{"report_id":"9d981e7f-22be-4d34-b3ed-404da75554dc","version":6,"status":"done","tags":[],"date":"2026-01-10T20:54:16Z","url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"title":"雷竞技(RayGame)官方网站_全球领先电子竞技赛事官网","dom":{"size":16123,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2272)","md5":"f59b95e780b566f90b9c4efa33e1cd5e","sha1":"65fd69770f3634ddbce984bbcd26588750c1df6b","sha256":"549400718681b97474ae86688f9880f3492213ccd611cf5850e829bf38903a64","sha512":"54aaaa89528fb98740f5d2bcafae90bcc5ede03f3ad6babca26ea238030c30215375fc880f033a79b1b51e8bf623e35811381142f45aeaaaa8e27375d4acd25d","ssdeep":"192:Es/d4ns4Q1zZ/vl/O74CGU+POpxT/kK1QZpMC3HKX3GA4U3aec3QUl/fvSZJhAWd:Es/qnsfg8LU+POpVl17p","tlshash":"d772946651f2043b12a3a0a6a636678b7fa1e647c80b9b04b7bc5bf45fc7d92cc0314d","dom_hash":"domhasha01a34bab3f6d92a5e370694fdd6c7b2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-14T20:54:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cn-bcgame.com","ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":52,"request_count":52,"received_data":1094577,"sent_data":26354,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]}]},{"fqdn":"ovcgs4.ncuwibjnvw.vip","ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":21,"received_data":1370851,"sent_data":10071,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"183.240.98.228","port":443,"asn":56040,"as":"China Mobile communications corporation","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-01-05T01:27:37.424479Z","alert_count":0,"request_count":2,"received_data":30873,"sent_data":1250,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-01-05T02:41:01.3201Z","alert_count":0,"request_count":1,"received_data":365,"sent_data":483,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sdk.51.la","ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-01-08T21:52:13.547323Z","alert_count":0,"request_count":1,"received_data":76178,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-01-04T22:40:02.941781Z","alert_count":0,"request_count":1,"received_data":90137,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sdk.51.la/event/js-sdk-event.min.js?u=K1XPyxsmxxNoCA2A","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8b86cb6f6c21e85b9c937dfdb9c2d28","sha1":"b4d1693de341bc8907adf4ce9c92ef81fded922b","sha256":"76321b4c7a653d40fb72e4e2501842d3b12f3bd2822e7d1103054eeff1a6a53c","sha512":"5557b2e594e8fa69722453a399c2b48335a241f01ab22c1ae151a98fa637139372d9105c7d48428d0af31cc9c7d70672fd0ad59f58823963e813d528434e3b1b","ssdeep":"1536:Mm/6jaOdXslehi41GvwsciNxLbxLcBXs1v3kjs+TTk1TVBSYreiMUGsnJ9+Saebb:MmDS8SOZ","tlshash":"3c7309de31c2b07253e7316a106f610bf13a5d556c0e5820f215d999bc78e8b82bbf6e","size":75730,"data":"","first_seen":"2023-04-07T05:45:48Z","last_seen":"2026-07-25T08:53:14.250517Z","times_seen":1714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/lightbox.min.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f8f7757e0c3ccbd26b738b95d91bd3b","sha1":"12a3fd559dfede768d2cca5014634d55f343493f","sha256":"7f36de4455b10ca52ae3e585dc4cafd63851715da1ae3e4b2439f66ac045ebfd","sha512":"d9e8a395d29a9cec732b9e2dbdb1570dee752310808cec98749b1bf9721c285c8b366e930a0927f54b97e698437604409279a190ab4e4c39ef7496b39d0e8c8e","ssdeep":"96:iiJg6kB8Z9PtFdKcaevYgvozT9piR04FJKTYaLxLUKmt0ey8/IwkCaIR04BLNKZ/:3DkBgdKJevYgAzJcmxLxLFPS9aYBqxt","tlshash":"5e026545fb202039eaaf40d7300b5b1a1736663bbe039aac743cc6