{"report_id":"8d988318-2d1e-4ab0-963d-4b1b34cd8236","version":6,"status":"done","tags":[],"date":"2026-01-25T04:45:14Z","url":{"schema":"https","addr":"www.gooerseowds-tordt.top/","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"165.154.227.246","port":0,"asn":142002,"as":"Scloud Pte Ltd","country":"Taiwan","country_code":"TW"},"final":{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/download/","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"title":"gooerseowds-tordt.top/download/","dom":{"size":3163,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7764c024475284b3eb951ca1ae52ddda","sha1":"0928e56cbd7b182045ea214e2e22ac2495e1a6b6","sha256":"ae62f6cde2e1598bc9843c600a87966fb19a171883e1a6249e63d1911fe36661","sha512":"45c058c36d746b696c381fc58a2799805cbe05396514e05a8eb3c408fc564918a21f85358e9f19f26f61a3c4874a255a96160dac7ade9418ee7c3b0a77b60aef","ssdeep":"","tlshash":"d951fda35b8d1492d70a21863e3137d5746fad23ad4f8cb7dda2a53cc1cd8140bab26c","dom_hash":"domhash7ea5a5b9b93356b7695b844c7d6ae2fe","first_seen":"2026-01-24T20:40:59.339041Z","last_seen":"2026-01-25T04:45:18.178699Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"165.154.227.246","port":0,"asn":142002,"as":"Scloud Pte Ltd","country":"Taiwan","country_code":"TW"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-01T04:45:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-25T04:44:53Z","timestamp":1769316293,"ip_dst":{"addr":"Client IP","port":48752,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"165.154.238.249","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"United States","country_code":"US"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 31","source":"{\"timestamp\":\"2026-01-25T04:44:53.491173+0000\",\"flow_id\":94642284859978,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"165.154.238.249\",\"src_port\":443,\"dest_ip\":\"172.18.0.32\",\"dest_port\":48752,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400030,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 31\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-01-25T04:44:53.397898+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gooerseowds-tordt.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-07-16","domain_rank":0,"first_seen":"2026-01-24T20:40:52.61598Z","last_seen":"2026-01-24T20:40:52.61598Z","alert_count":66,"request_count":33,"received_data":3489119,"sent_data":15681,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/5417.a34736349f6efd2e.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"a479567609756d6d74f31ed732ea6994","sha1":"4f027213bc42b38ccd24465c9818a6d1144c70c6","sha256":"2711bbdd268bbce33faca1db16e6a672c2c660f6bb24eb617b03019c9531c553","sha512":"88cb21eecc7b65dd97ed341d3ca8e71435146e100077f16b92e71df3acd2619cb7cbe263b397ca390ed431b86c4590c6867a012bce8ada9463d62c625a9d904e","ssdeep":"192:Dc4dCOPElx3eyZ4T5FgJDBk7oIj6Px/mYzVtZmCEoz9hvawyIijhPH2JZZak+Cpv:DbCOpT5SDBk7oIj65djz9hvar2J1","tlshash":"7e32d74d30e278ed2a9a0055007f5321623239d49d9a546cbbbcfce5aa5dd6cb03e7bc","size":11941,"data":"","first_seen":"2025-09-07T03:18:34.042634Z","last_seen":"2026-01-25T04:45:18.196275Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/7930.7127be5324d632df.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f01ab2dda00f9e71802a4f803890c1","sha1":"779157f5ee9866a8deae866b782680df0120d952","sha256":"61521c9a16c1b4731f8b57faba813dc351b505f5ee3877f5215603ac6e64ff35","sha512":"ed47644c691d4bcfbaad51a34ad521f7994e71211541fdb6f13aeca45d3c739fae589f9570f4e9862ff3b408a585b37e8693dc3ddd95b63b9bc7f4b74452254b","ssdeep":"384:kKDQhyv19nFf7znBVBOTNBdBAMHDNgNcGFGeiuOk4VAPBRt/Qq5jMfj8TDzTLNcJ:kKDQhydJFyJgTGeiuyVAzt/Qq5IbGWOq","tlshash":"54a2394cb4e3f06643a766b5503f252ee27b3dd4ae0744905b34e4867fb488da277e88","size":23008,"data":"","first_seen":"2026-01-24T20:40:59.358455Z","last_seen":"2026-01-25T04:45:18.19066Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/chunk-vendors.8710f5d8f432f3f3.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"165.154.238.249","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e909de34910fdaa198ac1d451118d7cb","sha1":"ffa1c4261590519b0c69e19db27ca07fff773099","sha256":"7509b7196c64b8f6d7685b831e7ddd537af2a48c597e72c19b43968ff472e076","sha512":"c7634fc1309618a937e1cbaad5c1e03c4cc43d523f3c81446395f223559db10290062620004c403a480fe52935c2e8e7e7fea405103429f05b7c5a38c9b043bf","ssdeep":"12288:/C95Aqrzt4AF0I5kIPpe91VGTmKIHTpdB:/Qbt4V4kIGVGKKIHTpL","tlshash":"cce42ac9358af463479211e5403f290af63e5b69680e8814f651f4dabcb8cad8277f7c","size":699354,"data":"","first_seen":"2025-09-07T03:18:34.088303Z","last_seen":"2026-01-25T04:45:18.20826Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/app.20081c9c4090f2a1.