{"report_id":"96f25a5d-7403-40ef-a0e4-b48426c64743","version":6,"status":"done","tags":[],"date":"2026-03-26T23:24:12Z","url":{"schema":"https","addr":"dhgatemall.cc/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"title":"Paymium-Ai","dom":{"size":233495,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53361)","md5":"be071eea2c9fc97021e8d1fb48a643e7","sha1":"a5c3e607398ce85f2ff63c38c94bf5af16156ca2","sha256":"6df6117c28920a81fce3197715db4e5d9f1ec5df2363090eaeb065d5effb388f","sha512":"61705f711e822fd63938c5d1622b6b680936056516c435902588a9ac0e2e7fc7876748f14d6162a13aea672f41026d33e9d6488b4306770452a12eae9d93cb1a","ssdeep":"1536:qq2SfHQ34OOb+x3txO4MDMczwKCBymZdKnYWsgozDrzBWYGrmVc6q1L5HJJbxaSr:CHg","tlshash":"4d342aa113e0d2d8f356835dd5716c3621be34efbb94c18cc8cd16a6ae6acd8442cd6b","dom_hash":"domhashb9005aaa86cf446856ad5536971e47a8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dhgatemall.cc/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T23:24:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.dhgatemall.cc","ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-05","domain_rank":0,"first_seen":"2026-03-26T23:24:18.200319Z","last_seen":"2026-03-26T23:24:18.200319Z","alert_count":16,"request_count":16,"received_data":681041,"sent_data":9379,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dhgatemall.cc","ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":77,"request_count":77,"received_data":7917339,"sent_data":37256,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":66438,"sent_data":1050,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-03-25T15:15:22.647105Z","alert_count":0,"request_count":1,"received_data":115283,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"worldtimeapi.org","ip":{"addr":"213.188.196.246","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"domain_registered":"2018-06-28","domain_rank":18362,"first_seen":"2018-11-05T15:58:25Z","last_seen":"2026-03-21T09:57:24.226929Z","alert_count":0,"request_count":1,"received_data":1202,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":3142,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2026-03-25T23:05:55.190636Z","alert_count":0,"request_count":1,"received_data":59423,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dhgatemall.cc/js/V2auDc63BzfuKCiFNY.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"711ee5dba1ec9dcacbbc88fd2c3d5d3e","sha1":"1f4bc55503cda6d82e6f84699b492f34f1432c22","sha256":"432805daeca17316b2a857f79787d305692e1c0f4a8ceb2bd9f8a1fadc9cfc66","sha512":"78b412fbab0c5076a35984b455b0d097d5e87916dcadf343b3e54e0e081516db0005a28f112ebdda265f6e6f70f89053a2404f26ce622a799433a566d904e25e","ssdeep":"","tlshash":"8fd05b45c988036d2ee214675b1667f021f701584a7491b8555d0a34df1e70d5e17e21","size":246,"data":"","first_seen":"2026-03-12T16:13:02.510577Z","last_seen":"2026-03-27T02:24:47.364304Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0ed7511cd3b7281935b501081af2b243","sha1":"7ce7c1685cb501be190aabcf6be8dd99cfbf124e","sha256":"4247c7e1fc2e29b0428ce5ddb331bde55d7a2240cdfe739e78d856349a36e99b","sha512":"792f1b064e558413e24df0cdf3b12c29725a76345b048c7b3ee9b3745d708b482d7b4fefd118be667b4a4a8a6976784b63847f7f225d44b9045c73cbc8bd2ca1","ssdeep":"","tlshash":"9bc08cc4a0c63d002603655110af24e4a0244026704c1b22add4e8483e230b08233e9c","size":141,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-07-22T15:15:20.331334Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/eBXMoFJaxOBNGz0vlQ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9323914d2f07e7317c502aa0853162cd","sha1":"34498086331bdf0b29a83ed157994034031aa1d0","sha256":"166b898c2f9c1568fe1e523fca9e3075e59d3285486cd7febf074fe6760a9730","sha512":"d34e5ea8a27bd82f6926ec3a18fd545cb7ec003fb2cb86fa828dcdeb1953015e46604e1b9ab869897890a68da588f4384c17c30fe4def2b13d0a66fff5f433b4","ssdeep":"12288:iEv3fO48SMcZN50T4eh4HktpVo2O4qBTsa7Ah6G0kcNEWcmSfnnoRIhfGT1V9SIs:dEQ/BC+TS5","tlshash":"757523286a1bf744e419c0d7f9373c84c59de68aa00754d26f790bb31ba2792eb9cd13","size":1579649,"data":"","first_seen":"2026-03-12T16:05:53.738711Z","last_seen":"2026-03-27T02:24:47.401486Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/Cl9pxfgttjCZjweQx8.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a22a265b81bea347736a68493d0f4af5","sha1":"b915945462e9913031a55c0b1cd920d6834eeaa8","sha256":"d8dc8f6490a33d727d4ae6c14139f18b5983d1fb984ee3ff19317675602a8468","sha512":"f845180f0c694ff42f6430984196950932991d88aaadb827b3668edd67d2db953d97c4314d978454cdb5df025ac1ff89709e536b6c4f5a6f1b11166130b5ce59","ssdeep":"","tlshash":"39418458f411dbbda27b463888520050620c1fefd524eea4f1ae1f226bd6cb46596f78","size":2252,"data":"","first_seen":"2026-03-12T16:05:53.663187Z","last_seen":"2026-03-27T02:24:47.350215Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/eQR0nxjHvHCTj41bwz.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f20eca31d26444f86d341e8248d5e393","sha1":"eea45ad610a82735797481e12614973af252396d","sha256":"91e095ef2a074c9086fdd7605e08e311cd5a868bfbf6bc03e663fe47faa067d2","sha512":"51fe3975642562f95b8c8c4817078032301ff0ee5a9fbdadccf14ae5d6121df9518ca8d37ae6f12522aab16089c4d1d2391577b8ef843a586aa49c1fb9fc7207","ssdeep":"96:0fXLjjA3qXkDai6xPtZ2ulKgRb2vbEj+U+Nka1Y34XJSq6F077W772E:0THvXKahVPlKXT4NjKYoXJQ0vW7T","tlshash":"b2b1283278a239036cc075f7794ccbce0e50053ae94398c3d2ea9e86d294f1cba69194","size":5319,"data":"","first_seen":"2025-05-15T07:17:42.12509Z","last_seen":"2026-03-27T02:24:47.36544Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/Ws4NVZvz5RBpTPc4LJ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b5c8e95e99f866e68aa84c0d5b462d8","sha1":"6ec715c3dd9763a05b0fcf926c91cb0c9ebfc43c","sha256":"be4c9e0ce62523b1c94f360176a6a07ac1a9d94257028495715dc3e282c1b7b0","sha512":"2373834bd95974dae6a1773ce62ce2dbb5a298712dc3496046dadd4eb39a06b26295f35b4f670cb899ce298930a80983b51d841b927537054a888e42194c2dc5","ssdeep":"3072:Vh7tnZY5kWoH6J+2JfnHYr0XyBxxSIl4CWpO+1+Q/4lPc:H7tnm5AH6J+2Jfn9Q0","tlshash":"88345c51740beb3ef0a3584968490800384d4fe6d51d99a6f2fc7b37abc6db0573a7a8","size":242364,"data":"","first_seen":"2026-03-12T16:05:53.641781Z","last_seen":"2026-03-27T02:24:47.378535Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/oqxzsCaTPTDZcgWOW1.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1b9d68132e5fe60103b9a1d847d03d46","sha1":"7e21228038abf064513e87cdf513a4012c35ca3e","sha256":"fd731428d0c63a424e0d347bce7f59e3063d7cc68958fd4879ef6768389c6d11","sha512":"e5922c22a5ba2f551accc8fd0f4bfc1f3f356e16772435ce8f1868fbdd4c5d4b5a1e45c108ba0d55516ed003e4be1ba6833a48517b0c8b1dea917c7d7d564aa2","ssdeep":"","tlshash":"73317309f4c5717482a75cf8c3350a57d3c957cc303997d07a2e886e06aa4d96a3ab8e","size":1597,"data":"","first_seen":"2026-03-12T16:13:02.613992Z","last_seen":"2026-03-27T02:24:47.382817Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/GWyYe9LK8nDXepvGXJ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b4a62d803d4daf12869d00ca02517960","sha1":"a7ca1d4819b4d995faec1aac5c5746b4680bf869","sha256":"d651c69bcf842b90022e9cff8a6f85ef7a22038cc10988afac0739e4c941ff96","sha512":"7cdcc2280a1d627400edbfeb946bf43cd2bcfd31428d0e5c3e0d0d77cf5dc8ff7e3c152261f0ebad47cf2b0b5e73ca02d3d085915d60b9b3401da0a6f5b0d00f","ssdeep":"","tlshash":"3c01fe42b674b690a3b91892c018568225f64b6a3a42d0f0b50d1f826b3fe2694f9f59","size":717,"data":"","first_seen":"2026-03-12T16:13:02.537045Z","last_seen":"2026-03-27T02:24:47.346287Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c5e439f0fbaaa206d01bf644a4ebfeb3","sha1":"35c2cc890367aded8a2200c9ec7a0a0483016372","sha256":"5c752eb073917c29d5492480524a3f571623cfc00fe144e66661444286628ed7","sha512":"e52c2decfdb49d343731db681df69a0aea4a635f8860bae559e50570c33da4bb87dff7dafb29e2122ee55a7d394770b0ae32a3ca1b4c338c8ef8337b0282c67b","ssdeep":"","tlshash":"a9c080d561c23d105512541114bf35d850244457718c5b628d94ec4d3e130f04733ebd","size":163,"data":"","first_seen":"2026-03-26T23:24:24.705387Z","last_seen":"2026-03-27T02:24:47.400062Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/V7rEOsROY4Sw_FLNPx.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"94ac7234b161bf223a620eda3fec043a","sha1":"fc27a3cd7728f022d9e0da3e9b1634f636b5cae9","sha256":"574763f7eddfa8d48089504de68c66ea9cf43ed637a2a846b66fae8733b983d1","sha512":"e035c6c255c69695cf1c3431e5446fc5d6a95aa03fca44c9af00fbe0f9ae28dda8b7fbc7fd0b90826e4fefdc77baafdbcf390777ac0cf68bb83ab0e27d7c90e5","ssdeep":"192:7QygIDNnwkmJJexKjWHovWEj2V5IrscoNtBeNqaO7K+UawhZC7Jfk25mXXiNkauz:7NhnQvhjQeWyFCeMaO7zUaP7Jf71ulx","tlshash":"82629eb73b98d67e8b742cf8600a55f2ecea585f6ff54d84d89840a487e0c90cd5d782","size":14948,"data":"","first_seen":"2026-03-12T16:13:02.586276Z","last_seen":"2026-03-27T02:24:47.38191Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":114950,"data":"","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-07-26T09:03:47.007177Z","times_seen":774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/WP7530miwZBRe9CuBZ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a665819634de0b6df52cadbe02eccff5","sha1":"ec23a42679c4f77ebdf97c40777e2a73556e5726","sha256":"0b1fb4ce14380eeb30a603be4c16713f01e64aefc88daacd824ea2389233e60d","sha512":"e77166da0a289eac36483b2cfb158c56d6a37a725530b5594c4c34a58f04421adecdb68329f5bb8fa13ebe8d735fbbb9b10a6110a605938aa938527f0d177320","ssdeep":"","tlshash":"9021540d7802cb78c8a749a8e0d80801518c7feb9778c4a1f0eead2667d1db4452a334","size":1232,"data":"","first_seen":"2026-03-12T16:13:02.526132Z","last_seen":"2026-03-27T02:24:47.35127Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/hGBv0PQgbWD2GhQmzy.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4c589acf06f3f538e3ccefcd41bfe602","sha1":"278eae65a35714a9ba2830d305f107a9c30dc066","sha256":"3fc60f9f7598418053933178fdd8b6ab3ca2fbe924acbb86a5c0d902846fd5ab","sha512":"078523f1f4f71da90ab5465bcb63bf964f816da3ec6ec8a3c8ebb917546321c560486831492e9636d5b814399ca3ddfd1ee3f9fa94863dc5add81774efeccc3a","ssdeep":"","tlshash":"9c0189647ecdf6e2d26b046855d15349db3463ac58c400666e6787700fadbb3c46bb00","size":746,"data":"","first_seen":"2026-03-12T16:13:02.610668Z","last_seen":"2026-03-27T02:24:47.390221Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"02408d922d2e1998a79d8d6f850a8fa5","sha1":"05881ad7e2edf93b804c00b4998f794b9be830e2","sha256":"2864865ce925856a2bf5886ef5970aa3f3c2c592f2f6963f42fc77308efe5b95","sha512":"d79c14118cc3f703cf56276c6432e4c886ed04c65964fa528d842d1f2efb256ea5cb7f313b5dcf870032fddad8b695ac049c3d0de86f8ceeb0a5932b7586cc2a","ssdeep":"","tlshash":"c9c08cc4a0c26d105602645010af24e490244027b0481b028cd4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-07-26T12:34:25.280791Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/J61zxinGrUCTlq95ZT.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c30c66d9b89d66b1df5cbed40efb9e0b","sha1":"7c566549e87af138b54914a6f8a2b7cfbace1174","sha256":"c3ba37c885b8873ba4d4a39b232cde4b94007c6d6a08e2f398862f2a1e2dd827","sha512":"9b6f52bb71bc75c2c2a17d6ad6bd76ffc34c342af08dec6959b33f700f0a3d7971bfc3c32df327e521c399c5691eb97166d44df8c7bdd16d772d5dd812c25a15","ssdeep":"","tlshash":"abf00e65d0c8cc30033ffad882586491031cceb4c73101d4ec4a6a19f3de824c51cf14","size":503,"data":"","first_seen":"2026-03-12T16:13:02.604836Z","last_seen":"2026-03-27T02:24:47.360786Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/2k4bf9XrNdDXEmoBT2.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f9a0106f4ca2c205e75a1d9dc689b983","sha1":"3bd23d0c659b4ade33b328968a622d7599b0397c","sha256":"da6d2d35d86bca9fde612ac97b729d829369dd2a9da0f27018cfaa76f3f1ead8","sha512":"5775a9dea4acdda040f4fcc6333d0bfbc04b090f6166e8bb977952e259bd9b4a9c62c22666ffd87bdce2763c738bdce3021093d1db2b5e822372fb979d75a4d7","ssdeep":"","tlshash":"0df05c0df565d2bc51ba1cbd4880005c07768fd4139261c9723f1ea80b39de6d6a6c1d","size":464,"data":"","first_seen":"2026-03-12T16:13:02.607931Z","last_seen":"2026-03-27T02:24:47.379083Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/fEDthhGDiPBLbDLbr_.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"11411569f5beaae96edb434ad2ec1fc7","sha1":"0b0fd4d3a6aa6e1f0c9057937ca49b8e291b1364","sha256":"d967adadca6eeca15f18a24ce5e8363d2df639c33f12841701528f7b96ed01d1","sha512":"6ca309eed3091477d6edaf119e7f010cb82ccaa16f9a42399c429e44e04cc0fee848550ec7b4e028f93c10f94da493f41288ed1d084074d41eb18d52958f102d","ssdeep":"","tlshash":"afc0241d744554f045750cfcc113057f53157d40331555f07515471743553351307f5d","size":157,"data":"","first_seen":"2026-03-12T16:13:02.554399Z","last_seen":"2026-03-27T02:24:47.344958Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/8pRQjbBBFtTQvgOYj0.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1dfa0b7afd100a7a97bcf21b82c03b56","sha1":"35d9160cc0fb844e3e263e0d21108b92c41aa027","sha256":"24f97089480037efb97d6b9d83d940533679a143aef8065689ae33b5b621a954","sha512":"c36c32020f5b6761dfa9f449132da64e3e982b9460fe7e25b0c73082616bb6f491f6300fec4c404ffc02efbd42d069b4e4ae63d9ede1157ff1fe63c877b1beb9","ssdeep":"","tlshash":"0301445ebd9eeeb8307344f115c61869210a8f2dfb7948c0f2b21b3012d2810901b78c","size":707,"data":"","first_seen":"2026-03-12T16:13:02.606292Z","last_seen":"2026-03-27T02:24:47.358787Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0a135a3820c44612d285347e945db1a0","sha1":"c751ab64ae029f5969e555a5dbec7dc15eb8f339","sha256":"6a02a962e9797eb8838be4ec5b3dbd47c5c6ced0fdee45ff8b242e92130a9d61","sha512":"92028e04908a6c3cdf03c75cf98c4678eb7bfbbdd11939716bad337599380d34293b296b7a059358cbdd3632a32b9f6b64f6768256fd20aa2efb83ff15d3a65f","ssdeep":"","tlshash":"6ec08cc4a0c23d001a22641068af34f4a034406ab14c1b528e94d8583e230f09233f98","size":147,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-07-26T14:44:01.185547Z","times_seen":1042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"492c4389c8b2cae47694e67f1aef229e","sha1":"618289db1374901bd0f6dd4ab3aaaa2265aad8ca","sha256":"b9dcf35088337362546a445eb0a84b582586c6dda3b0621e60f638dd36df5dda","sha512":"03cf2aeed0e329a7343a92b1bfdc21de4a603343c1fb766b53eb55e1d45b4f8efb73602be72f29cb097935a1c6d124b7061d7f07cef7d9668586da7c1fe48040","ssdeep":"","tlshash":"75c08cc8b0d32e101602a46010af28e49024842bb4489b568dd5d8d92e660b48233e98","size":149,"data":"","first_seen":"2024-06-03T10:51:44Z","last_seen":"2026-07-16T14:06:01.984272Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/i1FLjo2Ur2Cn49JsZG.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0f190a327f6cc9ef6dd6e339433f515a","sha1":"bd012eed1f2679249977846f016650faf39e8d44","sha256":"1c338593b9a0ecc3993554888f202e4ec1a2155c4709e2f12ab1b9d0a962ba2d","sha512":"43f58aaed56ef7ca158ca81ebae58e5b5ff99e5563b8b19b97fe336e0019429ecde1cf74c5d0a4ca9a82d065e1bb9b346b63fe6183d4815dfcbabf6167955d86","ssdeep":"96:Dw9k2moXFWGHuMmG1nQD8moXFWGHuMmG1n9mfH/pq0eU4kNsqNtNNNP:s9dFbmSkNsqNtNNNP","tlshash":"4fc11581cb8fea0b873148c03b27ba9d939e1bcc709e85c3c389dd6c6d1cd5566569b4","size":5949,"data":"","first_seen":"2026-03-12T16:13:02.542648Z","last_seen":"2026-03-27T02:24:47.357689Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e945cfacf91f6c0a27635339d8d37ff6","sha1":"4f09b7c9214edf2a190c29e64b54d2b6a69ca5c4","sha256":"9348a780a91a576eed3adcc0bae4d097a1761cbbe9fc3fb35029e60e604355c2","sha512":"2ac7ee471a447b022595f7e876b74c45bcbff208d1432e42faa5d3d152e034456910bd5fa6c25fc8a2cca51d32ea9f98b352c88465071c8f8e79d99b893f271d","ssdeep":"","tlshash":"515122193ad4b7298257b0b4987fcd49f520053a02e8d8484b1cd6fae82587dabb9cdd","size":2985,"data":"","first_seen":"2024-06-08T06:59:42Z","last_seen":"2026-06-06T23:51:55.922813Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad7e35095f9a2452e79ebcc25fb81251","sha1":"3533927767ca29d6e0b31695488ef232872758a7","sha256":"91ae7e639fdbf3e17c99d0a5181209e00b574191a993bf842a3ebf8836c80f6f","sha512":"b2f77b83a888c755bc0032d77272ab73f68fa24ae71de4d16427b1347eab3608698ebadb6b413d7cd7e0ee92ae78e5a1dd3f785d92ce3f3d1f5ffbda94cc7e3f","ssdeep":"","tlshash":"a4f09e1b1c47b1ae1bd6a5baa77f9d1b22112246319054137e0c80286fe083c5fe9e8c","size":508,"data":"","first_seen":"2024-06-08T06:59:42Z","last_seen":"2026-06-06T23:51:55.926764Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"585bd093398adcca9c32b34732c37bec","sha1":"96a392e95f918d9e3f1bdb9580e449d2efae29a3","sha256":"61650dcdc8a73394c151be14084ae4baaeca952889b4bb593be70922e4150d04","sha512":"0775cc084b6d8ed8f39b1e784110ccd26a3dce8b19412f1045b40bca5a8595b3f9393ca0ef88cbbe253c4ab172b45f881940d98167de52998a866041b9d1bd4b","ssdeep":"","tlshash":"f311aa2824ea160c8117ba95b1bfff0c762c612565e4dc0c814dd079182edbed6dd9af","size":1070,"data":"","first_seen":"2024-06-08T06:59:43Z","last_seen":"2026-06-06T23:51:55.92757Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de3ed6f62fa4508e69491bd89eb274b5","sha1":"eb8c50c4a1b5641abcb034fd7f88a95d15ed919e","sha256":"909705f246c8ead542b59e1f02453e6769864dcea4c1cfe24b8818a3a98ec0a3","sha512":"e7891d59adb2ea08b3810e31000d3b5df108358dc50347cd0bbad5fa3bfff24b170e934cbbce1bebc9baf1a352e9a1d34afda920db85c6f12e9759649fc03295","ssdeep":"","tlshash":"2ef022d91997593006eb11ff2b9e301060304003e908ffa0346f05046fed72ae7e1be8","size":618,"data":"","first_seen":"2024-12-08T21:22:12.696799Z","last_seen":"2026-06-06T23:51:55.932654Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/zXUdCqEUzQ9fJSJlAC.