e999f5d445967f34","size":8488,"data":"","first_seen":"2023-03-07T17:30:52Z","last_seen":"2026-07-23T00:43:40.830446Z","times_seen":995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b469bb945669defed36d0937c30f6dcc","sha1":"07ead01ee13d9db2ba1d40af5941ba5f7426b378","sha256":"30b2539546f21d46a676052c10b64c21b1617c70ba00a970837d51bf7d003fcb","sha512":"3035de531855d20000534a8e450e211eb7f71b39375af4b5201db26fca5095c68739ca2032b6fd3c4b74e2fc2d3b49abdd5870b36d69ac79c60d44c866663dd2","ssdeep":"","tlshash":"54f09aac71f2544902b770ae2d6f50097873b84f654d8800be8e18800fe6458abe5b29","size":544,"data":"","first_seen":"2023-03-09T22:59:38Z","last_seen":"2026-06-05T15:49:38.292233Z","times_seen":456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-07-26T03:19:07.170008Z","times_seen":121748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.nodecommon.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"498c9a5a02f1e20e1a2a7f6100a84982","sha1":"f49a7ce465ca068ef35bf03b6aa68652df4db663","sha256":"e06e6f77a6e708e5ccfcfe6da6a6d3928989bd2f2a5d6a0d363a6dd58d790c2f","sha512":"9d279e5fe2f61b812ce51694ab05310a6319c2bc508063c63acf8d4f41c9cda14404e70a8f02ace9e9f8d0efcfcf33d2a15ffdc8f2d7a76b29a1a6a84a75dae1","ssdeep":"","tlshash":"5b411e686bb22556a417362f079f528c32eb412b438bcc33375c69547fa2d2413f2799","size":2125,"data":"","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-22T22:52:00.86392Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.init.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ea72f72b0cc10dc21fd77be075d8ce5","sha1":"7f172814ed076f5314869a1194937f2b0d676bda","sha256":"ffe9e478c9ace9d6fe0c647347451de3834de660e0e7c6c8786319eae0c1e180","sha512":"96be53d8fc050e511fc01ca28692d30289de9d7dae04dbb1b643a9c49c047293904c84ddd9036448e564e472b26d3671d5abe752dc6af59545e7118dbb4ef941","ssdeep":"192:08NJyJ7EkM4S5CDiQ67qJFnKY6FlCLUqbTkZqyKY6F9GCLABe7JHJFnKY6FlCLUq:0YRGXEF9UlHXEF9U9","tlshash":"1112cd2824d3295b6c4bb03986dd407472b5e517072defa1bc8f23226f95a3816f8fb5","size":9360,"data":"","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-22T22:52:00.857755Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.bxslider.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7d4521aef7a399dc027fd3224cee671","sha1":"3b8862104f2a0cce661f34c3568ec3b828fb6986","sha256":"425ca79264e56253da98b36b55dac936ab6c887e3f464d97dea93734e1cd870f","sha512":"97908a0c4235c526a3dc7ed56c54d7bb4adc14b3932ea494dfee358c87c8e69c2ae12ff6250ddf711f5a4472f6807a1f29312aac53e31b532258584f7d7c4da6","ssdeep":"768:6ivK0enhMMoPyt19Htehb+n/aqvGkTrrPvYafqEM8JP7yO/:PvpenhMhytKb+/aqvGSrPvYafqEM8JD","tlshash":"5d538105216023761937237dab4aed04e6fb42278525e1a5f9fd870cdfb066401bbfea","size":66078,"data":"","first_seen":"2023-03-10T17:25:39Z","last_seen":"2026-07-25T00:56:45.398524Z","times_seen":363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88e302442d134b0a83f96d8a0b47c2e3","sha1":"09742f9fecf86ae6048f04890c44a4890cdda5ae","sha256":"4c00f51975c3e5f2e32938af703572304dd75e4e4098338971d95e2e46805499","sha512":"f7a328f2bf0ba28f988618b6e85806d2b33450370f55e53791f7a65c9872f36bfd4bd0e390183600f992b7bcb63decc2079fceb1b07cd8c9884cda24dc4905bf","ssdeep":"","tlshash":"1401e186fc6354f355d3504b3b7dc1044c6466af0b87d8f27c9c4b9daf6944c30552a2","size":822,"data":"","first_seen":"2024-10-26T06:46:32.270385Z","last_seen":"2026-06-05T11:11:27.693493Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.global.