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a6798a10e3346758fafe00c33db5337","sha1":"c7cc35d4449ccde84b060756f8a80483f6c50fe7","sha256":"d3aab8ea4501c3d91c6942c63868744fde8f5e81dd54fdbb8fa4a83f71b60694","sha512":"808d5d7bd3e8303b09e3615f34a58285ef7e1fb8069fbdd638698bfc1cfab560353db4eaf4628aafcd23be5922c332252262b4338be1e2b3c94648f21d604f1b","ssdeep":"49152:ZOUayAPiC9TxtErzibpzrxzScXGHqXJR0:4r9FtErGPGTHqXJ+","tlshash":"68959f7b23c69af814460b46a29b31885169ee57f753fcf044ed952812ecbcbc112ef6","size":1913153,"data":"","first_seen":"2026-01-24T20:40:59.365524Z","last_seen":"2026-01-25T04:45:18.209087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/9546.cadec0f5eeb35d16.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"165.154.238.249","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5658e1eafa8701100bf46f15a3921ea2","sha1":"4c13f8cccf1f192d0a1005a85104608dd5cd96fd","sha256":"43d098b4b09f363f9b1eabab4f7c9ccc27f19178f4abba07b2c321ffcd32955c","sha512":"52f652687dc3748e934dbd6cad9bee7f95f3655c33f05ed87d172eb3d89642fbe02141dffa85d974585025b382bccb6943635ed6569c0fc5ab799ddd56d9c444","ssdeep":"192:Z5MiPfVgwgtk0XydrAfF+uLTppDL+ZAbpT3vfWiFGN:cKJgLXZd+uLTPDL8otFGN","tlshash":"8132750671c03422978ba195801f1716503b3589ba1ac5dcb679ecf99e687bcb02ff7d","size":11113,"data":"","first_seen":"2025-09-07T03:18:34.050577Z","last_seen":"2026-01-25T04:45:18.205984Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/1441.d0d232185c405131.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3c21897f3e0045522ee8c3942d829a9","sha1":"1536eca7b842d39c3757c4aee0735d4bfbb6eb17","sha256":"c47b323e94eefced9b43cb99fbc13471ba84a9873ea8089b4c11f1207155f647","sha512":"18ba2964db66013ed56431b91131386157cfa1204758d15c65915a9a646bc2155257e216ab151f0a993a02c8311ef5ad53a4950952cf002867ee9a884d5265e9","ssdeep":"192:RCK+9gUlWEwfVqNSONEd+QFCj5eMc+i53Pi:0K+9rlW1fVOSOWd+Qs/i53q","tlshash":"9e22d789b2c2f821175321e5a09f1102d35a765cb42b848df579e8d12f6df8c62baf3d","size":10441,"data":"","first_seen":"2025-09-07T03:18:34.021455Z","last_seen":"2026-01-25T04:45:18.189441Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/5965.b09b27cf82658e59.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e4c24c97adef3beee8b01045fdabd60","sha1":"685eb65a527f77415b458a5dd486d716aa339c6e","sha256":"f0d613919e3f9add9b6bb364ce51342e2b87e94fa2881e5e5b19e3728d2770e6","sha512":"372cda6cee45504e1e0b7d3d1d9c6e88175ffd14b82f99430b9b5e07d02a583fa40f68e766c8aba7e8e11bdb894f65eee00de61f8c363cb724b80586c68df157","ssdeep":"192:hzlz0accq89UirsI1TXi7Gbzvawr2Og5+GhEk/k4xiIt:hzlzbcV89UirFTXi7Uvaa2Z5OyxiIt","tlshash":"8e42728ab1d7f5095783e068042f0505a12e1d89b85f899dfabec9c3ed3498d9237f78","size":12477,"data":"","first_seen":"2025-09-07T03:18:34.07308Z","last_seen":"2026-01-25T04:45:18.206686Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/7312.871c256084ba0de1.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef0bfb352bcce68e45d92829f9735aa8","sha1":"f4023c210f5198a67efc57ef90cf87e4a5b978f9","sha256":"bf94bb292e9a0f1d5c9a45e1233942089abac273fdda5f8e3bc93bed56b44b2e","sha512":"c74bf1fd889818472c33f6cd0bae24548076e2ca5e21d806936cb682ff51c4b17945b9f133f442a4747b69c0ffb51a990dad359a255c8d6cfd107442547b7c03","ssdeep":"384:w9rQAThSjbmYMopZOfJuQxCfOHXX7NgzLnXURg1Nnd5XXQ7sO8j:3ATMnmYM++uQxCmbKzbU21Nnd5HQ7s9j","tlshash":"e8921bcd72c0f1a206d792b6409f100e7137d928514e9410b6a5eaee2d39c7da33be3d","size":20189,"data":"","first_seen":"2025-09-07T03:18:34.03068Z","last_seen":"2026-01-25T04:45:18.20749Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/Home.10f4f390310380dd.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.051Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wap/js/Home.10f4f390310380dd.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/api/syspara!getSyspara.action?code=customer_service_url","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.057Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntissuePaper: 1769316302\r\nsign: 483667862541A8E25BE602C41C22C17A\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/favicon.ico","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gooerseowds-tordt.top/download/","date":"2026-01-25T04:45:06.