:54:CB:80:00:79:1B:0B:E4:46:83:EC:B3:8A:DC:B6:79:75","sha256":"CE:5B:7D:0C:19:6C:B1:AB:29:B1:60:5A:FE:CB:5A:C8:14:17:D3:86:B1:DF:AB:64:10:D9:D9:B6:A3:AD:03:DB"}}},"request":{"raw":"GET /link/a.aspx?id=16nh HTTP/1.1\r\nHost: c-hina.kkkcom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cc.16nh.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kU3GPYgs5xmxsGs8sWMZXcA2jcNlM1qpkPuZhjEuEm6dvBTS1PZw9mjS1AF%2Bc80k4fiTM%2FQziZjTpXVec49Pxh3cBX2dD8xiTiSQMvFRbw%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-xss-protection: 0\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: ASP.NET_SessionId=rlmfp2eddi1b5wcgyxu0fske; HttpOnly; SameSite=Lax; Path=/\nLink_LogIn_RndID=25102617533396; Path=/; Expires=Mon, 27 Oct 2025 09:53:33 GMT\nLink_LastInTime=2025%2f10%2f26+17%3a53%3a33; Path=/; Expires=Mon, 27 Oct 2025 09:53:33 GMT\nLink_StartLinkID=1360; Path=/; Expires=Mon, 27 Oct 2025 09:53:33 GMT\nLink_StartLogInID=4785043; Path=/; Expires=Mon, 27 Oct 2025 09:53:33 GMT\r\ncf-ray: 9949113dfb9056a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T02:14:30.679539Z","times_seen":16696957,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/js/jquery.min.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/html/style/js/jquery.min.js HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 16:55:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b87313-18382\"\r\nexpires: Sun, 26 Oct 2025 16:50:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 18212\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X9OHLigSDX1g1RqwY0UNSJC%2FTWpZ7%2FkKoquHyxnXFePnPXsGwFaIezqh%2BH36ia7wjYeIvqiH36kPYDF6Dm7A8FKR4FQftBw2O9EQ\"}]}\r\ncf-ray: 99491135a8755ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99202,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33412)","md5":"4b18a3f7f2f5a0c52c6269f408e48b6b","sha1":"c7b51b843e9808fac615e9d07048616a89ef50e2","sha256":"20823cafe0bbe3e2dc93843456e900499cca28f13de30259592522c1a65099cf","sha512":"4003e7dd76ab28518a7595bf2a0dd980c2e10b42ae5ed71b05c96a3ea5fbb0d45f0621dc1df1577704cbce22438538b4c607c655648df9daae8a292b64e810a5","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRxZIVI6xSb8xh2ZbQnRq:R+41ZqLTW8xRtqSb8qGH77da98Hrq","tlshash":"40a3e8d9b7d67162977730b840bf510bb07a98eab80c4ca0f064c8e57d78a99507bf2d","first_seen":"2025-10-13T15:35:55.719253Z","last_seen":"2026-06-20T13:45:12.639263Z","times_seen":9,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/js/bootstrap.min.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/html/style/js/bootstrap.min.js HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 08:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b7f85a-95f2\"\r\nexpires: Sun, 26 Oct 2025 16:50:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 18208\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJ0owcy3AY%2FPB62Ald%2BcctqOH3%2Ff4An3mDdB9fl2UPYyu%2FyFvkXzj2eFYM0E2DQc1LhNb2cuikKscMBILUv0wYKB0todaYXhkQ%3D%3D\"}]}\r\ncf-ray: 994911360a800b3d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38386,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32003)","md5":"e494d983af56862901ee924e235cb09e","sha1":"1591983ced1d09d518d97fba8a09f73bd0949b95","sha256":"f76b0a727dee16478b91093906023cd96114e5ae150d6058f224f1bbb1245019","sha512":"30e4848750e06d81b7dd17e67d0e832a324436276b52fb3e2ca622bea0bed716e4ac4c65a0b23c7b7205d28a709ffb22493f3c8c741a4d042688aa2bb3b3b297","ssdeep":"768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbAI:z/76whqKGvlm3ZXAI","tlshash":"36039606b23031a147efb1e1525f020a7239696ee906907c78b9dae53db9c48717bf3d","first_seen":"2025-10-13T22:27:33.183641Z","last_seen":"2026-06-20T13:45:12.410246Z","times_seen":8,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 26 Oct 2025 10:41:33 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KY5P9lZS8mp3AGMLlKvylj32hdmnBUtcAATrMCgWYlLXtegSXKA3gqCw3dLfaFFnrv%2F%2BWXqw2Ed82D%2BBFhDH2lBqJeyBBSM6uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncf-ray: 994911360a810b3d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-25T02:14:23.192268Z","times_seen":377696,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/static/js/home.