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97503e8b42a1d15fefb6383d0167623c","sha1":"703f0f15fa6d4b164ad27703a052ee1307c7c863","sha256":"6ac75cda7cd6b70995b00092437fda001bc6c851dad54667fbff18847910f7fe","sha512":"ae1ffda8229be4a139d4878d6418684c96d7cbaba9db70fc17588ef26db83dbb0b04ff66aec1e2570e567816f35a401a7dc0030434318583672d96877374bf6e","ssdeep":"384:ILvw555wkiPJiqOMiqT6nPjBrOHOUoieShqIEQe:AMhiPJMU+rbM16","tlshash":"b2d22e5d79f754665533b1791aafa00071ba8813050dee00be4d62c0afe953ea7fabcc","size":28788,"data":"","first_seen":"2023-07-05T07:23:08Z","last_seen":"2026-07-22T22:52:00.858274Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"89d991e81d881c920db96f26a2adc89c","sha1":"8dc045d40de6cfd2b341f99657261e6a106f94d5","sha256":"1eac0680e84676058160d35c981aa51816baba577254be1c8b862db79e547d4c","sha512":"82e1941ab79901795af841126d14db325bb1c517fa3192727406511e585f5d7a5a725b4c9014500a1efac9b4878941014aad280a066ac2747fd52802dcaaa393","ssdeep":"","tlshash":"a1f055d6178a4c883993adb87a0f7b4d309d0c2a6ca98da85c80201719c16b306e63df","size":445,"data":"","first_seen":"2026-01-10T20:54:27.194602Z","last_seen":"2026-01-10T20:54:27.194602Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/maigewan.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c84de4478a3bf39eada4122c1af2268","sha1":"51d51360e28d971ec0e26fed0dbd74de277bc1c4","sha256":"47d3758dcb30e3dbde3b9bb99cef9e116d056d3ce240e712ef92c73a9581bbe7","sha512":"8ddb9d088a9029a61083898b0564589051b7da112f921a3e13a069f8cb59cb2a08dea11b5932f55f8a6d96f5de65e482084563c61cc3f8d853ba004ffb216eb0","ssdeep":"","tlshash":"5c2165357efb603c02350035ad1ed509b0f8e038fb6bce06a06d74105d98f8818aded4","size":1252,"data":"","first_seen":"2025-12-20T04:55:22.714281Z","last_seen":"2026-05-16T15:20:25.670048Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/components.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e7e93f03518538dc1af849df229fc1c","sha1":"6742cc702fdf085612c90c1f04bde8797b4a1108","sha256":"4ac1fd1d74e3229424b523df638fe3813229dbf6f1391457cc5747599eabad67","sha512":"bd650b1acee1fcec35558bbde1903ce484690c3880138f0c2bab86742942fd30ee39394cdf54de255bfef69535bbd5b63320c193e0fc39623161d924e0cff4dd","ssdeep":"","tlshash":"8c61062a4f3626988837766a8fd7465ce3876453430b80a1bf8cd95d0fb0d1267b0fd2","size":3268,"data":"","first_seen":"2023-03-12T08:14:41Z","last_seen":"2026-07-22T22:52:00.873185Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"27d992c8f549b77c59bdba518e05a015","sha1":"536352ba099a8b3bca13adfaa6466b0fd44f6e7a","sha256":"6ab10a5ddaca6a30252c77ff4795c98d203788c20732bf87467effccfd933aae","sha512":"dfcd98c621926867908409f09ae98eafaf9cf9f53446198d3265955596bc73aaba935e17ae5a80d1d7e3e70f12e5c9c1e19d3e07204814ea99c583e8cfa99e5e","ssdeep":"","tlshash":"1a519b49b8b34e4318b330b54bef724c2691c11b2646ea243d2ce1b1af041abc7b53dd","size":2746,"data":"","first_seen":"2025-03-17T04:41:03.10434Z","last_seen":"2026-05-17T11:33:37.994458Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/config.js?_=%3C?php%20echo%20rand();%20?