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:07 GMT\r\nContent-Type: image/x-icon;charset=UTF-8\r\nContent-Length: 180638\r\nConnection: keep-alive\r\nETag: W/\"180638-1737108703000\"\r\nLast-Modified: Fri, 17 Jan 2025 10:11:43 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: EXPIRED\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":180638,"size_decoded":0,"mime_type":"image/x-icon; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 256x-85, 32 bits/pixel","md5":"57861cbc7ce41471724ed7f1bce9c164","sha1":"3b8f2f51e5fb9d34b2183ed03bf40189c494ac5a","sha256":"8531ecd04fefd29adc1c4eb9f0a329df9fa157a13490e0431b99c4ae8eea13dd","sha512":"23e264bfc8986c82a9e3d2d7655f5c8ebe47a904012b43da82006751b6dc98412f697b24774cf5c2347206108885f3087c0b7aa893e104bfccebb23530d54cb0","ssdeep":"1536:zlIK5ZHr2AWtemzPur9b7vyCuAG8fcB83xFV9YSFtqRoFFJywvI9rGFfkhf:5P3jfqJQlmx","tlshash":"d904ddd385940660f9991f3462351d6942bfbfaabc3cf28eec09f86267b72c26035547","first_seen":"2025-09-07T03:18:34.023287Z","last_seen":"2026-01-25T04:45:18.183933Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2185,"timings":{"blocked":0,"dns":1,"connect":94,"send":0,"wait":1466,"receive":431,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/chunk-vendors.8710f5d8f432f3f3.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"165.154.238.249","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:44:54.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/chunk-vendors.8710f5d8f432f3f3.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:44:55 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"699357-1756198827000\"\r\nLast-Modified: Tue, 26 Aug 2025 09:00:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":699357,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11355)","md5":"0a0e2067b1e6743d9b588fea56334278","sha1":"bdf0a01f88b898dc95bb272f23e7bbee877865a4","sha256":"b1ba9f88af2876f0f9660321af4ecbfe10ad5d75d75f776813070c6031f80385","sha512":"48702299e135a6cd1c9dacf6900b9b3546039e58d5dd79368cbe91d34d14c6c0ebd21af6badd3d69b3c9dff078e3bbe0b5486903c8cd5b33da1027e22804891e","ssdeep":"12288:/C95AXrzt4AF0I5kIPpe91VGTmKIHTpdB:/Qct4V4kIGVGKKIHTpL","tlshash":"94e42ac93586f462479211f5403f290af63e5b69680e8814f695f4dabcb8cad8237f7c","first_seen":"2026-01-24T20:40:59.355771Z","last_seen":"2026-01-25T04:45:18.187194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1686,"receive":2051,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/favicon.ico","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:44:58.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/favicon.ico HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:44:59 GMT\r\nContent-Type: image/x-icon;charset=UTF-8\r\nContent-Length: 180638\r\nConnection: keep-alive\r\nETag: W/\"180638-1737108703000\"\r\nLast-Modified: Fri, 17 Jan 2025 10:11:43 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: EXPIRED\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":180638,"size_decoded":0,"mime_type":"image/x-icon; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 256x-85, 32 bits/pixel","md5":"57861cbc7ce41471724ed7f1bce9c164","sha1":"3b8f2f51e5fb9d34b2183ed03bf40189c494ac5a","sha256":"8531ecd04fefd29adc1c4eb9f0a329df9fa157a13490e0431b99c4ae8eea13dd","sha512":"23e264bfc8986c82a9e3d2d7655f5c8ebe47a904012b43da82006751b6dc98412f697b24774cf5c2347206108885f3087c0b7aa893e104bfccebb23530d54cb0","ssdeep":"1536:zlIK5ZHr2AWtemzPur9b7vyCuAG8fcB83xFV9YSFtqRoFFJywvI9rGFfkhf:5P3jfqJQlmx","tlshash":"d904ddd385940660f9991f3462351d6942bfbfaabc3cf28eec09f86267b72c26035547","first_seen":"2025-09-07T03:18:34.023287Z","last_seen":"2026-01-25T04:45:18.183933Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1885,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1465,"receive":420,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/1441.d0d232185c405131.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/1441.d0d232185c405131.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:02 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"10441-1756198827000\"\r\nLast-Modified: Tue, 26 Aug 2025 09:00:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10441,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10441), with no line terminators","md5":"b3c21897f3e0045522ee8c3942d829a9","sha1":"1536eca7b842d39c3757c4aee0735d4bfbb6eb17","sha256":"c47b323e94eefced9b43cb99fbc13471ba84a9873ea8089b4c11f1207155f647","sha512":"18ba2964db66013ed56431b91131386157cfa1204758d15c65915a9a646bc2155257e216ab151f0a993a02c8311ef5ad53a4950952cf002867ee9a884d5265e9","ssdeep":"192:RCK+9gUlWEwfVqNSONEd+QFCj5eMc+i53Pi:0K+9rlW1fVOSOWd+Qs/i53q","tlshash":"9e22d789b2c2f821175321e5a09f1102d35a765cb42b848df579e8d12f6df8c62baf3d","first_seen":"2025-09-07T03:18:34.021455Z","last_seen":"2026-01-25T04:45:18.189441Z","times_seen":3,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/7930.7127be5324d632df.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/7930.7127be5324d632df.