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fcc823d67050a47c9f2ee6d4d78cea96","sha1":"76a351b12e1c59938a3422026d2edefc7187492c","sha256":"9b4fe2e175214a9ab0ecaa20c83f33cfa9676db8168783f7e8cddd8bfd070942","sha512":"69de82e5fea810d7b46ac4040be70718e2dff840294283f97d8c8141ed067fe16c8258cb30c5faba460376eff32d0d7e389eba7fb6b54ee65180903f405e680f","ssdeep":"","tlshash":"98312390f6b9d074537a58e1c4391610e1591f457119f8e6d4ff0d825f8684af92bb2c","size":1810,"data":"","first_seen":"2026-03-12T16:13:02.572353Z","last_seen":"2026-03-27T02:24:47.380526Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9e76c89efc0bfb7bc505e5e37bc6b997","sha1":"e527143af060ee83de67e386f5709d6ea757e768","sha256":"1e2a84a2fef3fd681fa617f3958a4f544cfcca03a676790f2328e1bda4ee7c6e","sha512":"a6c8968570142d697f1a304850477bf3cca03ed0534553eab76464b25cb704fdabd3e941d9b90158f19b851a8111180fa1a15194c1340cafa8560954f55bad74","ssdeep":"","tlshash":"d5c08ccab0c36d10560a741450af24e49034402770881b02ccb8e8483e221b08233ed8","size":145,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-27T06:27:15.958389Z","times_seen":620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"30a8cfc448ca44bb6a96cab16cbe4d55","sha1":"0162910a80fa1940b1744ef16bcde1bccbe7fe4a","sha256":"63ffbf759c493e328f09954e3a6511188c56873a13067b287ad9dcb105121a67","sha512":"678d84e043b954f01d00bb79edf7b648121f2343b23503a9be058c717a4eda86eb263635c7eb95354dca73a8c9ca224ece9c814c209c9eb75c32c0deb393564b","ssdeep":"","tlshash":"c0c08cc4b0c23d112a42641510ff34e49028802670882b02cc98d8482e230b0d233e98","size":145,"data":"","first_seen":"2026-03-26T23:24:24.723302Z","last_seen":"2026-04-25T09:06:34.333162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/VNEGdqHf7oDBCgJH_T.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b6d857f5cf7b0255cc21c6f96a4e96a4","sha1":"dd374086ef9e7673360c4cdfeafaaaa4c7dd75e8","sha256":"82d77ee4409513df02633a746e5e289b70c271e0c5e111bb06e92929d3e80b01","sha512":"36c2b520e09f26ef33d353385be500e81b60cb764029bcb3ad43cfbdee1ee110729e1ab32722617a0ddd9b57c9c4a42bbea67716219bee0c3a45cfd31ec74e5e","ssdeep":"","tlshash":"e3f0200be812c6bd95f71d942983306110887eecc72098c0f2f629b193c7c3aa42ef58","size":543,"data":"","first_seen":"2026-03-12T16:05:53.702105Z","last_seen":"2026-03-27T02:24:47.368602Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/L5UAtOgHbNCYGoLSEi.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5f13c50ff5694e5dada894d90365af8b","sha1":"0947b0cde1993fd8f33e2f95c61ab011bac34d90","sha256":"9d606e22f9915ecf1810164644700f9a9ba97095212a987c44167b8b2363d2eb","sha512":"ecbf9054fa50c84d3ebe043abf7f166d0b614fb806e38385901d67949f96e4ed4a711070bff860e4e12676c652d3a460ad3c47acb74b0b4fb6c83ca96551ea4e","ssdeep":"","tlshash":"8231649ab41ecfbdb4b7497a5907d069900c4bddf235c64570e84a1317d6c38921ab28","size":1683,"data":"","first_seen":"2026-03-12T16:05:53.646274Z","last_seen":"2026-03-27T02:24:47.353731Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/BSjqWU9rs1DsbVAnFv.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"db19ee11c88fac961b07945673e5a864","sha1":"8ffd8b1c7de5008cfd0765b9ac22e761fd0d7004","sha256":"66d1de4a0f57feea9aba0c91dd28422f420bcb48b7d0ebe33f489fbc7910b03e","sha512":"55bc334e0aa29a1507a7c2abef7023fecb311bc95d4e7539d7f7058c406c3bd6c04f8e912bcf228624ce1bc1ab2d488226e737f1688f16c1b3834f8fcd17d393","ssdeep":"","tlshash":"98c08c47b44283e052660c8401664d821e750a9817469ec090466ea80b710b8ca4aaad","size":165,"data":"","first_seen":"2026-03-12T16:13:02.518414Z","last_seen":"2026-03-27T02:24:47.369575Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/RQ8MsYZ9TKCALez9Y7.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9aa07cbc4f20cac68fcca6d0513545d3","sha1":"abf1038751446a41bd3a9b7275b43601b7e0e8f3","sha256":"39ae95e6c35508e7322032c8979f1b74853cc07801ebc7cecea0bdc4ab6dec10","sha512":"782fa9caef62b6138436b8b0a3e866b5288d62c8696d4ac3e1ebcca722ec51ec1d8f180b038d8b03f39d721225936bbfd03c04dd8f11bdddc18d2d94b72f4714","ssdeep":"","tlshash":"7f2121a2b09df17d42ff3db6a86b101ac36167d0236001cd67ab054e0b269d1957ba1f","size":1246,"data":"","first_seen":"2026-03-12T16:13:02.603082Z","last_seen":"2026-03-27T02:24:47.354315Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/PrXeCEJSeDDR11aM3A.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"83d16eefb692b9f65347da4c6f21c6aa","sha1":"301d40415be3bdbc43d7bc547d63b23810d35e02","sha256":"b3b5537bc03685c9e5cde5819c142b34252696ddf283536bcc919bfaae73fea7","sha512":"0d9336621e445923adb89ecd7cd2cde0e759328465ca8dfc5dc3dcd5adf11a147691e6998a4fc2efd9b7fcdefa5c1f18a38ed5c5e62f4d312230f31a5d4cd062","ssdeep":"","tlshash":"afb01201878801e515a9009e4b51e7f82572001d1b3846a4701d2e5487053894d0f911","size":92,"data":"","first_seen":"2026-03-12T16:13:02.591009Z","last_seen":"2026-03-27T02:24:47.376425Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/6s1YK10GP5D-Jqhn82.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"211a7769b61a117e80e5769da2f23bf1","sha1":"14a4d955ef0efffed58673ee4623e16993753883","sha256":"3c58bed2345a422575a5129b3bf787bcefcdfebf089cf8b8dfc664949804df2d","sha512":"0a6ffadda54441addfe752438c67d6ba9207b1901ede150d276dde0ed3fe2ff703e51d7b00ce86ed5d26e32e6419d98b99ea86f9c440a6523edafa033fb3b983","ssdeep":"","tlshash":"9301258c58f6cbf9c4e702542d9a10a5d050678c9b35d865f05cad22638fcf095de73c","size":790,"data":"","first_seen":"2026-03-12T16:05:53.664979Z","last_seen":"2026-03-27T02:24:47.354908Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-27T10:06:41.399718Z","times_seen":7985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0740574b7b01959b1755b2857382404f","sha1":"9a77b5d40150f406d40975144e07d03fcc2d1ae4","sha256":"e3c0fbe980a9d0ec3f1f42af806a09139157a285b4d33c19b03849b475cd057e","sha512":"88067d56711f816e3f87f3bc52da200bcda7f66a9e0c7abbbb3cfd8504c613762f2a4c296891b030d41a0e1e6539fe85b7565e091e0e043e408f9df6bdf61dbd","ssdeep":"","tlshash":"09c08cc4a0c62d009656a49421af24e4a0344026704c1b428cd8dc882e625b08233ea8","size":146,"data":"","first_seen":"2025-11-10T05:38:58.586675Z","last_seen":"2026-03-27T02:24:47.394246Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df5e904e2a419fd848b94f0d8a9c5338","sha1":"ded3da98e8f557e3702034442c0527b9b6f2939d","sha256":"f46e53c31226b8a14d07eb98f71e7e9a331f5c34b36be4b50c4b23c4ad71796c","sha512":"c6afea57dbf39cd7d34d2ea55d4ecaab8c57547ca2ac0320e45e3e39d6b2e0388df4247c91746749c1f4d57539ec42ff0576a2abf6a9f090adc79fefee60c97c","ssdeep":"","tlshash":"90e0c02a18ea18b99757a2b6313ffc053102300d626883727a4cc505ef91d7f87a4f8c","size":388,"data":"","first_seen":"2024-08-25T20:57:00Z","last_seen":"2026-06-06T23:51:55.933246Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9b36074d4fadeed20bca09d00bf7954","sha1":"421905d53e76d14c18223176e574176000a1d8b2","sha256":"578c17e69493625b1478cac8e5c0013dd778db5217f7c414608ac7bfcac93eee","sha512":"37fac8334d5c4643cbf4774a1544fd927dd4754d324344f12faa5ae053c742e3ca1992d57b0d7165bd7cb3cdfd0f0da3285bdd53c85ed7293f5107acffea1197","ssdeep":"1536:kQ870ziaaHzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:785hTl49dx0G","tlshash":"d543d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","size":58763,"data":"","first_seen":"2026-03-26T21:22:04.399918Z","last_seen":"2026-04-14T13:12:00.951993Z","times_seen":561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/OC5XqFt7ABDgVpLstp.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d6671830ce3170f121f56f4c2e4cfd47","sha1":"e8af4d096838cb83cf8b02f62a249d1e3610e4ac","sha256":"3899bcfa1ca85295972c777df42e4e3b1f1649475697327813c60178705688ed","sha512":"d57ec3aea00ffff425b9a5f8e1f428ea91c319a63a565dfd513b2d2f58dd1cf5a8e0aee8bd81cfaa4f147dd8bd633163f0f1bda81b59e3852c7c73ac6e01d0d7","ssdeep":"96:y3aIdRuMfPzqfcSFuxEV16+4OgLUq6zQKq6O85t6D1YU6p3V:fIdR7Pz4cSICVMUGKXVH","tlshash":"bc810f88780789fc84ed4624ac1764d0a5cf2bedd02809a1b0fedd1616d6da0cb96bf8","size":4103,"data":"","first_seen":"2026-03-12T16:13:02.619659Z","last_seen":"2026-03-27T02:24:47.364869Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-26T17:02:42.781205Z","times_seen":4428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e72149d5788d2e19b81eb5b4326ca99b","sha1":"ebd0948e33ee83e0512279c2df196c3ca6d73666","sha256":"c020455a7c5657122ea2127097388a76ec3a072d82af198e8602507908f8ac0b","sha512":"b39d961538e111fc6edb680ed562152624fa7e6896edd356490f6ffe429ce50e336b74357ece513c02d544878b019e5e361604fd793d78987879cc6e4b12e080","ssdeep":"","tlshash":"d7c08cc4a0c27d105622681010af24e49028406674481b028c94d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-14T08:59:55Z","last_seen":"2026-07-25T08:16:31.134381Z","times_seen":1066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-27T10:06:41.381409Z","times_seen":6988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7ed1371a19d1669b794bee4d09f96f9","sha1":"275da616d6dcdc43be9b5f4089b948d0c1cb0c5d","sha256":"7a268a30c02b74334da050cb6d1bbe5e52e2d2b9bdfb737f6874f2997e499977","sha512":"58b6f7d6f1e4ca77086f948af3c19a881be9fa2512f6d5e56dde3e49b995cb73fb57af33b9b39b2da01d0375e178d79493afb5e29c99e48e37e96d44302b01ab","ssdeep":"24576:zOK1BpXhraKb9/N76RyCzm8NbQ/5wYRUl:iO7jp/sycm8lQq","tlshash":"8a755b54641ecabdf8f3509494585800b9a83fefc1459126f2fc48226bc7c79eb9dbb8","size":1571270,"data":"","first_seen":"2026-03-12T16:13:02.656825Z","last_seen":"2026-03-27T02:24:47.395023Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd1bd11fd11651336c660ae4dcaffe70","sha1":"247c11c7aa0d5767918f2cc20c26f1e7aecb77db","sha256":"77bc3df32a0c1eb2d90672990d2c97863055bf9ee0ab062a59a0e235e428a122","sha512":"2807830aaf907a83d221d0da285768e897ff63517947cb2a3979f5e1fbda93e80abf24deb0b7692cb8874b8cad0be6acfc1c1f608a5835474ce7dfaf0a831353","ssdeep":"","tlshash":"6b01eb230cd910af6f2710bd2b3faa1236b01113144ac420fc0e8720af20e7c1724acc","size":700,"data":"","first_seen":"2025-11-11T13:02:28.956822Z","last_seen":"2026-06-06T23:51:55.936813Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/swiper.2TiRtZEN.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"95a46904909c67c1cb76c03b9371fbb4","sha1":"f63c84864c9fe86cfc16bbd485616fe4dc8caa75","sha256":"b508989708f818e369deddc209118239eee116c1d5ec13900fc595197bf3536f","sha512":"69a19a710ef596f7a7a8351ec6994b53975fdb2df1d7320365b86a1ed66d7c6572a1f227c29e086936c04c1c2c7c0863716911caef39d83513b282d081875ebd","ssdeep":"3072:Q7ManoUtYbXtirRIBvDEtFyPCENnRZDvPtyW2pYzof:QwW9tYbXti+B4FyPfNnRZDvPtyW2yof","tlshash":"eff34b997250b13242fb19e742768111b37909497809d4e8b1ad9ceb2d7b84812ffffe","size":168030,"data":"","first_seen":"2026-03-12T15:57:51.956398Z","last_seen":"2026-03-27T02:24:47.348484Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/5EfXZJLrijBCNy5ayT.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f3091ab88fea84faea93889e033300f6","sha1":"7340ce1b233acbbd3cf6532fcb13567ca86561ff","sha256":"511bae8fb94cd76acc1b18b185c5137fab38a710a7fb731a7e49a8b1db80cbbb","sha512":"2cbbbe8f4deb1debbbe0ef72032d53b56ce17465ba54df6a6d8b58770a480fa35cb0ffb7aa8e8ca9e9650a4bfc41537f4dde1a370c256fc57dbbfddf0021af64","ssdeep":"384:60uiLXabmFpBl3Cuaru1iacFmxMYanqGzwcGml:60TLXemFp351iBFmxq5qml","tlshash":"15a2e7746030c23afd99b0e01de05c46688d1bdaca9952d6f1fdccc677c25b4ace92ad","size":21902,"data":"","first_seen":"2026-03-12T16:05:53.686609Z","last_seen":"2026-03-27T02:24:47.352429Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/wxZmKZk5igJxQxZQb1.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1c48e28b7094d8753615f05e8f1ea31a","sha1":"f84aebe49fbc05fefd40efbfeda7babcffc7f69d","sha256":"03d9cb7abbea0c60000d92cc33725beae2abde2cde911e5330f241907c09e185","sha512":"1819a97541146f165378dca1b57187ae2e4ee14f9e59578bc16ff025b6f13712b540c64d8908d397c11b66adbe8f365934952c15c89fee3ddaa08e0259cfe661","ssdeep":"","tlshash":"a4518459fb80a138c7a065b164d148c0663a1b016c47a9dae1130d48633bb90b29e867","size":2850,"data":"","first_seen":"2026-03-12T16:13:02.553098Z","last_seen":"2026-03-27T02:24:47.377485Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/N84pHiiZwDB_A1xBdJ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","size":27,"data":"","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-07-26T09:40:30.335752Z","times_seen":822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/Y8ufLU6IFvBL2dOfaT.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d249875ab5773d35dbb1dee5f3ca73dd","sha1":"5576189cd8e818108329a8de841038c8a08e16c0","sha256":"a809a588241659a16b48b41fe08376fcfa4ae61b2494a7dfc69e21c260b01906","sha512":"175656912c49fab56c84ca8b03865f3884bfb476370c086439c3193e484c79c390e459258a5a0c777a531733a9d7db2ae04069d8e551bcba9b4e006098d5b98e","ssdeep":"","tlshash":"63b0122f081054b059a00ccd235850330770556d2793298032148e1943590b6c10d7d9","size":97,"data":"","first_seen":"2026-03-12T16:13:02.528834Z","last_seen":"2026-03-27T02:24:47.371412Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/#/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d4700e7818854aec11dc4d0591f9626","sha1":"33b2ac2baa38752d6f1edf04c37521182691204a","sha256":"1d5965d8f785900972e887d8981bd26afd51aab614536dce2510a27167b51ff0","sha512":"dfb9f4efd73dc16da30a73a6b0e794e4eb49d92babe6f730363281d2c54dff1e8efb16873a9c361b8531368e7efc4cf6eba61d56628671e7a996ed795a17eebb","ssdeep":"","tlshash":"89c08cc4a0c22e005606641011af24e49028402670481b028ca9d8582e220b08233e98","size":136,"data":"","first_seen":"2023-06-28T20:43:13Z","last_seen":"2026-07-27T04:50:49.515671Z","times_seen":13257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/BbUxwLIiXlDMjAv_SI.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1815fff3fe827ef90ca4fbe7d6ebb66f","sha1":"7b73c54dcd39be62425c749ec41dcaf5cdd4f326","sha256":"4164a9709422cff89f777f378bf6560fc2d212ee4034008ca8cab6b2a57ffee2","sha512":"85662c854f936c2de8a0e8c0931d37dbd7a07ed9cf8e3ca87475c710debcb26f8d10963ea06b1ac591d9811c1ad76fdbdcc9d42ef0b6e500a791dec9f77053be","ssdeep":"192:s0h5ZdhxjCN3pBZlydACbIc/3H+pp95mD+S2FOh8SdosaPvUgNe3flz138mkjtAK:J7vhx+NZB/yj2kDd2FOh8Sd8P3wtz6t3","tlshash":"04321c9678007035877799c4c09909a5a229378cf239c6d2e06e3c363b599b4f0fef2e","size":11240,"data":"","first_seen":"2026-03-12T16:13:02.600699Z","last_seen":"2026-03-27T02:24:47.350713Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/dcfc3tJzkmBeBV7ahr.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3f1abc9a9ad491c8973eb3d93d21867f","sha1":"63a0982947c6bdb33df6d298937008898251eeea","sha256":"cc4d9dace113681c162ecb5576b80dc2a76a12d29b06c4aff1eef32af6da725f","sha512":"2398fc1e369bf2403c034d04a0ff6da6c8acbebf3aabb64d3be1b6678de8b08d17c541274b6e8f2fd1768c96c806a3af6f93c5684111638dfbfc718df57b89c3","ssdeep":"96:rzqIGUmga8hbcqxBm+kRVv3oA8XRrydAK9pM7uA+FHTJjaZo4HLunGsTqArlDs:y4a8hjxc+kRF3oA8XRrydAK9pM7RqNup","tlshash":"cab1fa957680b937c778a5c940e000f0537567d8b12ac9eeb1df1e0b3758cf9256ea0b","size":5181,"data":"","first_seen":"2026-03-12T16:13:02.574729Z","last_seen":"2026-03-27T02:24:47.358257Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/8hvoMx1NOzVKxb2NeI.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7134b509f9e8a2dca77a642870fc664a","sha1":"eb5211f9d02f78e2643a6206cda3f90071b03df7","sha256":"2f32e214161bf583cdec2eeb4d3b51718d118f682ea1f6c1f3c7b7eda3fc48c5","sha512":"5e4a29fec9c0d50a3d99321b65e8ada8a9479d361d6954eb3c2ac5e69096ac48869ba30ce4d553f39b1143395851f99a800edc60b4eb17a51c4e0185a50e7d31","ssdeep":"","tlshash":"67412488f66651758f777ce052a8308d4b1903d0e79625ed201d1f408b5bd026af896e","size":1941,"data":"","first_seen":"2026-03-12T16:13:02.576592Z","last_seen":"2026-03-27T02:24:47.37556Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.dhgatemall.cc/upload/img/694aabec6343.webp","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"GET /upload/img/694aabec6343.webp HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25766\r\nlast-modified: Tue, 23 Dec 2025 14:49:16 GMT\r\netag: \"694aabec-64a6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNCTZBKEgQNPY9%2FV52NxPSkLaq2ZPd7U8B93yS1bm1T18b0VAFeKEfgv8SXzmK4cQFEJPQMDuntHcgD99qPdIFoQ4Pz%2BNTyJBoSmQA0uck05kjBi4StUNkHgeo%2BTTs6jW9OCDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e29e7ceebfd0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7d58cf74c64a964eb9432b3b1cd70161","sha1":"bcb6e18327ea4a043ba13da9e4e8dd599beba2a5","sha256":"8198647049c28636cc7bab41723976be28fc530964260208afcfd2a399925bc2","sha512":"f7553a5c46e50d5ac078f13529da8bed6a3d29a2c4163f2fd5c4b31d03d45066bad3b72d2512d99b3fe3631f4e4cdba481e618f4ab06523e8f94a6212b8ab1d3","ssdeep":"384:EUoQE68dOZo8b6ySfUHwTNDc73amsO6PUeCxMnICN5XXpYzgHsA53RRw+yIR:E9g1ZoKPdHwK7iOOUTRaXZYzgMoh+WR","tlshash":"ccc2e12d36bcf32af39aa3bc542ecd501bd0a090cef6a8575d68429ea816b04a4954e5","first_seen":"2025-12-31T21:49:21.219587Z","last_seen":"2026-03-27T02:24:47.347739Z","times_seen":3,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/upload/img/694b93dc0d55.webp","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"GET /upload/img/694b93dc0d55.webp HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25766\r\nlast-modified: Wed, 24 Dec 2025 07:18:52 GMT\r\netag: \"694b93dc-64a6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhjPbP4TN6UujfaQjpGB671KV4%2B5cUFpIWcuepFFgTtLkk9Nwpb48gjgRPrIOf%2BpUdzGKryEfG3PgpRhtnND9rICMoeNwmF6rVO8KVapGKDsid6ZKnK4k9SjGHdky19tK%2B5d%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e29e7ceebfe0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7d58cf74c64a964eb9432b3b1cd70161","sha1":"bcb6e18327ea4a043ba13da9e4e8dd599beba2a5","sha256":"8198647049c28636cc7bab41723976be28fc530964260208afcfd2a399925bc2","sha512":"f7553a5c46e50d5ac078f13529da8bed6a3d29a2c4163f2fd5c4b31d03d45066bad3b72d2512d99b3fe3631f4e4cdba481e618f4ab06523e8f94a6212b8ab1d3","ssdeep":"384:EUoQE68dOZo8b6ySfUHwTNDc73amsO6PUeCxMnICN5XXpYzgHsA53RRw+yIR:E9g1ZoKPdHwK7iOOUTRaXZYzgMoh+WR","tlshash":"ccc2e12d36bcf32af39aa3bc542ecd501bd0a090cef6a8575d68429ea816b04a4954e5","first_seen":"2025-12-31T21:49:21.219587Z","last_seen":"2026-03-27T02:24:47.347739Z","times_seen":3,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/BSjqWU9rs1DsbVAnFv.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/BSjqWU9rs1DsbVAnFv.