%3E","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6703774a34b2eaaba33fe94b6cc30099","sha1":"c6106c5f29c2ce950d40d1f23e16ae113a32f9d6","sha256":"aa3854553dc0f20729e552bcd709d4098a79857804b69f64fcfd1c5af58f9780","sha512":"71adba263d5a3be69e2acd291b0531451deb91244fa2110ced26b05c685502b914437ac59552923f581a53f74bc27d26df415cb59950e3301dfa0be114e8eb1d","ssdeep":"96:KqIq9diKjZJjGK0/+gD90vVg+mM5zVdqoVamawpma9maqLma1qrBmaalDOTtf1N1:KqIq9drjZJT0/+gDevVg+mMFbqoVaapZ","tlshash":"5fb1479bb29e1c3202bb1d9e9f1f63883c92164adc19dcc5ae0c6ce49f50e45d51bf51","size":5442,"data":"","first_seen":"2026-01-10T20:54:27.136626Z","last_seen":"2026-01-10T20:54:27.136626Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-28T12:49:20.813672Z","times_seen":494954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5333d535b6ac3086a1d7fc9b890cfec0","sha1":"6dc61c841e869a29b5df48d4226fb9dc50be6dc2","sha256":"bb24fa88a553a3984f52b53638ad0261ec0ad1ac876a1eb41dbcc07ce8176d8d","sha512":"33e4d5dc0be5512c9df9864fde92bf7ecfa3c4d841d75d01e33ec7670aa0fa82d9aea6e1bc08bb07a1d6b6c49ce8565c3cd06f24750929a9540d54a74b526540","ssdeep":"","tlshash":"12a002c326c32ce3b5d43200961622b17bdd0fec2296bcaa175c6048605dcadfa2af03","size":83,"data":"","first_seen":"2025-12-20T04:55:22.84371Z","last_seen":"2026-06-02T01:15:02.804728Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/language.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0fe0cfdef0a30dc5d76bd5b271055e4","sha1":"5c5a7f6a85371e1deb4ccc995d331ad1aa24e778","sha256":"22da846d85c32742daa8d179d4c350b63e539c781c0b55c21350e0c2c56a0941","sha512":"448fdd470971ba3f45e47fb35a84d95a6206ef120eb56c87ace952a1b835c0cc78e9eaa0fcc2bfd5c2956cb0f56c607bf9666db23ac02c6c2578ed6af75f1ee9","ssdeep":"384:7+nb3s7a3beOMW6dL1BqupobX940xpspapY4VbQCj:7+nTt9aBpYNmpaxVbQCj","tlshash":"1cc294dfa346043a65ff92cdcc986f2f86d4093255a3d039f0fe4a4a3b6592de114a39","size":26636,"data":"","first_seen":"2023-03-13T11:25:20Z","last_seen":"2026-07-20T09:51:13.773161Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"642eb401ccd4943bdf38ac3b89008a7e","sha1":"657023e095796303b3ba85cb706a07323fb8f233","sha256":"76e2cebd2fad49f0da009d962e4b020ad5be2fb67d31d56755477a5a91e77b7a","sha512":"5510cb3ca7478d01db6c2455e356b8d6223a73864dcbfe5ad49a8530c81fdaaefe3195309ad3ebc5c417a999cd5d4824d87ce80772eb1643a4649a6bb653c50e","ssdeep":"","tlshash":"42b0921df20630cb2c7ae09239af30c7723f1f638803c222406e52718be49848b22c08","size":120,"data":"","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-21T07:07:17.069726Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?84ffcc6211b0bdc1bd6b046eddb130d3","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"183.240.98.228","port":443,"asn":56040,"as":"China Mobile communications corporation","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"85f00c9a6ce5a4af66a0a6382af1a0e4","sha1":"f7b5eaa08d49318bd991c0f8a5b94e47972b3924","sha256":"f4b609d44a0dbf23602e10478ea19187256afb78a1ee9a57d35ccc9f9390393f","sha512":"d4f87cc1fd60083937ae516e4fad5f8cb68ae152bec54c0bdb0e3f23c623cd6b3ed865b22f631e95e7de6fea475e419742f60f557efa71f4bda7cbf32a6aba5c","ssdeep":"384:X5JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:X54VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"e1d2d9e9b282713293a324a5153f724af07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29891,"data":"","first_seen":"2026-01-10T20:54:27.161217Z","last_seen":"2026-01-10T20:54:27.161217Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery-1.11.3.min.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"895323ed2f7258af4fae2c738c8aea49","sha1":"276c87ff3e1e3155679c318938e74e5c1b76d809","sha256":"ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8","sha512":"c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf","tlshash":"3b93d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95957,"data":"","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-07-28T06:39:18.159014Z","times_seen":18395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/common.