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:03 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"23008-1764836818000\"\r\nLast-Modified: Thu, 04 Dec 2025 08:26:58 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23008,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22983), with no line terminators","md5":"d2f01ab2dda00f9e71802a4f803890c1","sha1":"779157f5ee9866a8deae866b782680df0120d952","sha256":"61521c9a16c1b4731f8b57faba813dc351b505f5ee3877f5215603ac6e64ff35","sha512":"ed47644c691d4bcfbaad51a34ad521f7994e71211541fdb6f13aeca45d3c739fae589f9570f4e9862ff3b408a585b37e8693dc3ddd95b63b9bc7f4b74452254b","ssdeep":"384:kKDQhyv19nFf7znBVBOTNBdBAMHDNgNcGFGeiuOk4VAPBRt/Qq5jMfj8TDzTLNcJ:kKDQhydJFyJgTGeiuyVAzt/Qq5IbGWOq","tlshash":"54a2394cb4e3f06643a766b5503f252ee27b3dd4ae0744905b34e4867fb488da277e88","first_seen":"2026-01-24T20:40:59.358455Z","last_seen":"2026-01-25T04:45:18.19066Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1670,"timings":{"blocked":280,"dns":1,"connect":94,"send":0,"wait":1096,"receive":1,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/1910.b1e49271f6ed2b95.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/1910.b1e49271f6ed2b95.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":824,"timings":{"blocked":824,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/7881.685e12689123343d.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/7881.685e12689123343d.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":1366,"timings":{"blocked":1366,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/css/519.ff46d106.css","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/css/519.ff46d106.css HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":1678,"timings":{"blocked":1678,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/css/app.4906825b.css","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:44:54.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/css/app.4906825b.css HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:44:55 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"110310-1756198827000\"\r\nLast-Modified: Tue, 26 Aug 2025 09:00:27 GMT\r\nContent-Encoding: br\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110310,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"4c26bb4ea85484e774c7e70e1fa28295","sha1":"6400ddbe44edaae8316a4b254481dd750377f7f4","sha256":"14a992da7f510d4a0962be24d434124c632907d9df47308143204fcdf0661212","sha512":"90e65cb8cf6ba652ab44d1ec17806a32066b2ecde9ff78e7d71bbdb75c9b9719a7bf6699b87a50e2fd9072f3b558f25011be362c291bc70ca11a837a057f5c2e","ssdeep":"768:+S7XDfLP+HzL8sNGLFOdZhLr3V09eE2TptAmxGHRvGs4oxfzEvAGfZ6nGIcRVLN:+S7XDfxLFUhLr3V6eRTpl4zEvAGh5","tlshash":"76b3a1af3dfe20888577ce6ac0796be81914ff1e52a690cfd9472921cdc368a3c1d195","first_seen":"2025-09-07T03:18:34.019305Z","last_seen":"2026-01-25T04:45:18.193505Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1524,"timings":{"blocked":284,"dns":1,"connect":94,"send":0,"wait":950,"receive":1,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/api/exchangerateuserconfig!get.action","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.052Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wap/api/exchangerateuserconfig!get.action HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nsign: 483667862541A8E25BE602C41C22C17A\r\ntissuePaper: 1769316302\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/download","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T04:45:04.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /download HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 25 Jan 2026 04:45:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: https://www.gooerseowds-tordt.top/download/\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3191,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":1423,"timings":{"blocked":286,"dns":2,"connect":93,"send":0,"wait":844,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/download/","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T04:45:05.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /download/ HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gooerseowds-tordt.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:06 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"3191-1741165811000\"\r\nLast-Modified: Wed, 05 Mar 2025 09:10:11 GMT\r\nContent-Encoding: br\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3191,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"47b6b80efdfa9791921fea317af4f97a","sha1":"d85fffa9f8192847588df139608565bed0849bb3","sha256":"a5fd93b53a3af3f008cfb2c6e69ccd660b0fd7ac0d047dd25f8df630f28b1fdd","sha512":"22d2bb0a8097ad0203b94ab3665e64372f25305e3f427f783b6161f5b90bcf2e16b1a7539841675781cc376e72863916d34903ee278d15a846d7af57c21479dd","ssdeep":"","tlshash":"5361fda25b4d2492c30931863e3037d5706fad23ad4b8cb78da2a53cc5cd81447ab2ad","first_seen":"2025-09-07T03:18:34.067487Z","last_seen":"2026-01-25T04:45:18.195304Z","times_seen":3,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":894,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/5417.a34736349f6efd2e.