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2a1aYvGzWC7mWtG%2FGfXpNdZqqpwbWSEO%2FCgRJ3GYIFauJScjrNAdoQLLTjf5wgHXiAB3AnH9%2Bvg%2Bympg41zhkgxDtqhny%2BHvHvlM01PSj5Oj8wDCM8xcn884oROf0RZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b0cb54654289631d0f5d661cd06c68f2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cfbfe01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"db19ee11c88fac961b07945673e5a864","sha1":"8ffd8b1c7de5008cfd0765b9ac22e761fd0d7004","sha256":"66d1de4a0f57feea9aba0c91dd28422f420bcb48b7d0ebe33f489fbc7910b03e","sha512":"55bc334e0aa29a1507a7c2abef7023fecb311bc95d4e7539d7f7058c406c3bd6c04f8e912bcf228624ce1bc1ab2d488226e737f1688f16c1b3834f8fcd17d393","ssdeep":"","tlshash":"98c08c47b44283e052660c8401664d821e750a9817469ec090466ea80b710b8ca4aaad","first_seen":"2026-03-12T16:13:02.518414Z","last_seen":"2026-03-27T02:24:47.369575Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/fEDthhGDiPBLbDLbr_.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/fEDthhGDiPBLbDLbr_.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHf20zWF1qhm6MgBaQcO8Od0OGooRczrkuROJMPAajfLgpaUO%2Bx09nMsVi2AGa4yWvZA54ruhnSA8yNzXz1q1TPvplr3kN0YjHjqsHKPleKMqfv6mRMtaQdCcpPrgd2A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"52594a8781cb14422e5469fc4b3ffe58\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d028011a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"11411569f5beaae96edb434ad2ec1fc7","sha1":"0b0fd4d3a6aa6e1f0c9057937ca49b8e291b1364","sha256":"d967adadca6eeca15f18a24ce5e8363d2df639c33f12841701528f7b96ed01d1","sha512":"6ca309eed3091477d6edaf119e7f010cb82ccaa16f9a42399c429e44e04cc0fee848550ec7b4e028f93c10f94da493f41288ed1d084074d41eb18d52958f102d","ssdeep":"","tlshash":"afc0241d744554f045750cfcc113057f53157d40331555f07515471743553351307f5d","first_seen":"2026-03-12T16:13:02.554399Z","last_seen":"2026-03-27T02:24:47.344958Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/V2auDc63BzfuKCiFNY.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/V2auDc63BzfuKCiFNY.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LH8wsX2Ph6GdDEe5TrdPynF5bqvRPIATZxYXOHPAamM0fekvqt53uQbVEqXhiGL2%2BImW4hWl6I%2B2fU%2FaApvUMfbylkvrKdUIN8FuXCS2%2B3NhOsTFHRY49O851KKHy7u6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"75000c3ca1beec86dd12608ad3346add\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccef951a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"711ee5dba1ec9dcacbbc88fd2c3d5d3e","sha1":"1f4bc55503cda6d82e6f84699b492f34f1432c22","sha256":"432805daeca17316b2a857f79787d305692e1c0f4a8ceb2bd9f8a1fadc9cfc66","sha512":"78b412fbab0c5076a35984b455b0d097d5e87916dcadf343b3e54e0e081516db0005a28f112ebdda265f6e6f70f89053a2404f26ce622a799433a566d904e25e","ssdeep":"","tlshash":"8fd05b45c988036d2ee214675b1667f021f701584a7491b8555d0a34df1e70d5e17e21","first_seen":"2026-03-12T16:13:02.510577Z","last_seen":"2026-03-27T02:24:47.364304Z","times_seen":6,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/UiysaKtVDEDS6JmEkZ.png","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/UiysaKtVDEDS6JmEkZ.png HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/assets/olChoSWJEtCG-puyAk.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 80529\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"76361c43eae8ee10739dd8f0c72eb970\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0I%2Ft%2FQm1GUgzxExPXYu6RDWp3hH7s83LJDtXuXzVCOJpdLaaLdBlIrBj6QCoKmftmaW%2BSnGkx2N11AvvgInmS0IZuE0gZTkIxhtAWDuHKpGMZ853mHO7LXyKnGLfV6Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e29e7cd0fa21a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80529,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 688 x 880, 8-bit colormap, non-interlaced","md5":"a5b570d1d1902b0ed8863b823c400f41","sha1":"f5ef7221c7ead658652ce45eb974cb0fcb425050","sha256":"f526a14c5148542f7382c5ccb0451a1e49d0f4686ae63320795c06e2f32a492a","sha512":"42ebf8f56cc780a1e38488b9eb9a3a4f72759e0b816417116b07a73894ce331f91867aa2735dbe9a909b9985be7e62be624ab7d65ef66c8d23decce0964fabfa","ssdeep":"1536:XD7wxmdL4glPe/yMN+1MixG5BZaDodlSVmEu/OXijdB6jVEYuE/mT1:oxmmlyXqBUkd88/7jOjVlY1","tlshash":"3073026cbd5cdda5b4759af8186c74079754e1e74339a1023feef83a472f01b8085d0a","first_seen":"2026-03-26T23:24:24.617506Z","last_seen":"2026-03-27T02:24:47.379916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/RQ8MsYZ9TKCALez9Y7.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/RQ8MsYZ9TKCALez9Y7.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSWCSB1p9QyNfDYAgIqKwBHw3T4qNDyRXh2JpdyDreLHrVZhgr5Od7wZsFyNz3Bt%2FuV6KlmtHNqGi8b09v4kWsfZ5a0zpoW%2BWKGLXwStNt5dMq3LdluDEQqjPopYQZ2p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a008f38ba967087d3bfdd0f08b2ecde6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cffff11a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1245)","md5":"9aa07cbc4f20cac68fcca6d0513545d3","sha1":"abf1038751446a41bd3a9b7275b43601b7e0e8f3","sha256":"39ae95e6c35508e7322032c8979f1b74853cc07801ebc7cecea0bdc4ab6dec10","sha512":"782fa9caef62b6138436b8b0a3e866b5288d62c8696d4ac3e1ebcca722ec51ec1d8f180b038d8b03f39d721225936bbfd03c04dd8f11bdddc18d2d94b72f4714","ssdeep":"","tlshash":"7f2121a2b09df17d42ff3db6a86b101ac36167d0236001cd67ab054e0b269d1957ba1f","first_seen":"2026-03-12T16:13:02.603082Z","last_seen":"2026-03-27T02:24:47.354315Z","times_seen":6,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/swiper.2TiRtZEN.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:48.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/swiper.2TiRtZEN.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f7QmUTARTIYJINAsX5%2FaEMBOvOO9QBH2QtSpTSnJ1Cj8npf%2FzOsP9QBKeg7mkV%2BOPOLRcTzGrneQhLW1ej15yRUesDrgfokT9WCozNyAY3UpP%2Bm4NAI%2F5TK1d84nDGnN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"daaad27e43f200d736847ed3fa5b2cfb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7bdbce91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168030,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"95a46904909c67c1cb76c03b9371fbb4","sha1":"f63c84864c9fe86cfc16bbd485616fe4dc8caa75","sha256":"b508989708f818e369deddc209118239eee116c1d5ec13900fc595197bf3536f","sha512":"69a19a710ef596f7a7a8351ec6994b53975fdb2df1d7320365b86a1ed66d7c6572a1f227c29e086936c04c1c2c7c0863716911caef39d83513b282d081875ebd","ssdeep":"3072:Q7ManoUtYbXtirRIBvDEtFyPCENnRZDvPtyW2pYzof:QwW9tYbXti+B4FyPfNnRZDvPtyW2yof","tlshash":"eff34b997250b13242fb19e742768111b37909497809d4e8b1ad9ceb2d7b84812ffffe","first_seen":"2026-03-12T15:57:51.956398Z","last_seen":"2026-03-27T02:24:47.348484Z","times_seen":16,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/api/lang_j?rts=1774567430734\u0026l=en","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:50.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"OPTIONS /api/lang_j?rts=1774567430734\u0026l=en HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://dhgatemall.cc/\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:23:50 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dhgatemall.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JWHuYY0FKbHLinVdcTvCf6tw9u76Tqx0%2B%2FipRlMj0l%2FiNshCbx5xJD2Y25p6rPQ10FqqPSP13qqJc98nAe9m7DQn3Fslo7d4em9xBHjNu1LMzvs6UajZjcocXGmQmQ1w4Cec7A%3D%3D\"}]}\r\ncf-ray: 9e29e7ca2d620afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T10:26:15.180389Z","times_seen":17561103,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/oqxzsCaTPTDZcgWOW1.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/oqxzsCaTPTDZcgWOW1.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2FK844hu1aSU%2FYa57BqmTTKZj%2FHCjAxdMeONp%2B6C7wEpxvhwMNp6Gws%2F58cLazyKp2PIAu9APcm1fPnvYAXoFYL8L6x6FlzUe6kIl9XCOZiOWvHvUPMDD2jlzVh4yDGv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a693c506ece0acdb28f54133d3633df1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccdf891a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1597,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1596)","md5":"1b9d68132e5fe60103b9a1d847d03d46","sha1":"7e21228038abf064513e87cdf513a4012c35ca3e","sha256":"fd731428d0c63a424e0d347bce7f59e3063d7cc68958fd4879ef6768389c6d11","sha512":"e5922c22a5ba2f551accc8fd0f4bfc1f3f356e16772435ce8f1868fbdd4c5d4b5a1e45c108ba0d55516ed003e4be1ba6833a48517b0c8b1dea917c7d7d564aa2","ssdeep":"","tlshash":"73317309f4c5717482a75cf8c3350a57d3c957cc303997d07a2e886e06aa4d96a3ab8e","first_seen":"2026-03-12T16:13:02.613992Z","last_seen":"2026-03-27T02:24:47.382817Z","times_seen":6,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/Y8ufLU6IFvBL2dOfaT.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/Y8ufLU6IFvBL2dOfaT.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbTs8OsQ%2Bd3LQ2Zjei8yS4ZgjvmI9cWn%2FIX5EhDqHctDNbn86c9qb%2FVP7EnZDamD2Cr8q%2B9%2Bmy%2B2ctKNArDcag%2B3Vvn5LAk0CtCjjEX9TbpvAXHIukPPOBOyDSb1dCen\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b10023f07aec11d31ff55c5afb80c6b8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d028021a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"d249875ab5773d35dbb1dee5f3ca73dd","sha1":"5576189cd8e818108329a8de841038c8a08e16c0","sha256":"a809a588241659a16b48b41fe08376fcfa4ae61b2494a7dfc69e21c260b01906","sha512":"175656912c49fab56c84ca8b03865f3884bfb476370c086439c3193e484c79c390e459258a5a0c777a531733a9d7db2ae04069d8e551bcba9b4e006098d5b98e","ssdeep":"","tlshash":"63b0122f081054b059a00ccd235850330770556d2793298032148e1943590b6c10d7d9","first_seen":"2026-03-12T16:13:02.528834Z","last_seen":"2026-03-27T02:24:47.371412Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.dhgatemall.cc/uws","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"GET /uws HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dhgatemall.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: tOY4kmoQoHoA+fZ4njki6g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 26 Mar 2026 23:23:52 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: xbcWb6aXFC+jOe7WXToRwIPqKRU=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HQqJt0fPR9lb8BBFOd1LZyDBerSd%2BVhd7OmQKl1gHZ%2BcOvUPTzrURBjT%2F6qDui1WYObTqpw0aSrClVcWkWordx%2B25Zu%2BhDaN1P6kxYWMFMfoTMW7L%2F1qS4ovbQ%2BWodXFCRKHfg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9e29e7d12d280b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=597\u0026min_rtt=578\u0026rtt_var=137\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3116\u0026recv_bytes=1249\u0026delivery_rate=7040518\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=e07afb576ca12dd5\u0026ts=512\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T10:26:15.180389Z","times_seen":17561103,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":0,"dns":23,"connect":23,"send":0,"wait":499,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:48.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dhgatemall.cc/\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 18:54:18 GMT\r\nexpires: Thu, 25 Mar 2027 18:54:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102571\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-07-27T10:22:27.958208Z","times_seen":21230,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":139,"dns":1,"connect":7,"send":0,"wait":8,"receive":8,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/F6MagewzAvCUyIFmI5.css","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/F6MagewzAvCUyIFmI5.css HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GaA4bvl1p3N9I6B%2FmqGov9tnZkEJwuGIlO7UjFikoG0KkHNkwW8LI6fbEqISUqhxagz%2B2n%2B2tmDxlQDZqCQoZ%2B3RL2wwp08FdiabE%2FdG9gpbT5El7yuqb9zaSxESlcCs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ecc62db1ffaa869a5d006e7655e1ed7a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cccf7d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505730,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cece760d5cda288c0c138ebe3701f84e","sha1":"5bd461a0c70893f8d8b0573e280c49abcc28d6e7","sha256":"b28896e5cedb06e3fb193d6ff899e2821556ac554f508ca72f29330c2fe987e6","sha512":"213f9bec832f61d86afdec3532eb9bcc9d85ddcd25b06f220b83b9f0af1db242ce3ba513712f0936e1f6e4c3cb7f74030ee8e75de4e147606b6868aff8478508","ssdeep":"3072:Qb+bwPtwgBdlIY8VHdDHVLu2XiNitFLyJPqooCNqvBUjsYqpe8+99KbwbqE3lvW7:7cZItHdZ3LeuWqpGmweToY/","tlshash":"b2b42a7c39582a3bb877c525312c2adc5c26b603e932869cea593838cddf6f3152f549","first_seen":"2026-03-12T16:13:02.618382Z","last_seen":"2026-03-27T02:24:47.37285Z","times_seen":6,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/Cl9pxfgttjCZjweQx8.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/Cl9pxfgttjCZjweQx8.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRWYHhOuzNjm8d6TYmjcoDYMVfDgmD46cGsNEDdAWVgmu%2BvDYuYxnt5GvKs5Emm6KRE3Kw1ndaLtqkcDgZ%2BqTlSHDJnJFpAsK5wz6szf9tXGhe7jtKTGk6oY86yyiQl%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"138cbca3cc14246a50e7dc6e16597b4b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccdf821a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2251)","md5":"a22a265b81bea347736a68493d0f4af5","sha1":"b915945462e9913031a55c0b1cd920d6834eeaa8","sha256":"d8dc8f6490a33d727d4ae6c14139f18b5983d1fb984ee3ff19317675602a8468","sha512":"f845180f0c694ff42f6430984196950932991d88aaadb827b3668edd67d2db953d97c4314d978454cdb5df025ac1ff89709e536b6c4f5a6f1b11166130b5ce59","ssdeep":"","tlshash":"39418458f411dbbda27b463888520050620c1fefd524eea4f1ae1f226bd6cb46596f78","first_seen":"2026-03-12T16:05:53.663187Z","last_seen":"2026-03-27T02:24:47.350215Z","times_seen":10,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/GWyYe9LK8nDXepvGXJ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/GWyYe9LK8nDXepvGXJ.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUu1ErIMqOWePHSPT5hDXD%2FYVDboInYS1aKdvjgTd5fE92FoUfW%2BN7TzmfZldkS44o7c3%2B6SxXqmcKxmuYUs3wbMnf%2BlS3PAFpgmyw69a6uZg8i%2F1nOlkp63YF7ppKmS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"119afa0729046f6921118de243c936cb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccef8d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":717,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (716)","md5":"b4a62d803d4daf12869d00ca02517960","sha1":"a7ca1d4819b4d995faec1aac5c5746b4680bf869","sha256":"d651c69bcf842b90022e9cff8a6f85ef7a22038cc10988afac0739e4c941ff96","sha512":"7cdcc2280a1d627400edbfeb946bf43cd2bcfd31428d0e5c3e0d0d77cf5dc8ff7e3c152261f0ebad47cf2b0b5e73ca02d3d085915d60b9b3401da0a6f5b0d00f","ssdeep":"","tlshash":"3c01fe42b674b690a3b91892c018568225f64b6a3a42d0f0b50d1f826b3fe2694f9f59","first_seen":"2026-03-12T16:13:02.537045Z","last_seen":"2026-03-27T02:24:47.346287Z","times_seen":6,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/N84pHiiZwDB_A1xBdJ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/N84pHiiZwDB_A1xBdJ.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27\r\ncf-cache-status: MISS\r\ncontent-type: application/javascript\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f9816492016a63d0b09768dfc8623c79\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XbmEnjDKuO%2FYWF74g8cMoJGfsqL988vdReIYO%2FmCWpFjSmdF04E86aV%2Fv0Lbd0AXZmbFrUj0mcngFY%2BD2TsEWoaBgueV9l%2FgPQJDuZupqJNdM4jQ7sgVSIrMj0nJQsCm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e29e7cd0f9f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-07-26T09:40:30.335752Z","times_seen":822,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/N84pHiiZwDB_A1xBdJ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/N84pHiiZwDB_A1xBdJ.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/javascript\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f9816492016a63d0b09768dfc8623c79\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XbmEnjDKuO%2FYWF74g8cMoJGfsqL988vdReIYO%2FmCWpFjSmdF04E86aV%2Fv0Lbd0AXZmbFrUj0mcngFY%2BD2TsEWoaBgueV9l%2FgPQJDuZupqJNdM4jQ7sgVSIrMj0nJQsCm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e29e7d028001a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-07-26T09:40:30.335752Z","times_seen":822,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/api/init?rts=1774567429656","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:50.