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /static/js/home.js HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Aug 2021 10:34:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b90c0-95a6\"\r\nexpires: Sun, 26 Oct 2025 21:53:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbyRVCCyqAeKhivi1XsGSAVf3RYZuWX9CJ7yKvn11HX3DO4KeordDWzx4FE5xoBgOyt8CZhZLHfqgKOa009qdE5Q5EZgsIjpT2C5\"}]}\r\ncf-ray: 99491135a8865ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38310,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2677)","md5":"3cad1c3f471985362421b035fc3eb01f","sha1":"3e7ea64952a39a9e69c2619529204368206d69cb","sha256":"3fa6128ce756337d6fc107aa01507a7c9fc5f11c93d0a3f492513b770a6b9579","sha512":"4f201dcf17bdc9045bbbb807898f713f708ba2d542a21753f45d77c026250db685c9b2e744e0d79757ee6d5cd5226c9422444ef83bb37d0ca592bd526f427fdd","ssdeep":"768:hR0cTTu8eWbZLbhpa6a/b7z9SsbhbeA5gr9GiSo5E7Iw4TQv5:hRZXde36oRiG5","tlshash":"e203a55d7af3142050b3317a4fbf69082276815f190ddd88fe2d11a48fc4a4eba66bbd","first_seen":"2023-03-07T14:00:21Z","last_seen":"2026-06-24T19:49:45.80263Z","times_seen":568,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T09:53:31.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Gvs%2Bzoi2ezZCgC5NhXFdDvXWQrW9eJ8a164vXr6kYmYIIffQ5sTsOhHpACiJNb7JBJ1CfajAlPXqeQthpDGelnhyqNIAOPflAq%2B\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9949112f78795ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":50448,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (343), with CRLF, LF line terminators","md5":"8c8e8a4cf9fb35f52ff273524c262b1e","sha1":"1f494b9cebe5ed09150fbd1d4b036fb47ff9c55a","sha256":"f911edf215ea38e0c6f49a609791d4ca77e07904f6b60989547eaf9a51359c73","sha512":"158c0941b3dea79683b566dc9f8e1ef5ffd63f9238e36403b6305590a2b5c449c9cc520c4e63affc054d3886fc8cce33799f52f45cc5e7ebfa89a4c5910252fa","ssdeep":"768:U65Zs+wn+4aKP5REsPF+gE1YutSROi7Pvvz16rTYyHb0cx5cBv/NwpjYsU2GVX5o:U65Zs+wn+4aKhbEEvntr/8rcLKpQ4F","tlshash":"92331c3285f05a2601a2d5c2a6697f1dbdf29247dd5b0681b2ac07e5efc3ee1cd0364e","first_seen":"2025-10-26T09:54:01.602499Z","last_seen":"2025-10-26T09:54:01.602499Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1167,"timings":{"blocked":230,"dns":38,"connect":1,"send":0,"wait":707,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/css/style2.css","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/html/style/css/style2.css HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 15:00:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d164a3-a10b\"\r\nexpires: Sun, 26 Oct 2025 16:50:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 18212\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWyB8P2MJglS4JoMaXqhBpUg%2ByQQyYdYlI9kRSi7VAcSILYLwbCNJD%2Fc433fdF7wdtxXw9qtwVatHKGDPLF5I0rz9WLKvKMQzts%2F\"}]}\r\ncf-ray: 99491135a8675ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41227,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (625)","md5":"77b910f3e03ac0706d45a18d10caf9c1","sha1":"0b761ac71e5a9cf29a52567b18751212c0b53d1a","sha256":"c7ce774e87dc78c5357db76fa257b9a1e464fd04c6f391bf17e3116b051810e1","sha512":"6c169903013adff53ee373a065b68b2e9cfb2b63dd0dbf1ea2af012a20bd4efe7da0228b2bcdc6b13daa24cb2cc49093aae672d1292ccfd30b980d6375ac60a8","ssdeep":"768:YSpYRYV2kGiz84aOLo6w7TzkyavgfJU831P3zizKdoC:YRRiz84aOLon7TzkyavgfJUTzKdoC","tlshash":"980365335b963c4cb22a91f8dfd42b68561f1156bb0f4eeff9a03a5c928819404f399d","first_seen":"2025-10-26T09:54:01.603394Z","last_seen":"2025-10-26T09:54:01.603394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.souavzy.org/upload/vod/20251024-1/3d79af6124c4b4c997854bbf1152c260.png","fqdn":"img1.souavzy.org","domain":"souavzy.org","tld":"org"},"ip":{"addr":"104.161.25.242","port":443,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.souavzy.org","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Sat, 