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/5417.a34736349f6efd2e.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:03 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"11941-1756198827000\"\r\nLast-Modified: Tue, 26 Aug 2025 09:00:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11941,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11879), with no line terminators","md5":"a479567609756d6d74f31ed732ea6994","sha1":"4f027213bc42b38ccd24465c9818a6d1144c70c6","sha256":"2711bbdd268bbce33faca1db16e6a672c2c660f6bb24eb617b03019c9531c553","sha512":"88cb21eecc7b65dd97ed341d3ca8e71435146e100077f16b92e71df3acd2619cb7cbe263b397ca390ed431b86c4590c6867a012bce8ada9463d62c625a9d904e","ssdeep":"192:Dc4dCOPElx3eyZ4T5FgJDBk7oIj6Px/mYzVtZmCEoz9hvawyIijhPH2JZZak+Cpv:DbCOpT5SDBk7oIj65djz9hvar2J1","tlshash":"7e32d74d30e278ed2a9a0055007f5321623239d49d9a546cbbbcfce5aa5dd6cb03e7bc","first_seen":"2025-09-07T03:18:34.042634Z","last_seen":"2026-01-25T04:45:18.196275Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1459,"timings":{"blocked":276,"dns":1,"connect":92,"send":0,"wait":895,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/css/Home.79f13a7b.css","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.050Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wap/css/Home.79f13a7b.css HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"165.154.238.249","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T04:44:52.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:44:54 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1101-1766558236000\"\r\nLast-Modified: Wed, 24 Dec 2025 06:37:16 GMT\r\nContent-Encoding: br\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1101,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1101), with no line terminators","md5":"4c25f56165a6d999519a357ee9887dd2","sha1":"bb8b2cb9bc8688e855c513edfa6ec2b36cbddf1d","sha256":"816228ee64c7a2de5e99776134c738041c03891a75c4232946b656158904a441","sha512":"7735eda4dad00b2a3fcf05a84464f8f3bdef74e7dbc507755ec29b51ebfafc83b3dc63849f5ecf397afdcb0aaeb198b876f04d77991223a02026ebc229f4151c","ssdeep":"","tlshash":"6b11ddc2cc11944d67215a5ded62b23dc9856c2cca81ecd0b4e451fe08e1fe488a7626","first_seen":"2026-01-24T20:40:59.351349Z","last_seen":"2026-01-25T04:45:18.197092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2853,"timings":{"blocked":980,"dns":698,"connect":94,"send":0,"wait":887,"receive":1,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/app.20081c9c4090f2a1.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:44:54.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/app.20081c9c4090f2a1.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:44:56 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"1913153-1766558236000\"\r\nLast-Modified: Wed, 24 Dec 2025 06:37:16 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1913153,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36806)","md5":"a14637622647bfe990046b66860a426b","sha1":"c9ef599d7b0332f7a588ce05b6db82bc2e6c4030","sha256":"ca4ca3fd31f38a3ff6361d9b9f31829d387a056aab13949bec850d6d9a4c4c31","sha512":"2b190f0a5556779796afdf39ee0b75b2d9c074978a97e59d59c8c33e5bc535cbf94ac5b843c40c2d7344d465ce1e24c2b336d5b5d74916624ec08fced01277e7","ssdeep":"24576:ZOUayiKuPi50wU9TtEwDt9Atc8zuVpzrY85z6vcXQwKN:ZOUayAPiC9TxtErz2pzrxzScXGN","tlshash":"1c853a1ea2c3c3a85ac231e12d4677e52335cac5e79bbcef4779c09021fdbd990459a2","first_seen":"2026-01-24T20:40:59.353079Z","last_seen":"2026-01-25T04:45:18.198487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7279,"timings":{"blocked":282,"dns":0,"connect":92,"send":0,"wait":1420,"receive":5294,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/css/9701.c9d1ea50.css","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/css/9701.c9d1ea50.css HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:03 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"31948-1756198827000\"\r\nLast-Modified: Tue, 26 Aug 2025 09:00:27 GMT\r\nContent-Encoding: br\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31948,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (31948), with no line terminators","md5":"569d7e0cd9f35953fa20ec1840d79fdd","sha1":"c5e7dccf882e4ff86b6b96652771d3045f7bcad0","sha256":"a565e25cd14bcbcff8061612e53cc3eb289679ed26273bc83273037e19d03885","sha512":"3f345cc523ca7c0a5016fe109dd85b896b70eb7150e26d33da7e75b67d43df3c7d441841260f105dda2d1e40409d8f32a7680b1bf70158223ecdd2d70962c08b","ssdeep":"192:dCQj653sw1D9omt5o2E8qS8jFb3F/ehxdjTBXu1gfDZLe1El:wQWRQ1S8ppehHZu1mJe1o","tlshash":"19e248b2b4cc4a487977d87a1261ebb8563c7352c3001faadd6ab3781e462db3513b07","first_seen":"2025-09-07T03:18:34.074871Z","last_seen":"2026-01-25T04:45:18.199786Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1701,"timings":{"blocked":841,"dns":0,"connect":0,"send":0,"wait":860,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/css/7881.c0ea827a.css","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/css/7881.c0ea827a.css HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":1159,"timings":{"blocked":1159,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/download/assets/phone.png","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gooerseowds-tordt.top/download/","date":"2026-01-25T04:45:06.