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"GET /api/init?rts=1774567429656 HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nst-ctime: 1774567429000\r\nst-ttgn: 408a5693477ceba4b25a1c9ecf9b5fba\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:23:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dhgatemall.cc\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7r3s9oTwg4zazdAdNq6FEnIxrXO%2BwTG4fjPsyHMokPfOfctAJeraPmc4sfXU1CI8bnYWKUos7X1aOnj0RbHwrsXGQkEVcw%2BXYcQOFHP4sZvKnE%2F8BmWY50CbTNCbjsNEci%2B%2BWw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e29e7c6f9c556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76453,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bf4452ef3b96ca9cc643cb5fdf8b7e00","sha1":"2e0d0f0d7545739527ab5a18c3cfcf6870879855","sha256":"d91d66515b8a13ff8801a974455da902aa4e4837cdf6c8a03715a9d6a6f3b315","sha512":"ca9c65a612e4689ceb08c32e1a840e90f37e9f76d5d5d5e354efabc733718a81261aa4ea79adf1307502b9075e64d49b308ded31a32b89a362fa8a7606ecb602","ssdeep":"1536:YA4SNJz0oyFNPSQfgMVqlPR9ks2mhJ8ROmb5VI3k1D8TyjDyE4DH/VZs:QGJCiQRV8PD92Mmb5DV4DNZs","tlshash":"8f7301617f78a3a74bb747ca64b92f7e1bd7bbc2b0b050327ea52111470a176cc5e860","first_seen":"2026-03-26T23:24:24.630695Z","last_seen":"2026-03-26T23:24:24.630695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":-1,"dns":42,"connect":6,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/XtdseZ6YrVBBGxtG58.css","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/XtdseZ6YrVBBGxtG58.css HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqziQzafkFA65iK5hTSjwa1h5LNN7VEef0LlZvNc9jOcRuUnmTqCxAz4V79wExe8fENN80TUnCMJO2g3%2Bzb93tTHTECtxlbRhnMisBqYERY1Ehgovyftw5VHNm%2FVuVBD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4aa9240271c8fea5a20e95cfc78ba467\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cc7f6d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a9fadc4adb941b49dba4057ed5892a8a","sha1":"97ef5525981dbd1ea4d8b3717a4ed1ec47f487ad","sha256":"3b1bb70e6f7bfe6da705495af851998d936ecccd16a2f898321f83febb45a2e6","sha512":"ef44b98d8614ff9ceb690a44fd6e7db3f869f33fe6ca2658de616b6d074922c8ae0aaa9fb8ddeeaa267ec5b5ddedd13801271df5cd6f0e579f87a38a44cdbd1e","ssdeep":"","tlshash":"c0b09b1516013b1c705d7441de5416d75141d437946175558a81572f448e4b72d747a4","first_seen":"2025-04-17T13:49:08.687019Z","last_seen":"2026-07-18T13:45:29.801085Z","times_seen":131,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/PsuAZrWKV6DYQdpHvT.css","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/PsuAZrWKV6DYQdpHvT.css HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwltQ0hQ9oguhaJWIsGm6Fn13G4tDYpqEFj1vYzM4rq15jiUCmWa5aa6vtptokjjbp7B3FmiBZynxf5HUOXqrHCR8h756i6xlSHI41egMijeDfxSn%2Fcq2vXVyT%2FVwNa1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6b31b41c8ab2611247fb4673c3d9f906\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cc8f6f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2694,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2693)","md5":"3f28253ee7f3d1cb19aeafad1111187f","sha1":"3130fac7725b7f6a5fff4a7c9df18a1067aa012e","sha256":"02bc3b1cad3d4bb9b0160135e6b16eb62133091d879c8d0d0a5b4ea831149626","sha512":"d07d7a8607add532475e31995dc647464951961675fbe74b8f202ce19ae29023272d997a3f873542094654e4e0e4a5fbcea3dcf88f602e8bb4ab9e162260c329","ssdeep":"","tlshash":"6051b3424892279d4693863e3198f3c8e07e74e33bb7dddaa1498dc1ac9b67509a3c53","first_seen":"2023-05-21T08:34:57Z","last_seen":"2026-07-22T08:18:31.366747Z","times_seen":229,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/OBJdeSNgsQB8brp-BE.css","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/OBJdeSNgsQB8brp-BE.css HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ym%2FPk8whByCgbqgt8FBYUxfiDOP4oL52vmaS7ZEoByvfHPrfKp5Yk%2BFvUILHBRXNOWUdbeXjtidFAOVO2NbXFmybpeufMPgwk56ZTR4kNt69viGtaH4%2FHGj%2BotBUUzgp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"dd3d984f0867d7ed77f842ad9690ff7c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cc8f701a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3227,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3226)","md5":"70e54f12d62d1315ffd14b024d382b54","sha1":"b0b0394eb58490a978161a192e0775d6a6760a76","sha256":"17c074f0564fc5eafe44d8111ba1ac4c85b99103d728c19c2fe486a11dfc92c6","sha512":"11312280a667403bb1ae15e2ca81b5cebe042ad198c4ec5504e960a42aa6e69f64e9e4d3d94d72c7129a784cf1a8d1c56b504a91ed8a4a3569018f5daf8d5171","ssdeep":"","tlshash":"0f61aa36a370a17b9f02f67dbb5a6adcf128e7714d01b3a5b281201888c7bfc1532917","first_seen":"2025-04-17T13:49:08.756011Z","last_seen":"2026-07-16T14:06:01.948476Z","times_seen":102,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/lq0M9Ere7yCHZ6Q-BP.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYWZt4%2FKaxGAtLrrhsoLbF%2BiefweBirCJOr282RFFUyE9wyQWsJ%2BXa4QehrgPKXx2%2Bv%2BakBBwztdanD1bJDuCzWeVUUkTKcC51MBvxac7Z2zNmLd9jYxaBGR0BgvM0Rp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"308559273ebaf1736c4f3cc104a67871\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccdf851a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1571270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10098)","md5":"26db4c24e1aa9f9be9b40d282cae5379","sha1":"2386e5456807081aece2d0998ca9d021bbb4f08e","sha256":"16db02bc67b30b6ede8a244d6b18500ac67978fbc3cf5e5b37106900e1f16329","sha512":"7dcfe13d7e6350acbfd4474145ad080934c387d1feb29b9e8b2d517ca62338ae676f5900f3bc70f212fc9ce71645c53d586717502689d2721ae3823ba81f1b62","ssdeep":"12288:7IU5EKc6Bp/vh3DgA6ux4MQiB9aKb9/NcIB9fA1:zOK1BpXhraKb9/N761","tlshash":"7d254944641ecabce8f350a494985441b5a83fefc1559126f2fc48262bc7c79ebdcbb8","first_seen":"2026-03-12T16:13:02.58427Z","last_seen":"2026-03-27T02:24:47.374626Z","times_seen":6,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/zXUdCqEUzQ9fJSJlAC.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/zXUdCqEUzQ9fJSJlAC.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FBBXJs2vnwAD%2FAyZqlqqMvRKn7h2AzGAjvqodIgBpcAk8lqSeRYnwS8rxJO%2FLuFDOG%2F4ynQOOa8jnd9X8%2FjZwuJf937P4P%2FsUYEE7pGuNilrtamAlEYPMGsMiLlQnVM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7f5a349a93ae9ea41ff6c253ae941e36\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccdf861a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1809)","md5":"fcc823d67050a47c9f2ee6d4d78cea96","sha1":"76a351b12e1c59938a3422026d2edefc7187492c","sha256":"9b4fe2e175214a9ab0ecaa20c83f33cfa9676db8168783f7e8cddd8bfd070942","sha512":"69de82e5fea810d7b46ac4040be70718e2dff840294283f97d8c8141ed067fe16c8258cb30c5faba460376eff32d0d7e389eba7fb6b54ee65180903f405e680f","ssdeep":"","tlshash":"98312390f6b9d074537a58e1c4391610e1591f457119f8e6d4ff0d825f8684af92bb2c","first_seen":"2026-03-12T16:13:02.572353Z","last_seen":"2026-03-27T02:24:47.380526Z","times_seen":6,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/i1FLjo2Ur2Cn49JsZG.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/i1FLjo2Ur2Cn49JsZG.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LhxjgD42OQ%2B20HuZB9nlCpllnJ%2BnY%2BVe0CC8tpoGXI5IkRS4%2B5x2HvyxoD6FCcGc3wYTXNC7zPjpDpTKqyrvI5mU%2FmUZ9Rq%2FIfcRPDxmQZVT1juDTc1K%2F5bm0fDgmuyC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5b8f9605a55bda04d0f4c6198bddce7d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccef8c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5949,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5948)","md5":"0f190a327f6cc9ef6dd6e339433f515a","sha1":"bd012eed1f2679249977846f016650faf39e8d44","sha256":"1c338593b9a0ecc3993554888f202e4ec1a2155c4709e2f12ab1b9d0a962ba2d","sha512":"43f58aaed56ef7ca158ca81ebae58e5b5ff99e5563b8b19b97fe336e0019429ecde1cf74c5d0a4ca9a82d065e1bb9b346b63fe6183d4815dfcbabf6167955d86","ssdeep":"96:Dw9k2moXFWGHuMmG1nQD8moXFWGHuMmG1n9mfH/pq0eU4kNsqNtNNNP:s9dFbmSkNsqNtNNNP","tlshash":"4fc11581cb8fea0b873148c03b27ba9d939e1bcc709e85c3c389dd6c6d1cd5566569b4","first_seen":"2026-03-12T16:13:02.542648Z","last_seen":"2026-03-27T02:24:47.357689Z","times_seen":6,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/8pRQjbBBFtTQvgOYj0.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/8pRQjbBBFtTQvgOYj0.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImE%2BnzpFUMk7n83gk%2BRPcH5h%2BOOMOVjPE7WNpp5QC%2BmbOEQ8qrha2snT%2BPk1VkOTACwRZ1FtCdNS6dw1kwms4xjTJ8fmx3onFwrYyvViY0Ot2Zatv%2F%2FtKLlvWOZwSUj3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8ef2afbadde30edcd64efde1eb20c7b2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccff9c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (706)","md5":"1dfa0b7afd100a7a97bcf21b82c03b56","sha1":"35d9160cc0fb844e3e263e0d21108b92c41aa027","sha256":"24f97089480037efb97d6b9d83d940533679a143aef8065689ae33b5b621a954","sha512":"c36c32020f5b6761dfa9f449132da64e3e982b9460fe7e25b0c73082616bb6f491f6300fec4c404ffc02efbd42d069b4e4ae63d9ede1157ff1fe63c877b1beb9","ssdeep":"","tlshash":"0301445ebd9eeeb8307344f115c61869210a8f2dfb7948c0f2b21b3012d2810901b78c","first_seen":"2026-03-12T16:13:02.606292Z","last_seen":"2026-03-27T02:24:47.358787Z","times_seen":6,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/V7rEOsROY4Sw_FLNPx.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/V7rEOsROY4Sw_FLNPx.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4S47OQTnIuFFFOcXY3erTeO6HuPL6YH31kbD2b1fnOQnDGTZe0HMI0Afcdy%2FTrpjnDSjXG3lf4U%2BVkmTd%2BwUQs3R4mYPCYLaUA9iUEEYnxaLZP8eK4PXScGeqZ9LG0Nt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7a97796ac965d781d8f0704506135b8f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccff9a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14948,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14947)","md5":"94ac7234b161bf223a620eda3fec043a","sha1":"fc27a3cd7728f022d9e0da3e9b1634f636b5cae9","sha256":"574763f7eddfa8d48089504de68c66ea9cf43ed637a2a846b66fae8733b983d1","sha512":"e035c6c255c69695cf1c3431e5446fc5d6a95aa03fca44c9af00fbe0f9ae28dda8b7fbc7fd0b90826e4fefdc77baafdbcf390777ac0cf68bb83ab0e27d7c90e5","ssdeep":"192:7QygIDNnwkmJJexKjWHovWEj2V5IrscoNtBeNqaO7K+UawhZC7Jfk25mXXiNkauz:7NhnQvhjQeWyFCeMaO7zUaP7Jf71ulx","tlshash":"82629eb73b98d67e8b742cf8600a55f2ecea585f6ff54d84d89840a487e0c90cd5d782","first_seen":"2026-03-12T16:13:02.586276Z","last_seen":"2026-03-27T02:24:47.38191Z","times_seen":6,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:48.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 26 Mar 2026 23:23:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 10:53:09 GMT\r\netag: W/\"69aff815-1c106\"\r\nexpires: Mon, 30 Mar 2026 23:23:48 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-07-26T09:03:47.007177Z","times_seen":774,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":197,"dns":26,"connect":20,"send":0,"wait":40,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/api/adi?rts=1774567431092","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"OPTIONS /api/adi?rts=1774567431092 HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://dhgatemall.cc/\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dhgatemall.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAccufnweF%2FzPgTmPueC6grGjj%2FP%2FipjZFfJrCCCq8S0T2zWeclF4QY5Oc047PQ8nUz9X4g9Yj4GiEdLLRPPxNEmZxp%2FJVmrCnbYc%2FngXyahf9YUY%2FmI3H%2FoH20aWB1spbJwBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29e7cc6ca1b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T10:26:15.180389Z","times_seen":17561103,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":2,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/L5UAtOgHbNCYGoLSEi.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/L5UAtOgHbNCYGoLSEi.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8HDDy6bO9LRp%2F3uO2Go3WcEeYYn%2BuEXZjJj4Zl9sWBcNm5jlcNsRFMjxHpAR%2BQYmZ%2BRvZe8wmWLNkfk%2BNyO%2FIturrLmrBEvLolwQdapOUTUG%2B3O2F5hvjxT2QD0xcYY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"97c04264dae3b2c4ccfa75685b81024a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccdf831a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1682)","md5":"5f13c50ff5694e5dada894d90365af8b","sha1":"0947b0cde1993fd8f33e2f95c61ab011bac34d90","sha256":"9d606e22f9915ecf1810164644700f9a9ba97095212a987c44167b8b2363d2eb","sha512":"ecbf9054fa50c84d3ebe043abf7f166d0b614fb806e38385901d67949f96e4ed4a711070bff860e4e12676c652d3a460ad3c47acb74b0b4fb6c83ca96551ea4e","ssdeep":"","tlshash":"8231649ab41ecfbdb4b7497a5907d069900c4bddf235c64570e84a1317d6c38921ab28","first_seen":"2026-03-12T16:05:53.646274Z","last_seen":"2026-03-27T02:24:47.353731Z","times_seen":10,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/8hvoMx1NOzVKxb2NeI.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/8hvoMx1NOzVKxb2NeI.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkTzUTCRh%2FrSQ2IDUa6fr3c59s4RlV3jcrWMw%2BaDZmwi9nqejDh7kjVAwG8TkrOEcnt%2FsjojyxbzvFDtL%2B4b18LOZLPIrXooRSqI4rHj2Fg61KDG2UUx9cbQcgpee4bG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"52470884b73880a0f5d78a80e02a83cd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccef941a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1941,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1940)","md5":"7134b509f9e8a2dca77a642870fc664a","sha1":"eb5211f9d02f78e2643a6206cda3f90071b03df7","sha256":"2f32e214161bf583cdec2eeb4d3b51718d118f682ea1f6c1f3c7b7eda3fc48c5","sha512":"5e4a29fec9c0d50a3d99321b65e8ada8a9479d361d6954eb3c2ac5e69096ac48869ba30ce4d553f39b1143395851f99a800edc60b4eb17a51c4e0185a50e7d31","ssdeep":"","tlshash":"67412488f66651758f777ce052a8308d4b1903d0e79625ed201d1f408b5bd026af896e","first_seen":"2026-03-12T16:13:02.576592Z","last_seen":"2026-03-27T02:24:47.37556Z","times_seen":6,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/5EfXZJLrijBCNy5ayT.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/5EfXZJLrijBCNy5ayT.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/Ws4NVZvz5RBpTPc4LJ.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmToYt5r9M5AJ9l3gkmsZyvtE%2FngWOmRWlTkjGhlgEr5FNEJrpPrNbtOqtYYBluLw7cBxvCOpGmJTmsI9MOP6nxxUdzPPQaVC2AaszBX3fAjqF%2Bmb5v66B8rCldzlACR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"13720b98de369bb86a449ba3c1d94054\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cebfcb1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21902,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (21901)","md5":"f3091ab88fea84faea93889e033300f6","sha1":"7340ce1b233acbbd3cf6532fcb13567ca86561ff","sha256":"511bae8fb94cd76acc1b18b185c5137fab38a710a7fb731a7e49a8b1db80cbbb","sha512":"2cbbbe8f4deb1debbbe0ef72032d53b56ce17465ba54df6a6d8b58770a480fa35cb0ffb7aa8e8ca9e9650a4bfc41537f4dde1a370c256fc57dbbfddf0021af64","ssdeep":"384:60uiLXabmFpBl3Cuaru1iacFmxMYanqGzwcGml:60TLXemFp351iBFmxq5qml","tlshash":"15a2e7746030c23afd99b0e01de05c46688d1bdaca9952d6f1fdccc677c25b4ace92ad","first_seen":"2026-03-12T16:05:53.686609Z","last_seen":"2026-03-27T02:24:47.352429Z","times_seen":10,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/L5UAtOgHbNCYGoLSEi.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/L5UAtOgHbNCYGoLSEi.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/Ws4NVZvz5RBpTPc4LJ.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8HDDy6bO9LRp%2F3uO2Go3WcEeYYn%2BuEXZjJj4Zl9sWBcNm5jlcNsRFMjxHpAR%2BQYmZ%2BRvZe8wmWLNkfk%2BNyO%2FIturrLmrBEvLolwQdapOUTUG%2B3O2F5hvjxT2QD0xcYY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"97c04264dae3b2c4ccfa75685b81024a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cebfce1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1682)","md5":"5f13c50ff5694e5dada894d90365af8b","sha1":"0947b0cde1993fd8f33e2f95c61ab011bac34d90","sha256":"9d606e22f9915ecf1810164644700f9a9ba97095212a987c44167b8b2363d2eb","sha512":"ecbf9054fa50c84d3ebe043abf7f166d0b614fb806e38385901d67949f96e4ed4a711070bff860e4e12676c652d3a460ad3c47acb74b0b4fb6c83ca96551ea4e","ssdeep":"","tlshash":"8231649ab41ecfbdb4b7497a5907d069900c4bddf235c64570e84a1317d6c38921ab28","first_seen":"2026-03-12T16:05:53.646274Z","last_seen":"2026-03-27T02:24:47.353731Z","times_seen":10,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/swiper.2TiRtZEN.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:48.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/swiper.2TiRtZEN.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/eBXMoFJaxOBNGz0vlQ.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f7QmUTARTIYJINAsX5%2FaEMBOvOO9QBH2QtSpTSnJ1Cj8npf%2FzOsP9QBKeg7mkV%2BOPOLRcTzGrneQhLW1ej15yRUesDrgfokT9WCozNyAY3UpP%2Bm4NAI%2F5TK1d84nDGnN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"daaad27e43f200d736847ed3fa5b2cfb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7bcbc971a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168030,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"95a46904909c67c1cb76c03b9371fbb4","sha1":"f63c84864c9fe86cfc16bbd485616fe4dc8caa75","sha256":"b508989708f818e369deddc209118239eee116c1d5ec13900fc595197bf3536f","sha512":"69a19a710ef596f7a7a8351ec6994b53975fdb2df1d7320365b86a1ed66d7c6572a1f227c29e086936c04c1c2c7c0863716911caef39d83513b282d081875ebd","ssdeep":"3072:Q7ManoUtYbXtirRIBvDEtFyPCENnRZDvPtyW2pYzof:QwW9tYbXti+B4FyPfNnRZDvPtyW2yof","tlshash":"eff34b997250b13242fb19e742768111b37909497809d4e8b1ad9ceb2d7b84812ffffe","first_seen":"2026-03-12T15:57:51.956398Z","last_seen":"2026-03-27T02:24:47.348484Z","times_seen":16,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/favicon.ico","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:49.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 26 Mar 2026 23:23:49 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mgLGJ20eHYgQYZqLSFBlrohWjdDoKcVeG2BxKRA5pUYK5k8Fe%2BGpnCFH0NwOHNpvzGkw1C3BZJJma7x0JgCtvl9nzV9NguecIq2ZsKzxl6DoLoYDHbgCdEJb96ux%2BST%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\ncf-ray: 9e29e7c04d8b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217293,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (58107)","md5":"2bfc39e5bcf2bed4cd1d5f8ca1ee788e","sha1":"7d5e9c7b5c05afacbbd70db73b6c5c1b497309ad","sha256":"8fd18c872a2c2a545f9fa7b4d6d0b83cbdadbf77693b17fb5e3509f6547d2a36","sha512":"9cc9552f2a0e323a878f8611811484fe3714381c564a3c0153ec215481b9b84d215ef03434df5f0ec084c35041ffed0583630d13af4772ec1e29ee46fa847f28","ssdeep":"1536:fSfHQ34OOb+gsPO4MD7czwKCfymtGKnXWpV9zWblHoyGrmVcxq605HJjPxRfoowx:z7","tlshash":"022428a153e0e2d8f755832dd5316c3621bf34ea7be0c28cc8cd6677aa1a8c9451cd6b","first_seen":"2026-03-12T16:05:53.658741Z","last_seen":"2026-03-27T02:24:47.351858Z","times_seen":10,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/lBueEm9VOHDN-in7Ac.css","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/lBueEm9VOHDN-in7Ac.css HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5u34PMf244psFL3vmJznamrkb%2FJcZxsxe0c1PVmdUv6drOXaGR%2FSIEHFmFhl4XS6t%2Fs4E2kJBhmQ%2F9RdSJCFxQjoE3%2FPQuYzeJE89dan%2FrwEE9nRRRjoHEyCRYgOqLe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5c10b0731e8e5015a20a47d52eaa4700\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccbf7c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9cd0259b2ea1270774b0bd885f3d6a59","sha1":"2bd73d35751da067cec030ba8558d8e1e0e08bce","sha256":"123bec169a48a47aaeb0595c6cca642ddbcbf14d78104b15cb8e836a746ab3f0","sha512":"77b2837f18040e9f7b1e3b229243a4863dab9406b64795e9227631334fe7088a19830d6dbbc9867efe8cad2251a8fc9ed6616a9f459ecbf02e5ce66a5516a26f","ssdeep":"","tlshash":"00d0224c2c40f07e29c431a80f0842dc08992204ff035fa43124bc3100ca6f62037c2f","first_seen":"2025-04-17T13:49:08.709612Z","last_seen":"2026-07-18T13:45:29.823165Z","times_seen":131,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/Ws4NVZvz5RBpTPc4LJ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/Ws4NVZvz5RBpTPc4LJ.