23 Aug 2025 09:59:59 GMT","end":"Sun, 23 Aug 2026 09:59:58 GMT"},"fingerprint":{"sha1":"2F:FE:8B:F6:36:E4:64:1E:29:4D:1D:05:67:3E:57:7E:55:EF:FD:C5","sha256":"4F:57:5B:21:48:1E:C4:02:A3:7F:4F:B1:EF:DA:C6:A4:9E:C9:F7:2E:86:1A:2A:EB:9C:92:EC:07:D7:5A:F8:BE"}}},"request":{"raw":"GET /upload/vod/20251024-1/3d79af6124c4b4c997854bbf1152c260.png HTTP/1.1\r\nHost: img1.souavzy.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/png\r\ndate: Fri, 24 Oct 2025 07:00:36 GMT\r\netag: W/\"68fb0f00-45c59\"\r\nexpires: Sun, 23 Nov 2025 07:00:36 GMT\r\nlast-modified: Fri, 24 Oct 2025 07:00:41 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":285785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 850 x 450, 8-bit/color RGBA, non-interlaced","md5":"7d9cf79eb0e4c50128f78c7885eb77cd","sha1":"6f468a2228e2a5df00e0b6c6621e709880bbe101","sha256":"091d4ab62597ea98bd40f2f3534357143b5c15fcc54fb4b0d5aee25f0990418e","sha512":"2f7ee384267ef629ab700f34842a11e4feb7ede8ec6d5d57339abc3d9749229a93f820f3c8d0eb2b906c545532dd9e21da561056608d7afea28efb6cbfdc9546","ssdeep":"6144:3Y+lwWL4S6EVhVgQJ2KLa7cWO6U1l6N/7fLhZ0Le:o+HL4KhVTJ2kaYTFeLhZge","tlshash":"c55422061c090461876233f65d161a0dc674788c701da2b9bcb99d8d6dfc3ecbe62bee","first_seen":"2025-10-26T09:54:01.604293Z","last_seen":"2025-10-26T09:54:01.604293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1686,"timings":{"blocked":402,"dns":0,"connect":0,"send":0,"wait":1284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/css/adssall.css","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/html/style/css/adssall.css HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Oct 2025 07:56:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f3482a-5a5\"\r\nexpires: Sun, 26 Oct 2025 16:49:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 18216\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eL0yk42b6YOIdQHuxfP9k4r%2FDclaXEHkMVoavURzpTe%2FDIoggf2rpivtDkfLOQHcct7jwOZmeYjbsfLAFto4bVciQBOzf0UHQnk5\"}]}\r\ncf-ray: 99491135a8595ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1445,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0927163599eb22c72c8eca3273120d0a","sha1":"6c4a9c4696aa057163f87ab304e0b179baa88944","sha256":"d03f03b12bd089fd3141a8c33c60dc0134ce065ac7b11c62783eaf89095d19b5","sha512":"dd0258f6e6b083003dbcabb380d553f067925eb09e5e0eeafbcb671f2ba5801f83bcec7a5a7931753aad3b1ec974531a2c5654828dd9a287450cbc99b0ea6bb6","ssdeep":"","tlshash":"6f313583bb261808e822f8559ff81b852316051b1f5f8ef6f5d07c2c8f09a940e71b8e","first_seen":"2025-10-26T09:54:01.605291Z","last_seen":"2025-10-26T09:54:01.605291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/css/img/glyphicons-halflings-regular.woff2","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/html/style/css/img/glyphicons-halflings-regular.woff2 HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/template/16nh/html/style/css/bootstrap.