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /download/assets/phone.png HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 148351\r\nConnection: keep-alive\r\nETag: W/\"148351-1741165811000\"\r\nLast-Modified: Wed, 05 Mar 2025 09:10:11 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: EXPIRED\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":148351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 536 x 654, 8-bit/color RGBA, non-interlaced","md5":"c1fd6f3ebb1b8c507a37fb082e729853","sha1":"3fb73e224007bff673cf67210c05f71e06ccf3ae","sha256":"eb2d386c872c7034e3491107ae0f12a6fcf2a47dcfd4a56d0d3219af198f02d0","sha512":"0af7ad2c3dd9b4465a48c628ad2a0fa38743f9bf86be6226af5be62fe1c3f645f48e9cff290445505ab69421c0ebd36faf57549cec4949ed85ef6220547c9ff8","ssdeep":"3072:N6JvDWatYYujBLWL5yOp9vBiLiX+RcNgGxjzcnhgjovN6tj:NKvDWPtioOp9v8a++NvJo6jovwj","tlshash":"dae312472a794324e3e1fee1dd692868033d7ca97267251a36281d95acf073188f8b74","first_seen":"2025-09-07T03:18:34.069116Z","last_seen":"2026-01-25T04:45:18.200549Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2227,"timings":{"blocked":280,"dns":2,"connect":92,"send":0,"wait":1439,"receive":224,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/9701.e50acb585e0bae54.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/9701.e50acb585e0bae54.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":1068,"timings":{"blocked":1068,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/download/assets/logo.png","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gooerseowds-tordt.top/download/","date":"2026-01-25T04:45:06.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /download/assets/logo.png HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 3418\r\nConnection: keep-alive\r\nETag: W/\"3418-1741165811000\"\r\nLast-Modified: Wed, 05 Mar 2025 09:10:11 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: EXPIRED\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"0fe44e99cc99fe1abf218c86bc4c4501","sha1":"56f1cc79270e2295fba9c3727114f7cd03e5dcda","sha256":"feb5d4d7d0683b3957de38eaf7760e6a97cb6bccb01cdc36a42d28ffdd49ee0f","sha512":"0efc12765fec2a692a4e38738b5a76ac5195e6ddc166186747b90b27cf1780616da0a4d511ddca0b6f09e53b6d6530619ae490f4cb9295a641c8fb7d8d443d6a","ssdeep":"","tlshash":"48615ce019eebe3d5288c22a032c9881735e424dab911b47c4b7933f5afd6785096fd3","first_seen":"2025-09-07T03:18:34.035785Z","last_seen":"2026-01-25T04:45:18.201297Z","times_seen":3,"resource_available":false,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":909,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/download/assets/apple.png","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gooerseowds-tordt.top/download/","date":"2026-01-25T04:45:06.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /download/assets/apple.png HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 4627\r\nConnection: keep-alive\r\nETag: W/\"4627-1741165811000\"\r\nLast-Modified: Wed, 05 Mar 2025 09:10:11 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: EXPIRED\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 284 x 90, 8-bit/color RGBA, non-interlaced","md5":"79449e25f3f9b11f16c6d1aecb8f490f","sha1":"a4f242ed7fff47dc6668dd54e1dc245ec7d6db00","sha256":"902361288dede76f8d1a2515ecb45db0696e62776854e930505ec3c30b1a91a4","sha512":"69ab72f28f938a831ffd3473ae309577d94bed47887acdc1f2a3efb3460bc7bae216c37aea2c19d850ab8e3db5f5ce1a628df999fc60d31db2e546430d549c2a","ssdeep":"96:N3sEEzVBtK/jLCHEIP7xDYcEBpmcshxGbDzm1menQrHQ7yXEiyjMP1Jv:NjEzVBtqqEEFUcEbD0mqQrHQGELA","tlshash":"aba17d97230f6811cf9ae887fa19696c05aee2125a0e747dbd3170b65390a78e81747c","first_seen":"2025-09-07T03:18:34.051964Z","last_seen":"2026-01-25T04:45:18.202028Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1427,"timings":{"blocked":281,"dns":1,"connect":94,"send":0,"wait":859,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/download/assets/google.png","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gooerseowds-tordt.top/download/","date":"2026-01-25T04:45:06.