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ce8ad56f799a7245dc03b5539397091","sha1":"e86f2a9915c7c244accb6c4b891f0ae1ba37d997","sha256":"45c2455441f35e746229ead3ca269ef248651935cb7eec5fc7693f488aad7e89","sha512":"276bddbc70e899e9cc4ed5d6fd78b0a76d179d7623bbd2747aa684df6b52179763553a57d71e2209e295f1b3f01b4ce28d88b575ccaebb8a68919421e55b7a38","ssdeep":"192:rtxSGljRldgPrcjkTXWXz173aT15zh6ZzZ2NVNZ:5xSGpRgokKkyZzQPP","tlshash":"b152d00cb11486b850fb337b6a7a6458fe26d53742868220fd6c99b47ff1144a372fad","size":14506,"data":"","first_seen":"2025-03-17T04:41:03.106121Z","last_seen":"2026-05-17T11:33:37.971817Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/base.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b217a41cf08538d072a5aa008f2534b0","sha1":"93a54c08bed6cc4e5518a9e619a8b842ab124341","sha256":"a96e91a41892e6e4629d3c48ccea9a0de4999c1e1a217c629f3289bf70723927","sha512":"196ab139e264ce8ada7fbaa78eaa364bd8fca82a7234d88c719c3d77010bcff9086808f1037e9e6523d065b433b7f8545ef76e85427d683d7308abd1ecb9d0b5","ssdeep":"48:9FaFVh8WQhET8+aCe9gFo2AsAyH0iBkdFexTncsdU1sdUxyoMdEjoJMPvVMRRq7+:jyVD8TC0g10ckaxjXP76NnyLmry","tlshash":"61910f6c461736268e3173769faa610dfba301770642ca143caed3591ff0a3249b5fe9","size":4291,"data":"","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-22T22:52:00.917015Z","times_seen":578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/extend.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d570bcf760b6a01c46bfa9302d3549f","sha1":"1614016872b93bc23d8f1de2c74147f111b2fdd0","sha256":"3b60e2098990475db453a7f57ba2b03b1be2ae9c53aa94adc667f14a44f36781","sha512":"d18c93c4aba0efcae81b5fed09a812a85a5dd1fe45ed467509e1b2803702dbc3b6ad77e2a4450098ba78f3b75b521138daf25696c5b496f7bce77be22a688861","ssdeep":"192:poycVkdomzF/qtEuDBH9SWNrVXdA5koSUjst6Y8CNQJM3wuJo0WGFQWU5gAct2jb:i6zF2GwoxJqT39NRu+q7","tlshash":"a792fc1867b712509a6730760f5fa40c767a84275a0bce087c6ca3d4afd897462faff4","size":20681,"data":"","first_seen":"2023-05-22T15:42:39Z","last_seen":"2026-07-22T22:52:00.905433Z","times_seen":454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.menu_style.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce2ca79e427922376182680cac97e866","sha1":"b113e2d81b37ced71dcc452c2b7bd807b56c9b5e","sha256":"aa7738c75d162fe2182223dbf98ac25c75f38dee123a81f8c18171616f57429e","sha512":"146f16c71e67b44515f98e8bd5be22a8bc27956109cb4f02111db098c6906f5f3bed74b821d0cc7ffc43c27a2d3688bfb09736bd5774852f4af883083b5e0f85","ssdeep":"192:2g3SC2hgHTSCib0XTERe/8OLMSkOL/OqrXqRBcN47PFvZEJEC1EKaUOKvya79EkL:ZX1r6pJnAFZwIYVCcNqFLd","tlshash":"9ca29c6958f32936146b75be1bae702c7aa29513830dcb507d8de640bfc487807f6be4","size":22480,"data":"","first_seen":"2023-05-22T15:42:39Z","last_seen":"2026-07-22T22:52:00.873709Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-07-28T07:07:48.469174Z","times_seen":98838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/theme.