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/eBXMoFJaxOBNGz0vlQ.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0IWgG%2Ft%2BxG4%2BmzHDb60zlzXmUEYlgizNvg4sKEu0zqlJKfdAKkZx0w7jAvX07Ofu7WONDQfFv45whsX7g4OmYKzM2sEVyGxNocCboezt%2FYuht4B1PHSAIjHgyTZhLLK5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"dc4e66981a2b87951412abdf44afd6ea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ce5fc41a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242364,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8b5c8e95e99f866e68aa84c0d5b462d8","sha1":"6ec715c3dd9763a05b0fcf926c91cb0c9ebfc43c","sha256":"be4c9e0ce62523b1c94f360176a6a07ac1a9d94257028495715dc3e282c1b7b0","sha512":"2373834bd95974dae6a1773ce62ce2dbb5a298712dc3496046dadd4eb39a06b26295f35b4f670cb899ce298930a80983b51d841b927537054a888e42194c2dc5","ssdeep":"3072:Vh7tnZY5kWoH6J+2JfnHYr0XyBxxSIl4CWpO+1+Q/4lPc:H7tnm5AH6J+2Jfn9Q0","tlshash":"88345c51740beb3ef0a3584968490800384d4fe6d51d99a6f2fc7b37abc6db0573a7a8","first_seen":"2026-03-12T16:05:53.641781Z","last_seen":"2026-03-27T02:24:47.378535Z","times_seen":10,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/wxZmKZk5igJxQxZQb1.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/wxZmKZk5igJxQxZQb1.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EojSfVQ3aelPOh4xA%2BPBT0mfRKCi4LSgpY3ZqfdBss7xtgvSZeQwAite2dmGcHJgyfJh%2FFCS13NSmLosZRJqz72he76OhHdvndzYJWnHUjCx4mbuGtoeuuGR9Sd9TSHi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6c24de7ca24d08ffa6c168ee5573fff3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cfcfe61a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2850,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2849)","md5":"1c48e28b7094d8753615f05e8f1ea31a","sha1":"f84aebe49fbc05fefd40efbfeda7babcffc7f69d","sha256":"03d9cb7abbea0c60000d92cc33725beae2abde2cde911e5330f241907c09e185","sha512":"1819a97541146f165378dca1b57187ae2e4ee14f9e59578bc16ff025b6f13712b540c64d8908d397c11b66adbe8f365934952c15c89fee3ddaa08e0259cfe661","ssdeep":"","tlshash":"a4518459fb80a138c7a065b164d148c0663a1b016c47a9dae1130d48633bb90b29e867","first_seen":"2026-03-12T16:13:02.553098Z","last_seen":"2026-03-27T02:24:47.377485Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/OC5XqFt7ABDgVpLstp.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/OC5XqFt7ABDgVpLstp.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WuELO4SQM3F4NdURnL1wdyuwhRJpwD9ikwbz35TaKd7wYsO6x4emIPAqvc8tOAPZmnsbBJj2sYiEjvpULxFpKqjxr5TY0LQq%2F0YHg2OMzHJAKCzGl20Y4zScfgU0%2BlJZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0e4f9624f6ba568f7417ffec249c50f5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d01ffe1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4102)","md5":"d6671830ce3170f121f56f4c2e4cfd47","sha1":"e8af4d096838cb83cf8b02f62a249d1e3610e4ac","sha256":"3899bcfa1ca85295972c777df42e4e3b1f1649475697327813c60178705688ed","sha512":"d57ec3aea00ffff425b9a5f8e1f428ea91c319a63a565dfd513b2d2f58dd1cf5a8e0aee8bd81cfaa4f147dd8bd633163f0f1bda81b59e3852c7c73ac6e01d0d7","ssdeep":"96:y3aIdRuMfPzqfcSFuxEV16+4OgLUq6zQKq6O85t6D1YU6p3V:fIdR7Pz4cSICVMUGKXVH","tlshash":"bc810f88780789fc84ed4624ac1764d0a5cf2bedd02809a1b0fedd1616d6da0cb96bf8","first_seen":"2026-03-12T16:13:02.619659Z","last_seen":"2026-03-27T02:24:47.364869Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/upload/img/694b9966e591.webp","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:52.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"GET /upload/img/694b9966e591.webp HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 55052\r\nlast-modified: Wed, 24 Dec 2025 07:42:31 GMT\r\netag: \"694b9967-d70c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mufpZB3wbaleX5QaaNwX8G9SddC2Vo9aiyiXkKnLoEL3fgUHdxQDvHUpuHAg%2FPCRnYvPlnQuPcrAgAF1TcVDGJ3KeFA10y0jQW2N0J2b2WQ5aMNfpQL1Nfl9WGiRYt7rwJdkLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e29e7d53c100b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x585, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"971bc65ba4c41e0ba413325ffaca84fd","sha1":"813839243f6d0eaa118049c2fb9d8f8722622159","sha256":"008996e94a29e87e17ec523d1e8f4bd7180d394dee9b4baaad4bb73f5885c665","sha512":"09f687b100491bed645c01a305541fa74c6170436021e66b043198d2fee9d38b56d9bc74d2d3d55ad2442c0a64ea68bb8802521bad96f43f0c2e6b625cf59b1e","ssdeep":"1536:LAgG5+VhR7iQ1hhwsl3zJacMYRJDsz9A2CIHPP0cf:LAgG5+/ksl3zJaqQ9tCITf","tlshash":"2e3302d71b9412f67cdd01fcc834247f6345d9b2b568f06ef4b1b8a437c948866aab88","first_seen":"2026-03-26T23:24:24.655445Z","last_seen":"2026-03-27T02:24:47.367591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":452,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/DKhkmlPgIABe9b3THL.css","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:48.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/DKhkmlPgIABe9b3THL.css HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EiCFO8fVCsFF5DfwJP7flvD07VhQRB9Sae1mGw7SkJdsdUWNmFuer%2BymHoCSeW3J2am6n%2Fd%2BnAJ8rf5xI4q5S8%2F5%2BxK4hsnwa3Q3r3aYn6dUgaxY0cDVJ827JxsaR1pE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"580faf26a48f843609e0e215f85d093f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7b9abf71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6391,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6390)","md5":"b9bc69dfebbe70d73fb49c7d1c117e62","sha1":"ac989820671a1c955dc822ca46a51100542f421d","sha256":"4b9984ff63ee09b3985851625a57806a2cbef2cd08aaab0b0afbb6a2c1777076","sha512":"2ef879789fa48068bb0541d4011add0144646b00f38ab43dc10f4116356232dbbcab71588516e1d03876a1c4cc62ff5e441ac16c29aa416103c436e17f4392c5","ssdeep":"96:3B5mSJ+MbpDAKneQYX+4JToiL5dKSme+jeHPdw297fzrEIuf/:fmUJbiKnehJTtdKSme+jeH1Zpbw/","tlshash":"d0d1b730a3142c63a2224f194b44e6f86ea450638ff38919f6856e2cd7fd8f4125eb82","first_seen":"2024-03-11T20:01:52Z","last_seen":"2026-07-22T10:29:47.572497Z","times_seen":508,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldtimeapi.org/api/timezone/Etc/UTC","fqdn":"worldtimeapi.org","domain":"worldtimeapi.org","tld":"org"},"ip":{"addr":"213.188.196.246","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:48.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldtimeapi.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:22:14 GMT","end":"Thu, 11 Jun 2026 23:22:13 GMT"},"fingerprint":{"sha1":"85:6D:0E:19:42:0A:12:4C:59:92:3E:B5:24:31:94:90:64:A9:4C:E2","sha256":"ED:8F:97:FD:43:E4:BC:D4:AF:52:3E:B3:3D:49:1B:46:6F:B7:0B:A6:F0:E2:2C:7F:E3:54:04:4E:87:22:38:DD"}}},"request":{"raw":"GET /api/timezone/Etc/UTC HTTP/1.1\r\nHost: worldtimeapi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-length: 219\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-window-policy: deny\r\ndate: Thu, 26 Mar 2026 23:23:49 GMT\r\nserver: Fly/58128dbb4 (2026-03-25)\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-ratelimit-limit: 30\r\nx-ratelimit-remaining: 29\r\nx-ratelimit-reset: 1774569600\r\nx-request-from: 91.90.42.154\r\nx-request-id: GKCHrMbaIKBYlYgEhsVZ\r\nx-request-regions: a/arn;s/ams\r\nx-response-origin: d892d5eb611328\r\nx-xss-protection: 1; mode=block\r\nvia: 2 fly.io, 2 fly.io\r\nfly-request-id: 01KMP7C55YFW4J1JBD8EWCR647-arn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":335,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a7f0ab15305ccdb89a8b29d908c2062c","sha1":"6cfdf7265914423a0b630982491c58dd4750238d","sha256":"9324cd995164b1cd23bc5f6f6832901273a079fdd48618eed6195e46bf9f8ed0","sha512":"125976e58d6ef09682211ab807acf4f61fb54525c88b2d0beac38eb635a19897e5aac1a0da1e3818b693800f0e7894d7bc449c536edab1eb146243df8cbfdefd","ssdeep":"","tlshash":"b8e0201985b104f7dc34c389c2097e8a1b28105e2ec355e46d526fd9dcb0c3c174de01","first_seen":"2026-03-26T23:24:24.660159Z","last_seen":"2026-03-26T23:24:24.660159Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1070,"timings":{"blocked":105,"dns":315,"connect":323,"send":0,"wait":308,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/kvbZumH0P4D-ECb4SB.css","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/kvbZumH0P4D-ECb4SB.css HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p5Igqi2VrPoFFXcH7XDbRBy64psRKgDypb5%2F%2Ft2t5VRcqwO3zW1OJ8%2BiiXVZN0G%2FzEdz9IT11c3HT%2Fsnm5SRqIOFUIvAx9so34z9DyLfyELXkDeBpHe%2F2tlp%2BC8o9fEK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7a2a437537b3afdd9ca560003ba553eb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccaf791a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6ad82a5f48465d9e5de0e84bd5f50d7c","sha1":"9c24e97b567146159614d9e16dfb68a1a3381595","sha256":"22525203f59285ea97b21dd7612463b3697f5ad782a756acf991fca8073a8a45","sha512":"ced62d3cac70b38203882f9ac47b97c0f4a8d900ac4374847fe0bf9e5b580cd5ec0ca4e796f627d25e1e51806258eb21a4b7429ab9e1b8c6e026314a0203945e","ssdeep":"","tlshash":"56d02b5a8c5851dcc77ef214963401dc01243213d5730c3ac57c7b167cc6b601526bd4","first_seen":"2025-04-17T13:49:08.656528Z","last_seen":"2026-07-16T14:06:01.910518Z","times_seen":102,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/VNEGdqHf7oDBCgJH_T.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/VNEGdqHf7oDBCgJH_T.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCOxd%2FkK3ZXp5K2KmuuKbaTwNbJHzcY9S8rVC0U1rKMgQncsC7Tc7L9EV3utsX%2FZInDcl3RdIBn5vxrXh95Om6pO2i1cZ%2FzbqpdGq%2BReTYWR6ysDv1BrsttZjPpgOZUv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ae0713c6e304671dc237bed777f4a5f1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cccf811a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (542)","md5":"b6d857f5cf7b0255cc21c6f96a4e96a4","sha1":"dd374086ef9e7673360c4cdfeafaaaa4c7dd75e8","sha256":"82d77ee4409513df02633a746e5e289b70c271e0c5e111bb06e92929d3e80b01","sha512":"36c2b520e09f26ef33d353385be500e81b60cb764029bcb3ad43cfbdee1ee110729e1ab32722617a0ddd9b57c9c4a42bbea67716219bee0c3a45cfd31ec74e5e","ssdeep":"","tlshash":"e3f0200be812c6bd95f71d942983306110887eecc72098c0f2f629b193c7c3aa42ef58","first_seen":"2026-03-12T16:05:53.702105Z","last_seen":"2026-03-27T02:24:47.368602Z","times_seen":10,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/6s1YK10GP5D-Jqhn82.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/6s1YK10GP5D-Jqhn82.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=99zaujxBh2soBw1GNQ2K%2FreKsYJp6Y2Yn%2Byl%2F%2BuGtuiB0MeOYpmP%2Bfkdxak9jY0pfeNz1chLFQk62qNXr4MYUobDgL5mCVKiUi9IoUEc%2BL8%2FABHtVXsGz0fvSuYBt5QX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4e2903b970f64208f60d9f584a3d7078\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccff9e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"211a7769b61a117e80e5769da2f23bf1","sha1":"14a4d955ef0efffed58673ee4623e16993753883","sha256":"3c58bed2345a422575a5129b3bf787bcefcdfebf089cf8b8dfc664949804df2d","sha512":"0a6ffadda54441addfe752438c67d6ba9207b1901ede150d276dde0ed3fe2ff703e51d7b00ce86ed5d26e32e6419d98b99ea86f9c440a6523edafa033fb3b983","ssdeep":"","tlshash":"9301258c58f6cbf9c4e702542d9a10a5d050678c9b35d865f05cad22638fcf095de73c","first_seen":"2026-03-12T16:05:53.664979Z","last_seen":"2026-03-27T02:24:47.354908Z","times_seen":10,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/zXUdCqEUzQ9fJSJlAC.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/zXUdCqEUzQ9fJSJlAC.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FBBXJs2vnwAD%2FAyZqlqqMvRKn7h2AzGAjvqodIgBpcAk8lqSeRYnwS8rxJO%2FLuFDOG%2F4ynQOOa8jnd9X8%2FjZwuJf937P4P%2FsUYEE7pGuNilrtamAlEYPMGsMiLlQnVM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7f5a349a93ae9ea41ff6c253ae941e36\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cfbfdf1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1809)","md5":"fcc823d67050a47c9f2ee6d4d78cea96","sha1":"76a351b12e1c59938a3422026d2edefc7187492c","sha256":"9b4fe2e175214a9ab0ecaa20c83f33cfa9676db8168783f7e8cddd8bfd070942","sha512":"69de82e5fea810d7b46ac4040be70718e2dff840294283f97d8c8141ed067fe16c8258cb30c5faba460376eff32d0d7e389eba7fb6b54ee65180903f405e680f","ssdeep":"","tlshash":"98312390f6b9d074537a58e1c4391610e1591f457119f8e6d4ff0d825f8684af92bb2c","first_seen":"2026-03-12T16:13:02.572353Z","last_seen":"2026-03-27T02:24:47.380526Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/BbUxwLIiXlDMjAv_SI.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/BbUxwLIiXlDMjAv_SI.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9R%2F0wyD589i4QaqcFfqoEeWMXAfb0jjDnJfBurIwWs52iJa4SbXS%2FO0kB9eogiEfYSV5%2FsJjF90FdOlJHViriX6V8hewmnj3zSgUSeVpHGZLcsYA8Vmtiwv8jjvePWO1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0f2ff04f5bde16f47356a370af423477\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cfefeb1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11240,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9241)","md5":"1815fff3fe827ef90ca4fbe7d6ebb66f","sha1":"7b73c54dcd39be62425c749ec41dcaf5cdd4f326","sha256":"4164a9709422cff89f777f378bf6560fc2d212ee4034008ca8cab6b2a57ffee2","sha512":"85662c854f936c2de8a0e8c0931d37dbd7a07ed9cf8e3ca87475c710debcb26f8d10963ea06b1ac591d9811c1ad76fdbdcc9d42ef0b6e500a791dec9f77053be","ssdeep":"192:s0h5ZdhxjCN3pBZlydACbIc/3H+pp95mD+S2FOh8SdosaPvUgNe3flz138mkjtAK:J7vhx+NZB/yj2kDd2FOh8Sd8P3wtz6t3","tlshash":"04321c9678007035877799c4c09909a5a229378cf239c6d2e06e3c363b599b4f0fef2e","first_seen":"2026-03-12T16:13:02.600699Z","last_seen":"2026-03-27T02:24:47.350713Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/J61zxinGrUCTlq95ZT.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/J61zxinGrUCTlq95ZT.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vG0KOkWxXOPvpcnDCQiZoAqvgpY%2B90d2RJMk0Dn96w%2BVBogWYQ%2F1AJtbBZq0O6%2FZ61YCoFOd9ldDJc8dc9P5Ewz5tJBglMXZZmXc0lLXCl0i3fCEL%2FCvyuRRqWF%2BgG5T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"10401f0e633e2bdb8c3bd7d6f78df485\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cfefec1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (502)","md5":"c30c66d9b89d66b1df5cbed40efb9e0b","sha1":"7c566549e87af138b54914a6f8a2b7cfbace1174","sha256":"c3ba37c885b8873ba4d4a39b232cde4b94007c6d6a08e2f398862f2a1e2dd827","sha512":"9b6f52bb71bc75c2c2a17d6ad6bd76ffc34c342af08dec6959b33f700f0a3d7971bfc3c32df327e521c399c5691eb97166d44df8c7bdd16d772d5dd812c25a15","ssdeep":"","tlshash":"abf00e65d0c8cc30033ffad882586491031cceb4c73101d4ec4a6a19f3de824c51cf14","first_seen":"2026-03-12T16:13:02.604836Z","last_seen":"2026-03-27T02:24:47.360786Z","times_seen":6,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T23:23:47.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:23:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pyTRffaSUKXPopwk%2B7vK1pbR9LsLJS7bK5NUqpWpnwDbbPRAGj1tj5YrIL2KFDWJOhN4WWjXd403jQeb2qYQnfpGzs0csqBUE4yYrHv57OXzHGEf%2BiflVCGte3L26j%2BF\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e29e7b73a970b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217293,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (58107)","md5":"2bfc39e5bcf2bed4cd1d5f8ca1ee788e","sha1":"7d5e9c7b5c05afacbbd70db73b6c5c1b497309ad","sha256":"8fd18c872a2c2a545f9fa7b4d6d0b83cbdadbf77693b17fb5e3509f6547d2a36","sha512":"9cc9552f2a0e323a878f8611811484fe3714381c564a3c0153ec215481b9b84d215ef03434df5f0ec084c35041ffed0583630d13af4772ec1e29ee46fa847f28","ssdeep":"1536:fSfHQ34OOb+gsPO4MD7czwKCfymtGKnXWpV9zWblHoyGrmVcxq605HJjPxRfoowx:z7","tlshash":"022428a153e0e2d8f755832dd5316c3621bf34ea7be0c28cc8cd6677aa1a8c9451cd6b","first_seen":"2026-03-12T16:05:53.658741Z","last_seen":"2026-03-27T02:24:47.351858Z","times_seen":10,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":63,"dns":40,"connect":1,"send":0,"wait":181,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/eBXMoFJaxOBNGz0vlQ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:48.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/eBXMoFJaxOBNGz0vlQ.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hWFNMdjms0ptqJVfehnG1iwsz1lVhbCU8RLZqyNLMMX9DGvflVvWY5%2BOCXXO0mt7WuSfFCh0paTdc9elf0M92Gvjy29G7uwnC4oEsCc3xcuTJI0Uk4AOEQlHWZaQfERX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ba21dcae8ca9d2e472044cb5aee8ddf3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7b99bf61a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1579649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6914)","md5":"771f8a0b77bd8736cbe3efade747fd09","sha1":"adb003e2b52e1cabb0c1b74cc476ce5a665cbeec","sha256":"ef0c6fed62e6419d9acc1070af70d7f35abf2f338d955ab743354999e973eebe","sha512":"492abedbc0bb710fd22b82838d4bbaddec2149630c12e3cc23921c83134c3df9e2970f2c192634930c7f7a6cd11cfca876a5646879cfec6d3dcecb569b43bfca","ssdeep":"6144:iNKv3fO48SMcZN5COAT2CReeh420HyykYkThuCpyMo22:iEv3fO48SMcZN50T4eh4HktpVo22","tlshash":"cc25f9281a6bf744e419c0dbfa373d84c59dd18aa44724d24f754bb31ba2793eaacd03","first_seen":"2026-03-12T16:05:53.692925Z","last_seen":"2026-03-27T02:24:47.370053Z","times_seen":10,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/RQ8MsYZ9TKCALez9Y7.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/RQ8MsYZ9TKCALez9Y7.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSWCSB1p9QyNfDYAgIqKwBHw3T4qNDyRXh2JpdyDreLHrVZhgr5Od7wZsFyNz3Bt%2FuV6KlmtHNqGi8b09v4kWsfZ5a0zpoW%2BWKGLXwStNt5dMq3LdluDEQqjPopYQZ2p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a008f38ba967087d3bfdd0f08b2ecde6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccef961a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1245)","md5":"9aa07cbc4f20cac68fcca6d0513545d3","sha1":"abf1038751446a41bd3a9b7275b43601b7e0e8f3","sha256":"39ae95e6c35508e7322032c8979f1b74853cc07801ebc7cecea0bdc4ab6dec10","sha512":"782fa9caef62b6138436b8b0a3e866b5288d62c8696d4ac3e1ebcca722ec51ec1d8f180b038d8b03f39d721225936bbfd03c04dd8f11bdddc18d2d94b72f4714","ssdeep":"","tlshash":"7f2121a2b09df17d42ff3db6a86b101ac36167d0236001cd67ab054e0b269d1957ba1f","first_seen":"2026-03-12T16:13:02.603082Z","last_seen":"2026-03-27T02:24:47.354315Z","times_seen":6,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/WP7530miwZBRe9CuBZ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/WP7530miwZBRe9CuBZ.