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /download/assets/google.png HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 6640\r\nConnection: keep-alive\r\nETag: W/\"6640-1741165811000\"\r\nLast-Modified: Wed, 05 Mar 2025 09:10:11 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: EXPIRED\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 284 x 90, 8-bit/color RGBA, non-interlaced","md5":"779a904d28e45a7aa806ab5a0f094e43","sha1":"874407a6a8365bd5daf945b1136c411c48d4ba4f","sha256":"6d50241d8451a926df558602b9614cd65e110ef949c30fe3aad492752a4e5544","sha512":"3a6d91a8282462811904f1efdac78d217111ad968e03dcae70fa96046e94b2e35258955dda706e41bbfdda28601f60ed1145b826826346acb292497675f78c8f","ssdeep":"192:rc/7sjr3CgtuvYd2ivQlKDYtAK1qx56MNXdM8MF/8:rczsXPt2Yd2MQlKDYtc3aE","tlshash":"efd19ea1f41988f64b1e4e2bf6c3c99213ed7d2de0325b5685644ec1202e8c9a2a344f","first_seen":"2025-09-07T03:18:34.037751Z","last_seen":"2026-01-25T04:45:18.202724Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1456,"timings":{"blocked":288,"dns":1,"connect":94,"send":0,"wait":877,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/css/1910.9f855538.css","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/css/1910.9f855538.css HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:03 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"21018-1756198827000\"\r\nLast-Modified: Tue, 26 Aug 2025 09:00:27 GMT\r\nContent-Encoding: br\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21018,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (21018), with no line terminators","md5":"96760c3f565981e0e10d1d13ac203fc2","sha1":"30001a8bf664db74aa788f56623a748ee36c032b","sha256":"fdce820d8928f9b6e18b2842b2ad796c44c9e57f4634ee44895a768b4e5de394","sha512":"2c04bff4a16bc277f7c7f4aa01c89c758de92e9efb6da6cb33e0432e881221fcab552b0cab6395a0cc8f514c4d200cd01b6d76eae8c6884e648874091ee43a43","ssdeep":"192:OcCU+4bKRDc2hOzTOhCcPtWQfZSdA679N3DlD9tg6Wl8ZsoBDX6jXfg3CdMf9oxT:pXbKRgUOPOhCcPtWcA1qvdIduV9tlB","tlshash":"5992b122f5cc4908b93bdcba5670d765562cb392d3000b2bfe6ab2b45f431e72253b56","first_seen":"2025-09-07T03:18:34.043927Z","last_seen":"2026-01-25T04:45:18.203461Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1687,"timings":{"blocked":819,"dns":0,"connect":0,"send":0,"wait":868,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/css/chunk-vendors.148c7aab.css","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:44:54.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/css/chunk-vendors.148c7aab.css HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:44:56 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69114-1747904928000\"\r\nLast-Modified: Thu, 22 May 2025 09:08:48 GMT\r\nContent-Encoding: br\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69114,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0e5bad7d70f4ae630e3d3ef004528379","sha1":"f825e2e4209b3e461ae8e90f919c27da3f55d600","sha256":"7e00263714257c4d265bdb7f6ddf357fe5785f21407ba4120655b396bc432188","sha512":"7a5cc6c494e780ad5da3a6ab4196f332b41da4f8555a23316167fc8599a8d3819b0b6f1945d04bd348a53b11a04f565ccdd82456dd10b5dcf9c664792a960d44","ssdeep":"1536:PaQbFNJ+jqkiHc4rx3WqyrtpqoSWEDZI1j/Vvp:PFrxmNH9yDAn","tlshash":"7e631ab688c412ec732bc9119bc4f6d8e1a4f022d9a10dd9f10a561d8fdbb561296f3f","first_seen":"2024-08-20T02:34:44.553762Z","last_seen":"2026-07-10T16:27:49.382909Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1773,"timings":{"blocked":290,"dns":2,"connect":95,"send":0,"wait":1187,"receive":1,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/img/App.png","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:44:58.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /img/App.png HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:44:59 GMT\r\nContent-Type: image/png;charset=UTF-8\r\nContent-Length: 8904\r\nConnection: keep-alive\r\nETag: W/\"8904-1737108703000\"\r\nLast-Modified: Fri, 17 Jan 2025 10:11:43 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: EXPIRED\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8904,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 340x338, components 3","md5":"ba6bee5011becdd9e1d14629603cea32","sha1":"f6a5422a1f7f433f1617bd956b9b38c86cf78594","sha256":"06d5c63419c3b4ed796c1a0431a4af0eb15388c7311f7520f8b2b6d880b3aa31","sha512":"0ade6773b0af677fb9a3ceb0918e4ed44e93f96cda10d265ced4adfe727e42fc20fac5cf349b4998dce697bc5f58dff72420bf4ea79e447e2c285d49920a0dcf","ssdeep":"96:J5PWE+dw9AIlS+WAhcFp2JD7xEazuGEsFs27xrIrePIc9ov3MtBvFJ2/mwWUGv/L:eIFU4eT2JDVEEuGs0F3ItGvF8PU5cE","tlshash":"d7027d2a6b447bd3ee5bc3fcde1e1ae91f070d0671a03bb32542e74539199890ab5c68","first_seen":"2025-09-07T03:18:34.025142Z","last_seen":"2026-01-25T04:45:18.205218Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1916,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1916,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/9546.cadec0f5eeb35d16.