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39726bdba83bc37e65d029b89096227d","sha1":"f8808299ab1878fbf3236f5a91b6512ae81bd5a4","sha256":"8c4345a17764e9e99fd35ac1dda07a5ffbd10b365ca448fd06a954bac922cac3","sha512":"fa85f7997672873727bf2829aa1348e0d2d3bd9b4d509332eb88b00c38f59532a4d29f10d2af1eb759e2d556b7f81d8de6094270ee8f09d51ac77bb85312a273","ssdeep":"96:sIFg5TjcAJ76zCLLMa8yEx8qnA5oukDnKl1uOGMIJ990KukXJ97SS:sIFg5Tjn/LEyDyIva9RZ9Z","tlshash":"c102ef4cba540b7c90cb969b217ee424fe1b8a13434b8531f1bd80757e971c66bb2e68","size":8617,"data":"","first_seen":"2025-03-17T04:41:03.100308Z","last_seen":"2026-05-17T11:33:37.866345Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.formsvalidation.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c66293ff8e67be48f8360604f2e4708","sha1":"5c6c2586081a950d2a48032f3558baab6d0829e7","sha256":"bb2bfbf0504761fd75f13a1bddcd4d17fb4edf6171588ebc48d6ba59a6ea7751","sha512":"0eac8c16241ad69baa091adc29c3bb060e3ab8a3aa7156e652b00329a74e658d96fa5ffb8eb12be77f9c0e0ea45dd60b0b322ccaf24296341592414b86d37d6d","ssdeep":"96:UZK5MwO6QPLKzLKiBLKLLKpLKxLKyiDmiSiBGyq:UZKhO6QjKPKi5K3KRKpKyiDmiS4Gyq","tlshash":"8ac1e8ccaffa204259b731f60faf806672b2a723054c9f007a1c42b49fd1a6567d7b85","size":5768,"data":"","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-22T22:52:00.911323Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/animate.min.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5e7c749884e922e60a4d4d86edd1986","sha1":"07a154def14ea984ebda42403025b4aa1f25746f","sha256":"992b49300eea9ef49b04f096cb8354d7c03266b3ab6efd6be62bc633a0c8efd2","sha512":"edf415c79323ebf3ebfc5cdd5758f8bd485228a8ac571ef3faf13ac71f7f7936ddbdac8f98dc76093c0e3155073e76a09681bcb70b5e59129c954762f6e06cf9","ssdeep":"","tlshash":"694101d930d2386643ff603d553f6246a8307126468a8067bcf9cc7c38a2c52bc2bd2c","size":2314,"data":"","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-22T22:52:00.852598Z","times_seen":568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b42d136c87fd4f4137190f8821992d5f","sha1":"0a4e62e7094ee1fcaf701ab58739aff4bf5a44a5","sha256":"9f8065e532cceb3104924d244b440da1a92885adcdb66fcc59433c6100b5aca0","sha512":"4f0259378faddcd0d64ea5b658bff0a1d715669dc2cd5aaa39b98cc28fce81170da6239c84666d210d634bdbfb7a6cee530341aa20fec9d23669206857a7f228","ssdeep":"","tlshash":"b8e0a70df1e63591117f34345e2f1100251d204b6395dd417fdc5ad37f8453d59e554c","size":327,"data":"","first_seen":"2023-03-09T22:59:38Z","last_seen":"2026-06-07T03:22:23.200286Z","times_seen":416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/layer.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68fbcb811abf577e8c0cd58395866583","sha1":"a8ba25a789cc070ae940db30e7b8a079c2e1c6b7","sha256":"98ff7f63bbce2007fdf41b844f129b97cca167926ef9aef0c910824e439a23a0","sha512":"787153e3b86ac78c97874e510d016ea29af5e7716420c708f3ef92f1a1ed88eaa89c95a51abe0b140c38d04f61484e87f67691199675e486005fd249a8a19502","ssdeep":"192:AmwY/D8YJHlWaW6ml9/Zi9fiei24Sfn2amKV8oOM1x4qv8:AW8QKj05Vf27KVjj8","tlshash":"6b62a65eb50035476162d169905fa90f31b28d22eb078864f1aff4fd1eb8d9562b3f0b","size":14958,"data":"","first_seen":"2023-05-22T15:42:39Z","last_seen":"2026-07-22T22:52:00.86069Z","times_seen":354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.superslide.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9fe6e8cce8964664d70398be23a3389","sha1":"d7196a4c13495717b4e21a2db4884392652e9365","sha256":"03007cec48036012f9bd344d6c1dc4a7e9db9741f6570d0200b3173902707c89","sha512":"dc6f96ef80a7b621e5e91cfa0cb9284e6884a0f8de5bdad403e94753f3341ce044bec8166771a91e63b533a476187003917a15426c33e883c4bc195b0edbee74","ssdeep":"384:1rFDfNkiWqBoOTKa9+Z+TDSR2Xsj97IPUM:1rFD8OTKo+Z+TDSR2Xsj97I8M","tlshash":"42c24096f20ce6aae4ce63b154bf8d4de83ec0364a4d5496f94cc84877e4114932bbf9","size":27625,"data":"","first_seen":"2023-05-22T15:42:39Z","last_seen":"2026-07-22T22:52:00.920526Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.form.