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=129yxQcBtrjsUFKIYKyOjsi%2BSQOoVF54yh8wfMlPHtDRQSpAdCFFxKFUtBgwmtDCzZQiVXhoSO6VkFd%2BzudCI2%2BYc0Ui38xs2SkAnVvseMa52Nx8vGqDGuzRbxtnq2Zm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"49d8f4c6a45532d8007d3d98afa46e93\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccff9b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (796)","md5":"a665819634de0b6df52cadbe02eccff5","sha1":"ec23a42679c4f77ebdf97c40777e2a73556e5726","sha256":"0b1fb4ce14380eeb30a603be4c16713f01e64aefc88daacd824ea2389233e60d","sha512":"e77166da0a289eac36483b2cfb158c56d6a37a725530b5594c4c34a58f04421adecdb68329f5bb8fa13ebe8d735fbbb9b10a6110a605938aa938527f0d177320","ssdeep":"","tlshash":"9021540d7802cb78c8a749a8e0d80801518c7feb9778c4a1f0eead2667d1db4452a334","first_seen":"2026-03-12T16:13:02.526132Z","last_seen":"2026-03-27T02:24:47.35127Z","times_seen":6,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/api/adi?rts=1774567431092","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"GET /api/adi?rts=1774567431092 HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nst-lang: en\r\nst-ctime: 1774567430000\r\nst-ttgn: 7a756d0734acae3deaf1fdfe9b68adb3\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMHFnHPW503mkljzyC%2FsUJGUyD4JqPs7NLbs9Ico0iX8uPCxyVyXMfKpYMvuX8wiCAPcDh70UdHIv0iVNH2TmkH75%2FkvM0gfCvIS%2BUSfvlcdbXXpno7ifLKu08QHk2ZxVUO3jQ%3D%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dhgatemall.cc\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e29e7cddbfb0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"1fa7b962cf496cf019595a505bfb9ee7","sha1":"18ca4c53c73ea6121cf9bad8a7e799f6bfb8af1c","sha256":"d86fc4969c0418a7b5a7977256bddbf77889c8e0239b99632dff660aecfb8b07","sha512":"f184714956588b71fede5133fef347487654be1648b23ab129c8e7b011856b48ea2ee8a54e447bb671a66bb92b430bc3cb37662c1dd120b49e3543bf6313ff09","ssdeep":"","tlshash":"45d0971840ef02b7f02a32807b73c901a8aae862c9ae0c808c1802c9aa35164ccdaa42","first_seen":"2026-03-26T23:24:24.675021Z","last_seen":"2026-03-26T23:24:24.675021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/Cl9pxfgttjCZjweQx8.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/Cl9pxfgttjCZjweQx8.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/Ws4NVZvz5RBpTPc4LJ.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRWYHhOuzNjm8d6TYmjcoDYMVfDgmD46cGsNEDdAWVgmu%2BvDYuYxnt5GvKs5Emm6KRE3Kw1ndaLtqkcDgZ%2BqTlSHDJnJFpAsK5wz6szf9tXGhe7jtKTGk6oY86yyiQl%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"138cbca3cc14246a50e7dc6e16597b4b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cebfcc1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2251)","md5":"a22a265b81bea347736a68493d0f4af5","sha1":"b915945462e9913031a55c0b1cd920d6834eeaa8","sha256":"d8dc8f6490a33d727d4ae6c14139f18b5983d1fb984ee3ff19317675602a8468","sha512":"f845180f0c694ff42f6430984196950932991d88aaadb827b3668edd67d2db953d97c4314d978454cdb5df025ac1ff89709e536b6c4f5a6f1b11166130b5ce59","ssdeep":"","tlshash":"39418458f411dbbda27b463888520050620c1fefd524eea4f1ae1f226bd6cb46596f78","first_seen":"2026-03-12T16:05:53.663187Z","last_seen":"2026-03-27T02:24:47.350215Z","times_seen":10,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/PrXeCEJSeDDR11aM3A.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/PrXeCEJSeDDR11aM3A.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jUVRy4LRjVzu%2FqVHqDJ7EJxSNr34kPYNp10qEX7283%2Fizo%2Feofcm%2F1vfjCE7OvgxoEb40c8c6zlsFT2Tpej3ph5nySXVzexgW2YX%2BnCHak9AgTp4fvLGHi7jQHdRjL9f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7319f56756b5faee0fb4244043e9d6f3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d01ff91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"83d16eefb692b9f65347da4c6f21c6aa","sha1":"301d40415be3bdbc43d7bc547d63b23810d35e02","sha256":"b3b5537bc03685c9e5cde5819c142b34252696ddf283536bcc919bfaae73fea7","sha512":"0d9336621e445923adb89ecd7cd2cde0e759328465ca8dfc5dc3dcd5adf11a147691e6998a4fc2efd9b7fcdefa5c1f18a38ed5c5e62f4d312230f31a5d4cd062","ssdeep":"","tlshash":"afb01201878801e515a9009e4b51e7f82572001d1b3846a4701d2e5487053894d0f911","first_seen":"2026-03-12T16:13:02.591009Z","last_seen":"2026-03-27T02:24:47.376425Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/i1FLjo2Ur2Cn49JsZG.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/i1FLjo2Ur2Cn49JsZG.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LhxjgD42OQ%2B20HuZB9nlCpllnJ%2BnY%2BVe0CC8tpoGXI5IkRS4%2B5x2HvyxoD6FCcGc3wYTXNC7zPjpDpTKqyrvI5mU%2FmUZ9Rq%2FIfcRPDxmQZVT1juDTc1K%2F5bm0fDgmuyC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5b8f9605a55bda04d0f4c6198bddce7d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d01ffc1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5949,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5948)","md5":"0f190a327f6cc9ef6dd6e339433f515a","sha1":"bd012eed1f2679249977846f016650faf39e8d44","sha256":"1c338593b9a0ecc3993554888f202e4ec1a2155c4709e2f12ab1b9d0a962ba2d","sha512":"43f58aaed56ef7ca158ca81ebae58e5b5ff99e5563b8b19b97fe336e0019429ecde1cf74c5d0a4ca9a82d065e1bb9b346b63fe6183d4815dfcbabf6167955d86","ssdeep":"96:Dw9k2moXFWGHuMmG1nQD8moXFWGHuMmG1n9mfH/pq0eU4kNsqNtNNNP:s9dFbmSkNsqNtNNNP","tlshash":"4fc11581cb8fea0b873148c03b27ba9d939e1bcc709e85c3c389dd6c6d1cd5566569b4","first_seen":"2026-03-12T16:13:02.542648Z","last_seen":"2026-03-27T02:24:47.357689Z","times_seen":6,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/api/lang_j?rts=1774567430734\u0026l=en","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:50.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"GET /api/lang_j?rts=1774567430734\u0026l=en HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nst-ctime: 1774567430000\r\nst-ttgn: 7a756d0734acae3deaf1fdfe9b68adb3\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dhgatemall.cc\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cp9cjuOfWNtauA6a821S2EPMeGtMvYHA%2FHfDiNJWhH%2BopypN7j5xz1tH2otuVUUr46eR1Y7BkgeL%2FlwSQKiYatk1inYaXCnA%2BrRtNFGUFz2L%2BIGXwKep2mItzyDXKBGB%2FcxWmQ%3D%3D\"}]}\r\ncf-ray: 9e29e7cb1bf20b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31404,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (31404), with no line terminators","md5":"533b76e6f34b13e09a9cb9588b0cd983","sha1":"1f3ac0d9eda2caa5f87a88030815ac6dfbaa06dc","sha256":"ddedcac37590c191afd9015d87424c8cd71dc4ba90c86da5d5250fece28e7a5f","sha512":"937c241bc0a8eba1f2568df861773baa8c0b2b1d22ed7805fe03ea86f789d1c00cc6b1afd750e956f68fecc210c3a6535d3456ab5bcd7803317f4e6431da179a","ssdeep":"768:MPI4hsVkC74lP3JEDCJTEfsO/MoNMP6lg8HyQC:oI1kC7Q3JEDCKsIMTylguTC","tlshash":"f7e2f170d83c22cd7096ab5574774414aa432c6dbdb614ce087ab1c65bdfb9a8dc2f28","first_seen":"2026-03-26T23:24:24.678081Z","last_seen":"2026-03-26T23:24:24.678081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/5EfXZJLrijBCNy5ayT.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/5EfXZJLrijBCNy5ayT.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmToYt5r9M5AJ9l3gkmsZyvtE%2FngWOmRWlTkjGhlgEr5FNEJrpPrNbtOqtYYBluLw7cBxvCOpGmJTmsI9MOP6nxxUdzPPQaVC2AaszBX3fAjqF%2Bmb5v66B8rCldzlACR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"13720b98de369bb86a449ba3c1d94054\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cccf801a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21902,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (21901)","md5":"f3091ab88fea84faea93889e033300f6","sha1":"7340ce1b233acbbd3cf6532fcb13567ca86561ff","sha256":"511bae8fb94cd76acc1b18b185c5137fab38a710a7fb731a7e49a8b1db80cbbb","sha512":"2cbbbe8f4deb1debbbe0ef72032d53b56ce17465ba54df6a6d8b58770a480fa35cb0ffb7aa8e8ca9e9650a4bfc41537f4dde1a370c256fc57dbbfddf0021af64","ssdeep":"384:60uiLXabmFpBl3Cuaru1iacFmxMYanqGzwcGml:60TLXemFp351iBFmxq5qml","tlshash":"15a2e7746030c23afd99b0e01de05c46688d1bdaca9952d6f1fdccc677c25b4ace92ad","first_seen":"2026-03-12T16:05:53.686609Z","last_seen":"2026-03-27T02:24:47.352429Z","times_seen":10,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/OC5XqFt7ABDgVpLstp.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/OC5XqFt7ABDgVpLstp.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WuELO4SQM3F4NdURnL1wdyuwhRJpwD9ikwbz35TaKd7wYsO6x4emIPAqvc8tOAPZmnsbBJj2sYiEjvpULxFpKqjxr5TY0LQq%2F0YHg2OMzHJAKCzGl20Y4zScfgU0%2BlJZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0e4f9624f6ba568f7417ffec249c50f5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccff9d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4102)","md5":"d6671830ce3170f121f56f4c2e4cfd47","sha1":"e8af4d096838cb83cf8b02f62a249d1e3610e4ac","sha256":"3899bcfa1ca85295972c777df42e4e3b1f1649475697327813c60178705688ed","sha512":"d57ec3aea00ffff425b9a5f8e1f428ea91c319a63a565dfd513b2d2f58dd1cf5a8e0aee8bd81cfaa4f147dd8bd633163f0f1bda81b59e3852c7c73ac6e01d0d7","ssdeep":"96:y3aIdRuMfPzqfcSFuxEV16+4OgLUq6zQKq6O85t6D1YU6p3V:fIdR7Pz4cSICVMUGKXVH","tlshash":"bc810f88780789fc84ed4624ac1764d0a5cf2bedd02809a1b0fedd1616d6da0cb96bf8","first_seen":"2026-03-12T16:13:02.619659Z","last_seen":"2026-03-27T02:24:47.364869Z","times_seen":6,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/BSjqWU9rs1DsbVAnFv.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/BSjqWU9rs1DsbVAnFv.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2a1aYvGzWC7mWtG%2FGfXpNdZqqpwbWSEO%2FCgRJ3GYIFauJScjrNAdoQLLTjf5wgHXiAB3AnH9%2Bvg%2Bympg41zhkgxDtqhny%2BHvHvlM01PSj5Oj8wDCM8xcn884oROf0RZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b0cb54654289631d0f5d661cd06c68f2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccdf881a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"db19ee11c88fac961b07945673e5a864","sha1":"8ffd8b1c7de5008cfd0765b9ac22e761fd0d7004","sha256":"66d1de4a0f57feea9aba0c91dd28422f420bcb48b7d0ebe33f489fbc7910b03e","sha512":"55bc334e0aa29a1507a7c2abef7023fecb311bc95d4e7539d7f7058c406c3bd6c04f8e912bcf228624ce1bc1ab2d488226e737f1688f16c1b3834f8fcd17d393","ssdeep":"","tlshash":"98c08c47b44283e052660c8401664d821e750a9817469ec090466ea80b710b8ca4aaad","first_seen":"2026-03-12T16:13:02.518414Z","last_seen":"2026-03-27T02:24:47.369575Z","times_seen":6,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/BbUxwLIiXlDMjAv_SI.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/BbUxwLIiXlDMjAv_SI.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9R%2F0wyD589i4QaqcFfqoEeWMXAfb0jjDnJfBurIwWs52iJa4SbXS%2FO0kB9eogiEfYSV5%2FsJjF90FdOlJHViriX6V8hewmnj3zSgUSeVpHGZLcsYA8Vmtiwv8jjvePWO1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0f2ff04f5bde16f47356a370af423477\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccef901a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11240,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9241)","md5":"1815fff3fe827ef90ca4fbe7d6ebb66f","sha1":"7b73c54dcd39be62425c749ec41dcaf5cdd4f326","sha256":"4164a9709422cff89f777f378bf6560fc2d212ee4034008ca8cab6b2a57ffee2","sha512":"85662c854f936c2de8a0e8c0931d37dbd7a07ed9cf8e3ca87475c710debcb26f8d10963ea06b1ac591d9811c1ad76fdbdcc9d42ef0b6e500a791dec9f77053be","ssdeep":"192:s0h5ZdhxjCN3pBZlydACbIc/3H+pp95mD+S2FOh8SdosaPvUgNe3flz138mkjtAK:J7vhx+NZB/yj2kDd2FOh8Sd8P3wtz6t3","tlshash":"04321c9678007035877799c4c09909a5a229378cf239c6d2e06e3c363b599b4f0fef2e","first_seen":"2026-03-12T16:13:02.600699Z","last_seen":"2026-03-27T02:24:47.350713Z","times_seen":6,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/VNEGdqHf7oDBCgJH_T.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/VNEGdqHf7oDBCgJH_T.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/Ws4NVZvz5RBpTPc4LJ.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCOxd%2FkK3ZXp5K2KmuuKbaTwNbJHzcY9S8rVC0U1rKMgQncsC7Tc7L9EV3utsX%2FZInDcl3RdIBn5vxrXh95Om6pO2i1cZ%2FzbqpdGq%2BReTYWR6ysDv1BrsttZjPpgOZUv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ae0713c6e304671dc237bed777f4a5f1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cebfca1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (542)","md5":"b6d857f5cf7b0255cc21c6f96a4e96a4","sha1":"dd374086ef9e7673360c4cdfeafaaaa4c7dd75e8","sha256":"82d77ee4409513df02633a746e5e289b70c271e0c5e111bb06e92929d3e80b01","sha512":"36c2b520e09f26ef33d353385be500e81b60cb764029bcb3ad43cfbdee1ee110729e1ab32722617a0ddd9b57c9c4a42bbea67716219bee0c3a45cfd31ec74e5e","ssdeep":"","tlshash":"e3f0200be812c6bd95f71d942983306110887eecc72098c0f2f629b193c7c3aa42ef58","first_seen":"2026-03-12T16:05:53.702105Z","last_seen":"2026-03-27T02:24:47.368602Z","times_seen":10,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/V7rEOsROY4Sw_FLNPx.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/V7rEOsROY4Sw_FLNPx.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4S47OQTnIuFFFOcXY3erTeO6HuPL6YH31kbD2b1fnOQnDGTZe0HMI0Afcdy%2FTrpjnDSjXG3lf4U%2BVkmTd%2BwUQs3R4mYPCYLaUA9iUEEYnxaLZP8eK4PXScGeqZ9LG0Nt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7a97796ac965d781d8f0704506135b8f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d01ffa1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14948,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14947)","md5":"94ac7234b161bf223a620eda3fec043a","sha1":"fc27a3cd7728f022d9e0da3e9b1634f636b5cae9","sha256":"574763f7eddfa8d48089504de68c66ea9cf43ed637a2a846b66fae8733b983d1","sha512":"e035c6c255c69695cf1c3431e5446fc5d6a95aa03fca44c9af00fbe0f9ae28dda8b7fbc7fd0b90826e4fefdc77baafdbcf390777ac0cf68bb83ab0e27d7c90e5","ssdeep":"192:7QygIDNnwkmJJexKjWHovWEj2V5IrscoNtBeNqaO7K+UawhZC7Jfk25mXXiNkauz:7NhnQvhjQeWyFCeMaO7zUaP7Jf71ulx","tlshash":"82629eb73b98d67e8b742cf8600a55f2ecea585f6ff54d84d89840a487e0c90cd5d782","first_seen":"2026-03-12T16:13:02.586276Z","last_seen":"2026-03-27T02:24:47.38191Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/6s1YK10GP5D-Jqhn82.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/6s1YK10GP5D-Jqhn82.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=99zaujxBh2soBw1GNQ2K%2FreKsYJp6Y2Yn%2Byl%2F%2BuGtuiB0MeOYpmP%2Bfkdxak9jY0pfeNz1chLFQk62qNXr4MYUobDgL5mCVKiUi9IoUEc%2BL8%2FABHtVXsGz0fvSuYBt5QX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4e2903b970f64208f60d9f584a3d7078\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d02fff1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"211a7769b61a117e80e5769da2f23bf1","sha1":"14a4d955ef0efffed58673ee4623e16993753883","sha256":"3c58bed2345a422575a5129b3bf787bcefcdfebf089cf8b8dfc664949804df2d","sha512":"0a6ffadda54441addfe752438c67d6ba9207b1901ede150d276dde0ed3fe2ff703e51d7b00ce86ed5d26e32e6419d98b99ea86f9c440a6523edafa033fb3b983","ssdeep":"","tlshash":"9301258c58f6cbf9c4e702542d9a10a5d050678c9b35d865f05cad22638fcf095de73c","first_seen":"2026-03-12T16:05:53.664979Z","last_seen":"2026-03-27T02:24:47.354908Z","times_seen":10,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/GWyYe9LK8nDXepvGXJ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/GWyYe9LK8nDXepvGXJ.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUu1ErIMqOWePHSPT5hDXD%2FYVDboInYS1aKdvjgTd5fE92FoUfW%2BN7TzmfZldkS44o7c3%2B6SxXqmcKxmuYUs3wbMnf%2BlS3PAFpgmyw69a6uZg8i%2F1nOlkp63YF7ppKmS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"119afa0729046f6921118de243c936cb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d028041a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":717,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (716)","md5":"b4a62d803d4daf12869d00ca02517960","sha1":"a7ca1d4819b4d995faec1aac5c5746b4680bf869","sha256":"d651c69bcf842b90022e9cff8a6f85ef7a22038cc10988afac0739e4c941ff96","sha512":"7cdcc2280a1d627400edbfeb946bf43cd2bcfd31428d0e5c3e0d0d77cf5dc8ff7e3c152261f0ebad47cf2b0b5e73ca02d3d085915d60b9b3401da0a6f5b0d00f","ssdeep":"","tlshash":"3c01fe42b674b690a3b91892c018568225f64b6a3a42d0f0b50d1f826b3fe2694f9f59","first_seen":"2026-03-12T16:13:02.537045Z","last_seen":"2026-03-27T02:24:47.346287Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/olChoSWJEtCG-puyAk.css","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:48.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/olChoSWJEtCG-puyAk.css HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0JglEG%2FqW1Oco2Cxr8drCn0Bjvn7213593vofh7Laodbkp8u%2BIjcfOMiGA%2FuWTmPXH5TzASrxKeJghd50E8zktyGl1Ur5lYe8qy853k%2BdBVfSHmhGBAb63JFjRr%2F%2F1J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"25a08ea47690b4ec545323eb5b213355\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7b9abf91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046861,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"d493b078dd77439ebdc00f68f62da5d0","sha1":"745966c158e93442f75332a8eb5306bf08e8da26","sha256":"f8ddc6f94c7c1b52fc08444aa95434fabd4f86fdc191baa4806177cd2826cb80","sha512":"c42372360b63eccc639144aa7e5fa23e651e4ded5a6cea36b656f45f0ffdd936ebbd24a7b51282582013ac92f75d1e7d0e2734a9cd6b392fed474c4675c5bb17","ssdeep":"6144:U5xsaRKNSgVs6snEQO8oQ4hiHxd5UQeG7PjZSa/3cducdWvaUDd3BDXbIoRJ9LCf:U51fvHxDmmP92ucgHC","tlshash":"5d2529782b84113cfc0bdf729ae48adc652de153db534ed8a609763483c72e72673698","first_seen":"2026-03-12T16:05:53.654321Z","last_seen":"2026-03-27T02:24:47.386731Z","times_seen":9,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/Ws4NVZvz5RBpTPc4LJ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/Ws4NVZvz5RBpTPc4LJ.