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"165.154.238.249","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/9546.cadec0f5eeb35d16.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:02 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"11113-1756198827000\"\r\nLast-Modified: Tue, 26 Aug 2025 09:00:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11113,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11113), with no line terminators","md5":"5658e1eafa8701100bf46f15a3921ea2","sha1":"4c13f8cccf1f192d0a1005a85104608dd5cd96fd","sha256":"43d098b4b09f363f9b1eabab4f7c9ccc27f19178f4abba07b2c321ffcd32955c","sha512":"52f652687dc3748e934dbd6cad9bee7f95f3655c33f05ed87d172eb3d89642fbe02141dffa85d974585025b382bccb6943635ed6569c0fc5ab799ddd56d9c444","ssdeep":"192:Z5MiPfVgwgtk0XydrAfF+uLTppDL+ZAbpT3vfWiFGN:cKJgLXZd+uLTPDL8otFGN","tlshash":"8132750671c03422978ba195801f1716503b3589ba1ac5dcb679ecf99e687bcb02ff7d","first_seen":"2025-09-07T03:18:34.050577Z","last_seen":"2026-01-25T04:45:18.205984Z","times_seen":3,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":857,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/5965.b09b27cf82658e59.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/5965.b09b27cf82658e59.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:02 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"12477-1756198827000\"\r\nLast-Modified: Tue, 26 Aug 2025 09:00:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12477,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12459), with no line terminators","md5":"3e4c24c97adef3beee8b01045fdabd60","sha1":"685eb65a527f77415b458a5dd486d716aa339c6e","sha256":"f0d613919e3f9add9b6bb364ce51342e2b87e94fa2881e5e5b19e3728d2770e6","sha512":"372cda6cee45504e1e0b7d3d1d9c6e88175ffd14b82f99430b9b5e07d02a583fa40f68e766c8aba7e8e11bdb894f65eee00de61f8c363cb724b80586c68df157","ssdeep":"192:hzlz0accq89UirsI1TXi7Gbzvawr2Og5+GhEk/k4xiIt:hzlzbcV89UirFTXi7Uvaa2Z5OyxiIt","tlshash":"8e42728ab1d7f5095783e068042f0505a12e1d89b85f899dfabec9c3ed3498d9237f78","first_seen":"2025-09-07T03:18:34.07308Z","last_seen":"2026-01-25T04:45:18.206686Z","times_seen":4,"resource_available":true,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/519.fb55ce1f87b5ff5e.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/519.fb55ce1f87b5ff5e.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":1694,"timings":{"blocked":1694,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/js/7312.871c256084ba0de1.js","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"154.198.163.251","port":443,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.gooerseowds-tordt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:58:29 GMT","end":"Tue, 14 Apr 2026 09:58:28 GMT"},"fingerprint":{"sha1":"3C:B1:8D:6A:97:FC:8A:AB:98:37:D7:23:DA:8C:8C:6F:A9:09:37:48","sha256":"31:3C:21:64:4E:A3:B6:0B:7A:CE:95:FC:51:FE:93:CD:FB:C6:3B:EA:99:68:14:A8:68:BD:5A:4F:76:7A:3A:97"}}},"request":{"raw":"GET /wap/js/7312.871c256084ba0de1.js HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Sun, 25 Jan 2026 04:45:03 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"20189-1756198827000\"\r\nLast-Modified: Tue, 26 Aug 2025 09:00:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nServer: node\r\nStrict-Transport-Security: max-age=31536000;\r\nX-Cache-Status: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20189,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20189), with no line terminators","md5":"ef0bfb352bcce68e45d92829f9735aa8","sha1":"f4023c210f5198a67efc57ef90cf87e4a5b978f9","sha256":"bf94bb292e9a0f1d5c9a45e1233942089abac273fdda5f8e3bc93bed56b44b2e","sha512":"c74bf1fd889818472c33f6cd0bae24548076e2ca5e21d806936cb682ff51c4b17945b9f133f442a4747b69c0ffb51a990dad359a255c8d6cfd107442547b7c03","ssdeep":"384:w9rQAThSjbmYMopZOfJuQxCfOHXX7NgzLnXURg1Nnd5XXQ7sO8j:3ATMnmYM++uQxCmbKzbU21Nnd5HQ7s9j","tlshash":"e8921bcd72c0f1a206d792b6409f100e7137d928514e9410b6a5eaee2d39c7da33be3d","first_seen":"2025-09-07T03:18:34.03068Z","last_seen":"2026-01-25T04:45:18.20749Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1093,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gooerseowds-tordt.top/wap/css/1692.8fbdff32.css","fqdn":"www.gooerseowds-tordt.top","domain":"gooerseowds-tordt.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gooerseowds-tordt.top/","date":"2026-01-25T04:45:02.049Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wap/css/1692.8fbdff32.css HTTP/1.1\r\nHost: www.gooerseowds-tordt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gooerseowds-tordt.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"www.gooerseowds-tordt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}