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 09:53:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18028\r\nlast-modified: Wed, 28 Nov 2018 14:27:38 GMT\r\netag: \"5bfea5da-466c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZ%2Fq5k9NexCmiuVwpNV5FlKnr%2F85Z12NQ14cI09h0tvrdAmh8il9th8RW3vHNJc6lGYyEQ4OPAtuDz%2B%2FyZStF9vIpCcezsqQNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99491139dab50b3d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18028,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18028, version 1.589","md5":"448c34a56d699c29117adc64c43affeb","sha1":"ca35b697d99cae4d1b60f2d60fcd37771987eb07","sha256":"fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c","sha512":"3811804f56ec3c82f0bef35de0a9250e546a1e357fb59e2784f610d638fec355a27b480e3f796243c0e3d3743be3eadda8f9064c2b5b49577e16b7e40efcdb83","ssdeep":"384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA","tlshash":"d082d0f4ea92999085b01c37d19acb48dc87b9cef5a4d01611e4e13eb5ff8ad684c6c8","first_seen":"2023-04-05T16:42:51Z","last_seen":"2026-06-25T01:35:44.77138Z","times_seen":48563,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":543,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/css/bootstrap.min.css","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/html/style/css/bootstrap.min.css HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 14:22:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d15b92-21503\"\r\nexpires: Sun, 26 Oct 2025 16:50:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 18212\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55tsESgQ6W2qSFfIjpnBwGBH1jMTW6lBWu5yu%2FY9KotFiV%2B82x7v29ZPw%2BgOkzV63JKddWmBSoTH%2FhoN3GDqeLXKuvvw5Ka8QU8n\"}]}\r\ncf-ray: 99491135a8635ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136451,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (493)","md5":"ea8eb12e1953fe514c27d28ca7406fc0","sha1":"69a7b649ba3c6fde34515ae2316007b9f61b8b2d","sha256":"9cc55857fd829f1d9dc963105d5f295b8c10ce1cdf6b37660b4f1a8ca536e52c","sha512":"97b74ba5d2a80425022a17d7357a24b418f4c1a0d0b6fa88fcda758c8675cf694847ff033e8a5cc2c48fca40bb5e4bba197787a4de9f6a4a2d0f723b21fbe4c0","ssdeep":"1536:h2FCcRjjLEBWU31SHfgyp70Zu1ey8in7u:h9cRjYrZS7X1ey8inS","tlshash":"83d3b664b61038c9721a91c87e94de82171e52d2ee5f4db7f12b3cac83885d506b3fda","first_seen":"2025-10-26T09:54:01.606778Z","last_seen":"2025-10-26T09:54:01.606778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/js/jquery.base.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/js/jquery.base.js HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 23:27:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b8cecc-1e23\"\r\nexpires: Sun, 26 Oct 2025 16:50:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 18212\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AIvDuMqZSmLMZLcCT3Xxgyn0OwgZ9xOywpbGdDXUpWdyfODF8ezqwnasFXb83vuigrCyQvn5JyPgqYbWraUlY1KQM5mCcqPv0f3r\"}]}\r\ncf-ray: 99491135a8845ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7715,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1507)","md5":"aad17cd60958b53c40e6edfdcbd14e35","sha1":"d568b297c8ae99bf997804eca0622403a17aad2c","sha256":"8429897b5c4b08f73f98a4473934a141a04d8211819e2428256c0be67989e400","sha512":"8888b1988c5bfd9044d9293309fea8100b191d8e3d0af3eca89a61992d75eb3c4027c003d25622225a7014161d4a4f13945f9e390a4e0bf4f73181e246b50dd4","ssdeep":"192:0OWMtuqzxkEMuFF9wr+4WNztsukQvjXFj261bwkkgevd7rI:HzxkMF1toQ39EHI","tlshash":"12f13059f616257591ff35bb1a6fa588303a14232a068801f83c84a41ff1f695e3bf7e","first_seen":"2025-08-08T05:54:55.592868Z","last_seen":"2026-06-20T13:45:12.637099Z","times_seen":46,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/css/exonav.css","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/html/style/css/exonav.css HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 28 Nov 2018 14:27:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5bfea5ee-f1a\"\r\nexpires: Sun, 26 Oct 2025 16:50:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 18208\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2SeBfLN6jPeg3nEikBZS1H%2FkwyEzFQgArYmaVo6qyU7wWFLdadRvqIaw%2FFThEtanGpDltVpDy2s7zPFGzC50btOsU%2Fz3H4ONPw%3D%3D\"}]}\r\ncf-ray: 994911360a7f0b3d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3866,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3863), with