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0IWgG%2Ft%2BxG4%2BmzHDb60zlzXmUEYlgizNvg4sKEu0zqlJKfdAKkZx0w7jAvX07Ofu7WONDQfFv45whsX7g4OmYKzM2sEVyGxNocCboezt%2FYuht4B1PHSAIjHgyTZhLLK5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"dc4e66981a2b87951412abdf44afd6ea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cccf7f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242364,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8b5c8e95e99f866e68aa84c0d5b462d8","sha1":"6ec715c3dd9763a05b0fcf926c91cb0c9ebfc43c","sha256":"be4c9e0ce62523b1c94f360176a6a07ac1a9d94257028495715dc3e282c1b7b0","sha512":"2373834bd95974dae6a1773ce62ce2dbb5a298712dc3496046dadd4eb39a06b26295f35b4f670cb899ce298930a80983b51d841b927537054a888e42194c2dc5","ssdeep":"3072:Vh7tnZY5kWoH6J+2JfnHYr0XyBxxSIl4CWpO+1+Q/4lPc:H7tnm5AH6J+2Jfn9Q0","tlshash":"88345c51740beb3ef0a3584968490800384d4fe6d51d99a6f2fc7b37abc6db0573a7a8","first_seen":"2026-03-12T16:05:53.641781Z","last_seen":"2026-03-27T02:24:47.378535Z","times_seen":10,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/oqxzsCaTPTDZcgWOW1.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/oqxzsCaTPTDZcgWOW1.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2FK844hu1aSU%2FYa57BqmTTKZj%2FHCjAxdMeONp%2B6C7wEpxvhwMNp6Gws%2F58cLazyKp2PIAu9APcm1fPnvYAXoFYL8L6x6FlzUe6kIl9XCOZiOWvHvUPMDD2jlzVh4yDGv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a693c506ece0acdb28f54133d3633df1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cfcfe51a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1597,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1596)","md5":"1b9d68132e5fe60103b9a1d847d03d46","sha1":"7e21228038abf064513e87cdf513a4012c35ca3e","sha256":"fd731428d0c63a424e0d347bce7f59e3063d7cc68958fd4879ef6768389c6d11","sha512":"e5922c22a5ba2f551accc8fd0f4bfc1f3f356e16772435ce8f1868fbdd4c5d4b5a1e45c108ba0d55516ed003e4be1ba6833a48517b0c8b1dea917c7d7d564aa2","ssdeep":"","tlshash":"73317309f4c5717482a75cf8c3350a57d3c957cc303997d07a2e886e06aa4d96a3ab8e","first_seen":"2026-03-12T16:13:02.613992Z","last_seen":"2026-03-27T02:24:47.382817Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/V2auDc63BzfuKCiFNY.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/V2auDc63BzfuKCiFNY.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LH8wsX2Ph6GdDEe5TrdPynF5bqvRPIATZxYXOHPAamM0fekvqt53uQbVEqXhiGL2%2BImW4hWl6I%2B2fU%2FaApvUMfbylkvrKdUIN8FuXCS2%2B3NhOsTFHRY49O851KKHy7u6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"75000c3ca1beec86dd12608ad3346add\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cfeff01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"711ee5dba1ec9dcacbbc88fd2c3d5d3e","sha1":"1f4bc55503cda6d82e6f84699b492f34f1432c22","sha256":"432805daeca17316b2a857f79787d305692e1c0f4a8ceb2bd9f8a1fadc9cfc66","sha512":"78b412fbab0c5076a35984b455b0d097d5e87916dcadf343b3e54e0e081516db0005a28f112ebdda265f6e6f70f89053a2404f26ce622a799433a566d904e25e","ssdeep":"","tlshash":"8fd05b45c988036d2ee214675b1667f021f701584a7491b8555d0a34df1e70d5e17e21","first_seen":"2026-03-12T16:13:02.510577Z","last_seen":"2026-03-27T02:24:47.364304Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/8pRQjbBBFtTQvgOYj0.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/8pRQjbBBFtTQvgOYj0.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImE%2BnzpFUMk7n83gk%2BRPcH5h%2BOOMOVjPE7WNpp5QC%2BmbOEQ8qrha2snT%2BPk1VkOTACwRZ1FtCdNS6dw1kwms4xjTJ8fmx3onFwrYyvViY0Ot2Zatv%2F%2FtKLlvWOZwSUj3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8ef2afbadde30edcd64efde1eb20c7b2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d028051a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (706)","md5":"1dfa0b7afd100a7a97bcf21b82c03b56","sha1":"35d9160cc0fb844e3e263e0d21108b92c41aa027","sha256":"24f97089480037efb97d6b9d83d940533679a143aef8065689ae33b5b621a954","sha512":"c36c32020f5b6761dfa9f449132da64e3e982b9460fe7e25b0c73082616bb6f491f6300fec4c404ffc02efbd42d069b4e4ae63d9ede1157ff1fe63c877b1beb9","ssdeep":"","tlshash":"0301445ebd9eeeb8307344f115c61869210a8f2dfb7948c0f2b21b3012d2810901b78c","first_seen":"2026-03-12T16:13:02.606292Z","last_seen":"2026-03-27T02:24:47.358787Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/eQR0nxjHvHCTj41bwz.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/eQR0nxjHvHCTj41bwz.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Knz7ewpgOj7U213rSZavb1szXstfeL%2FfOjgMMl5Tj0NUF%2FJU7VJK7vJzrL7IO1pWR7d6E6DkXhDrdgukx76jeJNA6bZoOBb0gw1scD%2BcH%2FktNiKAXnm985BHc%2BktYY1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f23d3eb29195a77e86281f1e7267c5cd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccdf841a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5319,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5318)","md5":"f20eca31d26444f86d341e8248d5e393","sha1":"eea45ad610a82735797481e12614973af252396d","sha256":"91e095ef2a074c9086fdd7605e08e311cd5a868bfbf6bc03e663fe47faa067d2","sha512":"51fe3975642562f95b8c8c4817078032301ff0ee5a9fbdadccf14ae5d6121df9518ca8d37ae6f12522aab16089c4d1d2391577b8ef843a586aa49c1fb9fc7207","ssdeep":"96:0fXLjjA3qXkDai6xPtZ2ulKgRb2vbEj+U+Nka1Y34XJSq6F077W772E:0THvXKahVPlKXT4NjKYoXJQ0vW7T","tlshash":"b2b1283278a239036cc075f7794ccbce0e50053ae94398c3d2ea9e86d294f1cba69194","first_seen":"2025-05-15T07:17:42.12509Z","last_seen":"2026-03-27T02:24:47.36544Z","times_seen":88,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/fEDthhGDiPBLbDLbr_.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/fEDthhGDiPBLbDLbr_.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHf20zWF1qhm6MgBaQcO8Od0OGooRczrkuROJMPAajfLgpaUO%2Bx09nMsVi2AGa4yWvZA54ruhnSA8yNzXz1q1TPvplr3kN0YjHjqsHKPleKMqfv6mRMtaQdCcpPrgd2A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"52594a8781cb14422e5469fc4b3ffe58\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccef911a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"11411569f5beaae96edb434ad2ec1fc7","sha1":"0b0fd4d3a6aa6e1f0c9057937ca49b8e291b1364","sha256":"d967adadca6eeca15f18a24ce5e8363d2df639c33f12841701528f7b96ed01d1","sha512":"6ca309eed3091477d6edaf119e7f010cb82ccaa16f9a42399c429e44e04cc0fee848550ec7b4e028f93c10f94da493f41288ed1d084074d41eb18d52958f102d","ssdeep":"","tlshash":"afc0241d744554f045750cfcc113057f53157d40331555f07515471743553351307f5d","first_seen":"2026-03-12T16:13:02.554399Z","last_seen":"2026-03-27T02:24:47.344958Z","times_seen":6,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/J61zxinGrUCTlq95ZT.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/J61zxinGrUCTlq95ZT.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vG0KOkWxXOPvpcnDCQiZoAqvgpY%2B90d2RJMk0Dn96w%2BVBogWYQ%2F1AJtbBZq0O6%2FZ61YCoFOd9ldDJc8dc9P5Ewz5tJBglMXZZmXc0lLXCl0i3fCEL%2FCvyuRRqWF%2BgG5T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"10401f0e633e2bdb8c3bd7d6f78df485\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccef931a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (502)","md5":"c30c66d9b89d66b1df5cbed40efb9e0b","sha1":"7c566549e87af138b54914a6f8a2b7cfbace1174","sha256":"c3ba37c885b8873ba4d4a39b232cde4b94007c6d6a08e2f398862f2a1e2dd827","sha512":"9b6f52bb71bc75c2c2a17d6ad6bd76ffc34c342af08dec6959b33f700f0a3d7971bfc3c32df327e521c399c5691eb97166d44df8c7bdd16d772d5dd812c25a15","ssdeep":"","tlshash":"abf00e65d0c8cc30033ffad882586491031cceb4c73101d4ec4a6a19f3de824c51cf14","first_seen":"2026-03-12T16:13:02.604836Z","last_seen":"2026-03-27T02:24:47.360786Z","times_seen":6,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/PrXeCEJSeDDR11aM3A.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/PrXeCEJSeDDR11aM3A.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jUVRy4LRjVzu%2FqVHqDJ7EJxSNr34kPYNp10qEX7283%2Fizo%2Feofcm%2F1vfjCE7OvgxoEb40c8c6zlsFT2Tpej3ph5nySXVzexgW2YX%2BnCHak9AgTp4fvLGHi7jQHdRjL9f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7319f56756b5faee0fb4244043e9d6f3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccff991a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"83d16eefb692b9f65347da4c6f21c6aa","sha1":"301d40415be3bdbc43d7bc547d63b23810d35e02","sha256":"b3b5537bc03685c9e5cde5819c142b34252696ddf283536bcc919bfaae73fea7","sha512":"0d9336621e445923adb89ecd7cd2cde0e759328465ca8dfc5dc3dcd5adf11a147691e6998a4fc2efd9b7fcdefa5c1f18a38ed5c5e62f4d312230f31a5d4cd062","ssdeep":"","tlshash":"afb01201878801e515a9009e4b51e7f82572001d1b3846a4701d2e5487053894d0f911","first_seen":"2026-03-12T16:13:02.591009Z","last_seen":"2026-03-27T02:24:47.376425Z","times_seen":6,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/eQR0nxjHvHCTj41bwz.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/eQR0nxjHvHCTj41bwz.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/Ws4NVZvz5RBpTPc4LJ.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Knz7ewpgOj7U213rSZavb1szXstfeL%2FfOjgMMl5Tj0NUF%2FJU7VJK7vJzrL7IO1pWR7d6E6DkXhDrdgukx76jeJNA6bZoOBb0gw1scD%2BcH%2FktNiKAXnm985BHc%2BktYY1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f23d3eb29195a77e86281f1e7267c5cd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cebfcd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5319,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5318)","md5":"f20eca31d26444f86d341e8248d5e393","sha1":"eea45ad610a82735797481e12614973af252396d","sha256":"91e095ef2a074c9086fdd7605e08e311cd5a868bfbf6bc03e663fe47faa067d2","sha512":"51fe3975642562f95b8c8c4817078032301ff0ee5a9fbdadccf14ae5d6121df9518ca8d37ae6f12522aab16089c4d1d2391577b8ef843a586aa49c1fb9fc7207","ssdeep":"96:0fXLjjA3qXkDai6xPtZ2ulKgRb2vbEj+U+Nka1Y34XJSq6F077W772E:0THvXKahVPlKXT4NjKYoXJQ0vW7T","tlshash":"b2b1283278a239036cc075f7794ccbce0e50053ae94398c3d2ea9e86d294f1cba69194","first_seen":"2025-05-15T07:17:42.12509Z","last_seen":"2026-03-27T02:24:47.36544Z","times_seen":88,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/WP7530miwZBRe9CuBZ.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/WP7530miwZBRe9CuBZ.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=129yxQcBtrjsUFKIYKyOjsi%2BSQOoVF54yh8wfMlPHtDRQSpAdCFFxKFUtBgwmtDCzZQiVXhoSO6VkFd%2BzudCI2%2BYc0Ui38xs2SkAnVvseMa52Nx8vGqDGuzRbxtnq2Zm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"49d8f4c6a45532d8007d3d98afa46e93\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d01ffd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (796)","md5":"a665819634de0b6df52cadbe02eccff5","sha1":"ec23a42679c4f77ebdf97c40777e2a73556e5726","sha256":"0b1fb4ce14380eeb30a603be4c16713f01e64aefc88daacd824ea2389233e60d","sha512":"e77166da0a289eac36483b2cfb158c56d6a37a725530b5594c4c34a58f04421adecdb68329f5bb8fa13ebe8d735fbbb9b10a6110a605938aa938527f0d177320","ssdeep":"","tlshash":"9021540d7802cb78c8a749a8e0d80801518c7feb9778c4a1f0eead2667d1db4452a334","first_seen":"2026-03-12T16:13:02.526132Z","last_seen":"2026-03-27T02:24:47.35127Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/hGBv0PQgbWD2GhQmzy.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/hGBv0PQgbWD2GhQmzy.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLRiSAVGjwp2C67fBdXROVVEg9%2F5LT7OtpTcThexRFYjBBoxK9HwSyFLVmwx5OT9y2Cf47QnEkvUqGfyW7T%2FdJrRM4RRiaIV1N57MknXHx7jkAdnvTFb9yNy91xwHJd2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3edc39e11daaeaf060815477d7882e45\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d028031a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":746,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"4c589acf06f3f538e3ccefcd41bfe602","sha1":"278eae65a35714a9ba2830d305f107a9c30dc066","sha256":"3fc60f9f7598418053933178fdd8b6ab3ca2fbe924acbb86a5c0d902846fd5ab","sha512":"078523f1f4f71da90ab5465bcb63bf964f816da3ec6ec8a3c8ebb917546321c560486831492e9636d5b814399ca3ddfd1ee3f9fa94863dc5add81774efeccc3a","ssdeep":"","tlshash":"9c0189647ecdf6e2d26b046855d15349db3463ac58c400666e6787700fadbb3c46bb00","first_seen":"2026-03-12T16:13:02.610668Z","last_seen":"2026-03-27T02:24:47.390221Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dhgatemall.cc/\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 02:01:45 GMT\r\nexpires: Mon, 22 Mar 2027 02:01:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 422526\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-07-27T10:22:28.105477Z","times_seen":16686,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/api/cus?rts=1774567431093","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"OPTIONS /api/cus?rts=1774567431093 HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://dhgatemall.cc/\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dhgatemall.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qV7tELJQpAbEaI6%2BJLwYSYA8D0Bnfvgs9LoCeTO0vca5Co6MX7OadS93rGDezRng2pUwhXPvgYsV6zakgZmHDQ7Dyyd2stvWDHMyCgghXcfAvvNvtZBh6N7RWGfcDHXbWtfkyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29e7cc6ca2b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T10:26:15.180389Z","times_seen":17561103,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/Tc8IlpeMyESVA4yXCC.css","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/Tc8IlpeMyESVA4yXCC.css HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4L2l42QDMp1iZ1AmgAY%2BUyfoOdLWcfi1hHKbU50dQNbXjFLXqEFea9YHA93oA5Yls89NIslslkUkt9C3tdBHxsP63HHUPMD%2F5SjWYB4oW%2F9KtSmolrvAI9ejljnSHwzp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"74c4854dd73e8447bb7f8a2809568561\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cc8f721a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1857,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1856)","md5":"c41962c9f2a02eba8f3456ec86fa9f87","sha1":"6a4a50d1dbdfb1334cb748491e736add30525c2e","sha256":"40c0e95eec894a533bf70113f8afa7d77a3f66576f740067a5132ecb45392660","sha512":"c1c48c8a2f0ceaadf6db090b574963ddb5bafb04dfca815cfbb2e478d64177e9734f658ef33e51408cdcc88235829c1edb66e1e3ecbc1f61ba087e2133992d30","ssdeep":"","tlshash":"023191e1a29995b85f62e115cf56ffdaf1686760da028149f0c31724cacff780ea1bc4","first_seen":"2025-04-17T13:49:08.73869Z","last_seen":"2026-07-19T04:12:35.786191Z","times_seen":111,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/hGBv0PQgbWD2GhQmzy.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/hGBv0PQgbWD2GhQmzy.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLRiSAVGjwp2C67fBdXROVVEg9%2F5LT7OtpTcThexRFYjBBoxK9HwSyFLVmwx5OT9y2Cf47QnEkvUqGfyW7T%2FdJrRM4RRiaIV1N57MknXHx7jkAdnvTFb9yNy91xwHJd2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3edc39e11daaeaf060815477d7882e45\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccff971a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":746,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"4c589acf06f3f538e3ccefcd41bfe602","sha1":"278eae65a35714a9ba2830d305f107a9c30dc066","sha256":"3fc60f9f7598418053933178fdd8b6ab3ca2fbe924acbb86a5c0d902846fd5ab","sha512":"078523f1f4f71da90ab5465bcb63bf964f816da3ec6ec8a3c8ebb917546321c560486831492e9636d5b814399ca3ddfd1ee3f9fa94863dc5add81774efeccc3a","ssdeep":"","tlshash":"9c0189647ecdf6e2d26b046855d15349db3463ac58c400666e6787700fadbb3c46bb00","first_seen":"2026-03-12T16:13:02.610668Z","last_seen":"2026-03-27T02:24:47.390221Z","times_seen":6,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/2k4bf9XrNdDXEmoBT2.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/2k4bf9XrNdDXEmoBT2.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBJGRY%2FFSNFiaiY2V6OmOFb%2FylVmScLM7qSR7IEk2NgP7hFpo76pjPiexEz42dWviKH2nftWB2UdCxsTy6nOGK37GEmsKjD0S8EvoL45eZWVdlgsY7fsYrWcfb6p7FD1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cc62e7ba1559d8ec20082ddb18b2bea1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccff981a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":464,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (463)","md5":"f9a0106f4ca2c205e75a1d9dc689b983","sha1":"3bd23d0c659b4ade33b328968a622d7599b0397c","sha256":"da6d2d35d86bca9fde612ac97b729d829369dd2a9da0f27018cfaa76f3f1ead8","sha512":"5775a9dea4acdda040f4fcc6333d0bfbc04b090f6166e8bb977952e259bd9b4a9c62c22666ffd87bdce2763c738bdce3021093d1db2b5e822372fb979d75a4d7","ssdeep":"","tlshash":"0df05c0df565d2bc51ba1cbd4880005c07768fd4139261c9723f1ea80b39de6d6a6c1d","first_seen":"2026-03-12T16:13:02.607931Z","last_seen":"2026-03-27T02:24:47.379083Z","times_seen":6,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/upload/img/694b93dc0d55.webp","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"GET /upload/img/694b93dc0d55.webp HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25766\r\nlast-modified: Wed, 24 Dec 2025 07:18:52 GMT\r\netag: \"694b93dc-64a6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MNcMWL5ieJQNB9j2twNzWM%2BrfSzxPVViGCgmMat0dcRGhCRiJ%2F8a1iUSwN5yddM9GSbgAD%2Fvp7JqEuJG7AqfuEzCRX6jPGFJKdprZJe4CkZ%2Buy0A7oX4orORHfyI72OIWQd%2Bwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e29e7d0dc030b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7d58cf74c64a964eb9432b3b1cd70161","sha1":"bcb6e18327ea4a043ba13da9e4e8dd599beba2a5","sha256":"8198647049c28636cc7bab41723976be28fc530964260208afcfd2a399925bc2","sha512":"f7553a5c46e50d5ac078f13529da8bed6a3d29a2c4163f2fd5c4b31d03d45066bad3b72d2512d99b3fe3631f4e4cdba481e618f4ab06523e8f94a6212b8ab1d3","ssdeep":"384:EUoQE68dOZo8b6ySfUHwTNDc73amsO6PUeCxMnICN5XXpYzgHsA53RRw+yIR:E9g1ZoKPdHwK7iOOUTRaXZYzgMoh+WR","tlshash":"ccc2e12d36bcf32af39aa3bc542ecd501bd0a090cef6a8575d68429ea816b04a4954e5","first_seen":"2025-12-31T21:49:21.219587Z","last_seen":"2026-03-27T02:24:47.347739Z","times_seen":3,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/api/home?rts=1774567431857","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:52.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"GET /api/home?rts=1774567431857 HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nst-lang: en\r\nst-ctime: 1774567431000\r\nst-ttgn: 4d904eb3520b666de460fda4f7bd257f\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:52 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPEuy4%2FeCm%2F6wK4P5jow35fZlHIlczg%2FNnCWKomT5VKfv3kx%2FxFQ1PW%2BFW9CHTskWK9PgX8jphAlV2%2FNHJ3Zg%2BKuL4BvMxG5EKRL87xjwTTKXNueOPJS1E5Bz1TFHYk5Ygnc9Q%3D%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dhgatemall.cc\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e29e7d41c0a0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10976,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (10976), with no line terminators","md5":"2ce545a38f682a5f4a8d7cc2934ad070","sha1":"218ac00513809c2626b0d561b82b05a040f3be87","sha256":"1305c1fb4b18381170aa7cba109c72a9d2263c75aa6c4e56acef6297012bdb9f","sha512":"357d4a2e0a7dde527b12f5425310acd77530b344a87af281a199643c1ac5495cc04bd1414480f921ef8752d7d913d67254643cb695411a9cec74d48a1d2b58eb","ssdeep":"192:D6/LVwVvvib6IfDdE/yXV/KvTgVytI4aMuoh2pPctebZ2Z+awOqzYySuQlBJlNT2:D6/RZb6IfDdfV/KcyvacteF2ZR7tRlBQ","tlshash":"3d32c062c1fa2413359e70a3a8f57d6a1cda89b7e4f874d82544ddb9609184edf73403","first_seen":"2026-03-26T23:24:24.68548Z","last_seen":"2026-03-26T23:24:24.68548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/api/init?rts=1774567429656","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:49.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"OPTIONS /api/init?rts=1774567429656 HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://dhgatemall.cc/\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:23:50 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dhgatemall.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npMVUmjmUxOgnKkH6%2FRtMu5xbscX0Th6bF6Seqce2klRBUbHFBGvkI2sbC53mJ1eLMUI0hECsrzd0bVqp4c4XDjqOUXfEPwWVNDbR5XM48JohrEcrONEUCJcBcMPNAHGlKD%2F9A%3D%3D\"}]}\r\ncf-ray: 9e29e7c3da9d0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T10:26:15.180389Z","times_seen":17561103,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":65,"dns":39,"connect":3,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/dcfc3tJzkmBeBV7ahr.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/dcfc3tJzkmBeBV7ahr.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRdZN8ucNrXWu2CF0QnvRSmJwVJttvLrsYezRKPwICIFBgnHzenMKvtN74WpdbIuzxnS8OS3ueGDmoHtG1MdK10ED%2F7Jry3jwC68L0RBo9EKbGTY2RVPcGhjhhM4Ufbb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"76f0b6852847c59a60a91380f6d9ac64\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccef8e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5181,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2665)","md5":"3f1abc9a9ad491c8973eb3d93d21867f","sha1":"63a0982947c6bdb33df6d298937008898251eeea","sha256":"cc4d9dace113681c162ecb5576b80dc2a76a12d29b06c4aff1eef32af6da725f","sha512":"2398fc1e369bf2403c034d04a0ff6da6c8acbebf3aabb64d3be1b6678de8b08d17c541274b6e8f2fd1768c96c806a3af6f93c5684111638dfbfc718df57b89c3","ssdeep":"96:rzqIGUmga8hbcqxBm+kRVv3oA8XRrydAK9pM7uA+FHTJjaZo4HLunGsTqArlDs:y4a8hjxc+kRF3oA8XRrydAK9pM7RqNup","tlshash":"cab1fa957680b937c778a5c940e000f0537567d8b12ac9eeb1df1e0b3758cf9256ea0b","first_seen":"2026-03-12T16:13:02.574729Z","last_seen":"2026-03-27T02:24:47.358257Z","times_seen":6,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:48.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:63:7D:63:F2:DF:8F:C5:65:EF:16:8E:06:3E:E4:66:D9:41:67:CD","sha256":"91:A8:D7:CD:20:36:14:EC:9A:D5:10:BC:DD:44:F1:9D:26:20:78:F8:92:93:7B:37:6A:F8:E9:7B:FC:7E:72:66"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 24779\r\nserver: CloudFront\r\ndate: Thu, 26 Mar 2026 23:23:48 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=dcfc88f2df9f4978b7d500b372f571bd;max-age=86400;expires=Fri, 27 Mar 2026 23:23:48 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: PsbbQRoHyRFVQTrl3VPoDqBmugLNQNOOd-QMGlrMUeK4jn3fIBOmZw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58763,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58736)","md5":"a9b36074d4fadeed20bca09d00bf7954","sha1":"421905d53e76d14c18223176e574176000a1d8b2","sha256":"578c17e69493625b1478cac8e5c0013dd778db5217f7c414608ac7bfcac93eee","sha512":"37fac8334d5c4643cbf4774a1544fd927dd4754d324344f12faa5ae053c742e3ca1992d57b0d7165bd7cb3cdfd0f0da3285bdd53c85ed7293f5107acffea1197","ssdeep":"1536:kQ870ziaaHzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:785hTl49dx0G","tlshash":"d543d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","first_seen":"2026-03-26T21:22:04.399918Z","last_seen":"2026-04-14T13:12:00.951993Z","times_seen":561,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":38,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/Y8ufLU6IFvBL2dOfaT.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/Y8ufLU6IFvBL2dOfaT.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbTs8OsQ%2Bd3LQ2Zjei8yS4ZgjvmI9cWn%2FIX5EhDqHctDNbn86c9qb%2FVP7EnZDamD2Cr8q%2B9%2Bmy%2B2ctKNArDcag%2B3Vvn5LAk0CtCjjEX9TbpvAXHIukPPOBOyDSb1dCen\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b10023f07aec11d31ff55c5afb80c6b8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccef921a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"d249875ab5773d35dbb1dee5f3ca73dd","sha1":"5576189cd8e818108329a8de841038c8a08e16c0","sha256":"a809a588241659a16b48b41fe08376fcfa4ae61b2494a7dfc69e21c260b01906","sha512":"175656912c49fab56c84ca8b03865f3884bfb476370c086439c3193e484c79c390e459258a5a0c777a531733a9d7db2ae04069d8e551bcba9b4e006098d5b98e","ssdeep":"","tlshash":"63b0122f081054b059a00ccd235850330770556d2793298032148e1943590b6c10d7d9","first_seen":"2026-03-12T16:13:02.528834Z","last_seen":"2026-03-27T02:24:47.371412Z","times_seen":6,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/lq0M9Ere7yCHZ6Q-BP.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/eBXMoFJaxOBNGz0vlQ.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYWZt4%2FKaxGAtLrrhsoLbF%2BiefweBirCJOr282RFFUyE9wyQWsJ%2BXa4QehrgPKXx2%2Bv%2BakBBwztdanD1bJDuCzWeVUUkTKcC51MBvxac7Z2zNmLd9jYxaBGR0BgvM0Rp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"308559273ebaf1736c4f3cc104a67871\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ce6fc61a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1571270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10098)","md5":"26db4c24e1aa9f9be9b40d282cae5379","sha1":"2386e5456807081aece2d0998ca9d021bbb4f08e","sha256":"16db02bc67b30b6ede8a244d6b18500ac67978fbc3cf5e5b37106900e1f16329","sha512":"7dcfe13d7e6350acbfd4474145ad080934c387d1feb29b9e8b2d517ca62338ae676f5900f3bc70f212fc9ce71645c53d586717502689d2721ae3823ba81f1b62","ssdeep":"12288:7IU5EKc6Bp/vh3DgA6ux4MQiB9aKb9/NcIB9fA1:zOK1BpXhraKb9/N761","tlshash":"7d254944641ecabce8f350a494985441b5a83fefc1559126f2fc48262bc7c79ebdcbb8","first_seen":"2026-03-12T16:13:02.58427Z","last_seen":"2026-03-27T02:24:47.374626Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/dcfc3tJzkmBeBV7ahr.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/dcfc3tJzkmBeBV7ahr.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRdZN8ucNrXWu2CF0QnvRSmJwVJttvLrsYezRKPwICIFBgnHzenMKvtN74WpdbIuzxnS8OS3ueGDmoHtG1MdK10ED%2F7Jry3jwC68L0RBo9EKbGTY2RVPcGhjhhM4Ufbb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"76f0b6852847c59a60a91380f6d9ac64\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cfdfe81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5181,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2665)","md5":"3f1abc9a9ad491c8973eb3d93d21867f","sha1":"63a0982947c6bdb33df6d298937008898251eeea","sha256":"cc4d9dace113681c162ecb5576b80dc2a76a12d29b06c4aff1eef32af6da725f","sha512":"2398fc1e369bf2403c034d04a0ff6da6c8acbebf3aabb64d3be1b6678de8b08d17c541274b6e8f2fd1768c96c806a3af6f93c5684111638dfbfc718df57b89c3","ssdeep":"96:rzqIGUmga8hbcqxBm+kRVv3oA8XRrydAK9pM7uA+FHTJjaZo4HLunGsTqArlDs:y4a8hjxc+kRF3oA8XRrydAK9pM7RqNup","tlshash":"cab1fa957680b937c778a5c940e000f0537567d8b12ac9eeb1df1e0b3758cf9256ea0b","first_seen":"2026-03-12T16:13:02.574729Z","last_seen":"2026-03-27T02:24:47.358257Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/8hvoMx1NOzVKxb2NeI.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/8hvoMx1NOzVKxb2NeI.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkTzUTCRh%2FrSQ2IDUa6fr3c59s4RlV3jcrWMw%2BaDZmwi9nqejDh7kjVAwG8TkrOEcnt%2FsjojyxbzvFDtL%2B4b18LOZLPIrXooRSqI4rHj2Fg61KDG2UUx9cbQcgpee4bG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"52470884b73880a0f5d78a80e02a83cd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cfefee1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1941,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1940)","md5":"7134b509f9e8a2dca77a642870fc664a","sha1":"eb5211f9d02f78e2643a6206cda3f90071b03df7","sha256":"2f32e214161bf583cdec2eeb4d3b51718d118f682ea1f6c1f3c7b7eda3fc48c5","sha512":"5e4a29fec9c0d50a3d99321b65e8ada8a9479d361d6954eb3c2ac5e69096ac48869ba30ce4d553f39b1143395851f99a800edc60b4eb17a51c4e0185a50e7d31","ssdeep":"","tlshash":"67412488f66651758f777ce052a8308d4b1903d0e79625ed201d1f408b5bd026af896e","first_seen":"2026-03-12T16:13:02.576592Z","last_seen":"2026-03-27T02:24:47.37556Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/2k4bf9XrNdDXEmoBT2.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/2k4bf9XrNdDXEmoBT2.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/js/lq0M9Ere7yCHZ6Q-BP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBJGRY%2FFSNFiaiY2V6OmOFb%2FylVmScLM7qSR7IEk2NgP7hFpo76pjPiexEz42dWviKH2nftWB2UdCxsTy6nOGK37GEmsKjD0S8EvoL45eZWVdlgsY7fsYrWcfb6p7FD1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cc62e7ba1559d8ec20082ddb18b2bea1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7d01ff81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":464,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (463)","md5":"f9a0106f4ca2c205e75a1d9dc689b983","sha1":"3bd23d0c659b4ade33b328968a622d7599b0397c","sha256":"da6d2d35d86bca9fde612ac97b729d829369dd2a9da0f27018cfaa76f3f1ead8","sha512":"5775a9dea4acdda040f4fcc6333d0bfbc04b090f6166e8bb977952e259bd9b4a9c62c22666ffd87bdce2763c738bdce3021093d1db2b5e822372fb979d75a4d7","ssdeep":"","tlshash":"0df05c0df565d2bc51ba1cbd4880005c07768fd4139261c9723f1ea80b39de6d6a6c1d","first_seen":"2026-03-12T16:13:02.607931Z","last_seen":"2026-03-27T02:24:47.379083Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/api/home?rts=1774567431857","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"OPTIONS /api/home?rts=1774567431857 HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://dhgatemall.cc/\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:52 GMT\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dhgatemall.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQK%2BDXPqE8lhUE3RJ7LRtUJGLRwf4DzDz52gxOnuNSZVNzCBhNbf1bm4NES9VWljYmcK5QDiH7cO%2F5lsdJS2n2G0BmL4%2FWlX%2BYGj4rI6BHr5cugpvnwZU3wTGAxprdW3BFgjiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29e7d13cc0b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T10:26:15.180389Z","times_seen":17561103,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/upload/img/694b9972cde9.webp","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:52.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"GET /upload/img/694b9972cde9.webp HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 417008\r\nlast-modified: Wed, 24 Dec 2025 07:42:43 GMT\r\netag: \"694b9973-65cf0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVyOPJlHv0%2BwkxOg11v4d91FbRtfQFh4NiqoU21Desb5cGN21J40n3cUltUMeQNmM346zkCWxlEqulHoTbVs1cG14F07McexZiRKERBN6VFxAB9N18%2BsbDVpTyMGD3lltf7qsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e29e7d53c110b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x778, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9033c91de5d5d0c548ca59a03a327d74","sha1":"f622af60a4752366ac4de62dfe872698615ccf6a","sha256":"ad831c03c0a90e36533e7f54d7bbafa04ca03da22059dcfcc0a412ee67a1d9d7","sha512":"41929e195c234fb80047c344cb372207cad66f5333091d3a22bb95fe03bd057eb771adf6d7082e9499b89a23a1b5ba1ecad3e14f9e8f0cc2f23bd441eb8952de","ssdeep":"6144:gHgS363EcxgQOBWhp7AL4nO+gYe2fzrm2ZVdoEufCqPxHUgMOK4Xspdsps3OCS:q6hgyhGLbDYfrpdI6qZHRQdsiS","tlshash":"ec9423ea580ee9f5442ffcf667dc0c861283d607b909cf88b2886b65190d6fbd8d9d50","first_seen":"2026-03-26T23:24:24.692101Z","last_seen":"2026-03-27T02:24:47.390856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1070,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":446,"receive":624,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/fKQox3604vCv6Orhlv.css","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/fKQox3604vCv6Orhlv.css HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyNPUSNd68vRmIkXN5TG4I1%2FX%2FGaESkE9eegwVQ5VM0mxap1EFu4UbxVyHKpcxLsWvDV4Rj6yc0AC60bmSTZDd4BImKq60s26w3wlh%2BpJehHv46EOBULMs5MCCN1bPS7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"20118b8b7a33ff8c3966abe8c2b00866\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cc7f6e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50450,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (50449)","md5":"0aa95e0cb01c6bd7dc9a2c34e6f16fb0","sha1":"92e5f32122a3558c5b55c05ab98d11b7795ef0d4","sha256":"d5f4b9ffae0d6188dd0a174c29c4d84c4b295309fad452400d4fdb0890cf7c77","sha512":"b5d099427793eccf6e1aaa5db212ed4986bb641a2b9abc595afdcad61a7680a7b427d0d410d6d2ab853afe7a0a674a36f247b39bdc975d19b59672bcd7e6e50c","ssdeep":"768:uAxh0Bs78u5Y0Jwh0DNu95sRlDYxgRvvTo0NBW1sBe:EBF5EYgo0Nm","tlshash":"28337654256c633eda2bf16358ff46d91910f713c1377a4aba42733199dfb822231aca","first_seen":"2026-03-12T16:05:53.681873Z","last_seen":"2026-03-27T02:24:47.356062Z","times_seen":10,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/assets/oBOLnicCWEDzpIF5lm.css","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /assets/oBOLnicCWEDzpIF5lm.css HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTeyukQFDJBTJJ9%2FKZCaht8SWJ3tiKxbwKxqGgI3Uyjl%2Bo9ZhLMB2BAgJmoH2cky9wVLO1UZ4uP51xSrs1oe0abz3CilzJAzgM6gadgWpZCaz6QNtz0ityR2Yj4wUQbr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"83af5107b0a3c7caa35eb50f9ac54862\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7cc8f711a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1362)","md5":"0f5f6fda477235a06349008a000d81c8","sha1":"2431f7ff7dfeac6f2ec44afeb4cd3480abb25990","sha256":"2ee7b3a8a0e1b31b163b33129d9d82b368716adfaadc9f632b97c05fe1937a26","sha512":"e962a30cc904c107b5800bbac6606585b6d74c1d7f0d61eb032bae0a30a77c60d11f232e231bf943f53ee88fa5d971a540ea18881cf1f4855ad5a2e2b7c52f02","ssdeep":"","tlshash":"aa21c478da5090397e12fde5d7d705daf23ca5614c1beb997a18e16083c37f41a13382","first_seen":"2025-07-06T21:44:04.062809Z","last_seen":"2026-07-26T09:40:30.288336Z","times_seen":311,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhgatemall.cc/js/wxZmKZk5igJxQxZQb1.js","fqdn":"dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"104.21.7.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 14:13:33 GMT","end":"Thu, 21 May 2026 15:13:25 GMT"},"fingerprint":{"sha1":"58:4B:4E:41:D1:62:7F:DE:22:7A:CB:FA:DD:6B:60:13:07:78:3F:77","sha256":"6A:05:9A:32:A4:0B:20:92:11:88:25:88:72:A9:C2:F5:40:84:D4:6A:29:2F:E6:1D:A6:C8:60:87:37:4C:37:75"}}},"request":{"raw":"GET /js/wxZmKZk5igJxQxZQb1.js HTTP/1.1\r\nHost: dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EojSfVQ3aelPOh4xA%2BPBT0mfRKCi4LSgpY3ZqfdBss7xtgvSZeQwAite2dmGcHJgyfJh%2FFCS13NSmLosZRJqz72he76OhHdvndzYJWnHUjCx4mbuGtoeuuGR9Sd9TSHi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6c24de7ca24d08ffa6c168ee5573fff3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29e7ccef8a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2850,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2849)","md5":"1c48e28b7094d8753615f05e8f1ea31a","sha1":"f84aebe49fbc05fefd40efbfeda7babcffc7f69d","sha256":"03d9cb7abbea0c60000d92cc33725beae2abde2cde911e5330f241907c09e185","sha512":"1819a97541146f165378dca1b57187ae2e4ee14f9e59578bc16ff025b6f13712b540c64d8908d397c11b66adbe8f365934952c15c89fee3ddaa08e0259cfe661","ssdeep":"","tlshash":"a4518459fb80a138c7a065b164d148c0663a1b016c47a9dae1130d48633bb90b29e867","first_seen":"2026-03-12T16:13:02.553098Z","last_seen":"2026-03-27T02:24:47.377485Z","times_seen":6,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dhgatemall.cc/api/cus?rts=1774567431093","fqdn":"api.dhgatemall.cc","domain":"dhgatemall.cc","tld":"cc"},"ip":{"addr":"172.67.137.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhgatemall.cc/","date":"2026-03-26T23:23:51.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhgatemall.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 15:05:08 GMT","end":"Thu, 21 May 2026 16:02:51 GMT"},"fingerprint":{"sha1":"7D:73:FE:B6:15:35:FC:C9:DB:8D:10:5C:A9:30:43:9C:C3:7F:63:7A","sha256":"3F:E2:91:C8:09:06:61:F0:B0:77:F6:1C:3A:62:B1:52:80:5C:57:05:5A:77:4A:57:60:E9:D0:1A:2A:30:49:6C"}}},"request":{"raw":"GET /api/cus?rts=1774567431093 HTTP/1.1\r\nHost: api.dhgatemall.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhgatemall.cc/\r\nst-lang: en\r\nst-ctime: 1774567430000\r\nst-ttgn: 7a756d0734acae3deaf1fdfe9b68adb3\r\nOrigin: https://dhgatemall.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI; _scid_r=hZDoGAxgaOxjZ17tKoatVZSlpJ01FMxI\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:23:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BCYFHMr1%2Flbv5cvP4HaeD%2BMuVpNqMvUn%2F6WQQ90ayQYEr99hTF%2FXf9RK5k0kpQsS5%2BmoU3q2i63f640rYJFId29Xvgi1KmZ%2Ft0zSUkqwyreVs16%2FBbB9Fvvc%2ByhIyOQFCS5nA%3D%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dhgatemall.cc\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e29e7cddbfa0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"68b7f3df10cf5b4f2bc9663ddf5702f4","sha1":"1787324a11d714833b770e51b1c2f1393d125059","sha256":"a4edb8e241b5bb18b46e568e4d9969c660a02c4a78d130bd1af201e9710254f4","sha512":"2fee545f19a3ab16ee5d853bbc422d8f56cecbcee8e609e2421ff969f55ab290560f0fa67eac2e6f4b5fe3f93f402401252525b11ba5d1b1c566730604fedc3e","ssdeep":"","tlshash":"10b012434c905ed1040cd0905330202301084da2d8da5ae1d074cea0c1209e2a0d66e3","first_seen":"2026-03-26T23:24:24.700223Z","last_seen":"2026-03-26T23:24:24.700223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"api.dhgatemall.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}