no line terminators","md5":"93c73603dcbd9c284f300f0b0ed95f2f","sha1":"e4d7d24daac235bc6e46331e6c814059f5deff38","sha256":"512e806d2e1eb3d820f578cde7b7f383c14af4d8575b4ebd2cb6ac9b7806927c","sha512":"49d4e0a3f78845b364d0c1afefe35d6e903c49131e7080194eb06d47959681e58549e7a6bb4c26e428bb72a50894bd580e20dc9d8ef828460777b9a25cfcd453","ssdeep":"","tlshash":"5a81d617d7da40b971742a6ab0755ee8962898fce6000ee45fce7b18634cec75b36233","first_seen":"2023-05-10T08:51:07Z","last_seen":"2026-06-24T21:27:13.927032Z","times_seen":37,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc.16nh.xyz/template/16nh/html/style/js/jquery.lazyload.min.js","fqdn":"cc.16nh.xyz","domain":"16nh.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:33.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16nh.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Sep 2025 06:57:54 GMT","end":"Wed, 17 Dec 2025 07:56:25 GMT"},"fingerprint":{"sha1":"6D:8D:05:F9:F6:DA:18:3B:64:0C:6E:37:9B:41:59:11:F6:17:7B:9A","sha256":"27:90:AD:FD:39:CF:FF:C9:72:BE:44:F2:92:00:CB:51:2F:99:7D:C3:69:5E:5B:A3:1E:34:93:81:A9:90:78:D5"}}},"request":{"raw":"GET /template/16nh/html/style/js/jquery.lazyload.min.js HTTP/1.1\r\nHost: cc.16nh.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cc.16nh.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 09:53:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 15:02:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b8589f-1323\"\r\nexpires: Sun, 26 Oct 2025 16:50:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 18207\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=68kSlOAPubSFpgAOZT35ajRuLUoIz4WvzVjSJbInYmI%2FpFhgRy%2F1MA0anPndiZyjJ3EJIYi6EN%2F1VhCfoz0ny9mgR8G%2BR899xQ%3D%3D\"}]}\r\ncf-ray: 994911360a7e0b3d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4899,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4810)","md5":"f3a60f2438362b0e02d1c4aed459eaec","sha1":"c68b40d7cc18813a483af504652234f6ca5a81e4","sha256":"d13b70343715b11e0247d30323b81b1efb7d0ae9f3fc47412d479b11f64925b2","sha512":"5704e65ab580c791a8688418988a2d1b35ddb977b3fd3df37615ad7c15dc76d6437abea35a4d62c529526872b9d6e617368664ce7f33810a487cfd1f805864b5","ssdeep":"96:jgJkXLLcc1JfDvupezu6a6+mD4YP2GOY/FrR26BHbwKlaxEkgVYMQd7xR1q:jgSbtJT1MoDV2GOYNrR261bwkkgevd78","tlshash":"ada1955a7f93383ab0693a9f431f7006653ad42b46558c54f08de8d49cecf960137faa","first_seen":"2025-10-08T22:30:40.66299Z","last_seen":"2026-06-20T13:45:12.478739Z","times_seen":75,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kkkcom.com/link/a.aspx?id=16nh","fqdn":"www.kkkcom.com","domain":"kkkcom.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cc.16nh.xyz/","date":"2025-10-26T09:53:34.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kkkcom.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 14:12:19 GMT","end":"Sat, 29 Nov 2025 15:05:35 GMT"},"fingerprint":{"sha1":"E4:EB:4F:54:CB:80:00:79:1B:0B:E4:46:83:EC:B3:8A:DC:B6:79:75","sha256":"CE:5B:7D:0C:19:6C:B1:AB:29:B1:60:5A:FE:CB:5A:C8:14:17:D3:86:B1:DF:AB:64:10:D9:D9:B6:A3:AD:03:DB"}}},"request":{"raw":"GET /link/a.aspx?id=16nh HTTP/1.1\r\nHost: www.kkkcom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cc.16nh.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 09:53:34 GMT\r\ncontent-length: 0\r\nlocation: https://c-hina.kkkcom.com/link/a.aspx?id=16nh\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B6CyEhenbHwXdTsMKspZzi0s7qgj1KG2jj4UlEpguoX9lzZXJprnWAtrO%2BSg2Y%2B%2BnWtjierOAGMHFIqaeQr6oPbjJ1z5w5NyJPEmpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9949113dab4d56a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T02:14:30.679539Z","times_seen":16696957,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":64,"dns":40,"connect":1,"send":0,"wait":5,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}