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a9f6296bc4b381234cbf9e3ddff3c3c","sha1":"f177123aa0f8b38efd76bb0918ae6ff9d0a15b64","sha256":"8cda8d163d76fd30acaa34af1129f9c27dcefd2fd16b240fdaa1a64d9db3be5a","sha512":"1c781f60fd6c8eba098061c542ac1994f4c15b6368a35e541c41bca5e62b74b70cce8d15944da45383d41a417500a888300c62b6ff9318804426e7c281fdd9d9","ssdeep":"384:bUjRuXSNk7/OY98H8e+v8ebkq5zgMBK9OWt7M7nEL3i53eEjvTe1G8v:diHy4OUY7nW","tlshash":"2b92628eb891449b9077b3349fbe9001f7b2a43b428681117d4e61e06ff8874a3e4f9d","size":19379,"data":"","first_seen":"2023-07-05T07:23:08Z","last_seen":"2026-07-22T22:52:00.870897Z","times_seen":384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-07-26T03:19:07.170008Z","times_seen":121748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"78ac2aa5ccc29c90a345c90aab40b442","sha1":"cac604932faa4add2955602b41de8a8bff362ebd","sha256":"53db339b0b80637f13dfc63813d7366c899cebe0db896602886ece619163d82e","sha512":"5c76abfa8f4091277643f4dad57c37d9eb71d33c9691f0e85bc82ac5f303d4e3da4937cbc2354e4d5c5d0022746d7c06f975f209067df2cefa55bd3827d892a7","ssdeep":"","tlshash":"31b01242d0575c0e0170c236ec485418474d4a7d9fa708010dc6ab5c0c99f1405e549c","size":103,"data":"","first_seen":"2023-03-07T01:06:53Z","last_seen":"2026-06-07T08:03:11.676707Z","times_seen":13596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bcff1a8e7a2b6bd2867aa8567dddf43e","sha1":"0074268d454c84654038a5637295d323922a2800","sha256":"53acacc8744a764dc6da079adbfa88034895e6c4b762b5fd829e97506d36b1ed","sha512":"ae69b280cc98a3426dbc4394ec5e10cdfe8aa196e3fd5b8686d6d638f78cda2f8eb3b6d566c732c052b89024754a4f9bb037c06caa7ef0b70b1fadfcbf4f11cd","ssdeep":"","tlshash":"eda024350473f034d4150d1034c355cf7305c41043504d0d5f333d70c03c00150710d0","size":75,"data":"","first_seen":"2024-12-01T01:09:32.769051Z","last_seen":"2026-06-07T02:11:50.338591Z","times_seen":1091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"374ff9457908b59bd93f3cabab31d8a7","sha1":"a2ebbbe5cae2c2833ca869397ed833ba31a9c6b9","sha256":"5486d8649f3c21c69012528522270f1d016c2fb56b6e090077a2501af48975cf","sha512":"9a0038c79b917a648fa99656872a057c1adb42e901a510bf4c274d839ae5d9d1e9d9a386b0f86a1152c6eed4aefb5dea6af7aace401b0fab9db2e4cee99aa4ae","ssdeep":"","tlshash":"83b01270c45af474d132f0429540cb8f26b8510af7bb5f0d453879e2908e5482cfd6c5","size":99,"data":"","first_seen":"2023-03-11T16:14:26Z","last_seen":"2026-06-07T02:11:50.33563Z","times_seen":3522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"521ad39d1c361984f93c3142c75878a2","sha1":"a1c4a45d9f974eedaa736c1b09ebdfae6b1b8d5e","sha256":"82514989d2ba1320122e598ebd7f92d323b1aa9c4fba525bd10519a07057ecdc","sha512":"a834b32898c4aaa0b9bc6d2967cfb47343479370c5aca486c815afc14ab5a4c34b564c6eaa1761db5ab1b1ecfaf0944ac862884bd92a2c17de36278f61de5236","ssdeep":"","tlshash":"5db012b3320b643f491884b0f064884891041dcdf7128e25ebf53c32392e03a19f23cd","size":110,"data":"","first_seen":"2026-01-10T20:54:27.20021Z","last_seen":"2026-01-10T20:54:27.20021Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0a3a0b592b9c285e050805307cee87c2","sha1":"125a168e24b2bd38aadb84cbb5f87f316b073c41","sha256":"aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23","sha512":"4097f05a9ce819914160aeba71fa11524f6b291a39b7c948509d756318b600934f1d195980df66bc7731e327979135bfcbe0e9ff3758d779a72481ed623cd3a5","ssdeep":"","tlshash":"a34000000000000000000000003000000000c000000000000000000000c0000cc00000","size":6,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-07-16T08:24:57.881334Z","times_seen":242448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/css/theme.css","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/css/theme.css HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-5f73\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYTYIYdnuKGbf1c5UjLp0jxtfzAupx6mFPML5xAyO5xRvBokmQ1LxOZY%2FSA0fSTlkZGBJ4RPMWTyZbyOori8jDLayhg0B8rdxKxe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cdd2456a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24435,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (344), with CRLF line terminators","md5":"0f53bc81436c5ba3a97ef0171df17f31","sha1":"e5b906bee469283e74ba656d4fe0f3224f13296c","sha256":"8dcdf6d00c03e7e237bab532d8ab11823e3c0df05891e74ffc329c2a6d9ead1f","sha512":"3ee099a2d47882003146c42fbdb266e27752697f3a0926d867c636c789c34a413e75ad94a4b09f0699a07502b78d91b25a29d21e7268bc75b6408637ba5d7bf0","ssdeep":"384:NTsGst+W/iOf7GxLlpz7ywU+PlDNGLl+wpZNR3PpXDXa:ZU+WLf7GxLlpz7ywlPlDNMpZLxe","tlshash":"feb286117ea025a9517ac61aa873fdb6fd1f9012921e17bce8617937d9cf18302ff604","first_seen":"2025-06-29T17:01:32.223829Z","last_seen":"2026-05-17T11:33:37.974482Z","times_seen":11,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":842,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/layer.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/layer.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-3a7a\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bl%2BU4JaqnPoHWGtSducp5kGsOSyom3T%2BEf2D3%2B9QU5MLTaD7BmGvAM1oof398VSdXnR7uiW13IQqxY%2BB0t%2F0t24gKQunVSvIq27a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cdd2c56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14970,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14878), with CRLF line terminators","md5":"68fbcb811abf577e8c0cd58395866583","sha1":"a8ba25a789cc070ae940db30e7b8a079c2e1c6b7","sha256":"98ff7f63bbce2007fdf41b844f129b97cca167926ef9aef0c910824e439a23a0","sha512":"787153e3b86ac78c97874e510d016ea29af5e7716420c708f3ef92f1a1ed88eaa89c95a51abe0b140c38d04f61484e87f67691199675e486005fd249a8a19502","ssdeep":"192:AmwY/D8YJHlWaW6ml9/Zi9fiei24Sfn2amKV8oOM1x4qv8:AW8QKj05Vf27KVjj8","tlshash":"6b62a65eb50035476162d169905fa90f31b28d22eb078864f1aff4fd1eb8d9562b3f0b","first_seen":"2023-05-22T15:42:39Z","last_seen":"2026-07-22T22:52:00.86069Z","times_seen":354,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/animate.min.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/animate.min.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-90a\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7U0Q5GgIp8l7hzNvCJ0rSTF5i59h46x2wHwnzAanIsULij0HBc8BSQ1eNneaSRUrJYP%2FjPOCZE7qp2urVI9gnX4iIXYf%2F3bF3AG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3256a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2314,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1364), with CRLF line terminators","md5":"d5e7c749884e922e60a4d4d86edd1986","sha1":"07a154def14ea984ebda42403025b4aa1f25746f","sha256":"992b49300eea9ef49b04f096cb8354d7c03266b3ab6efd6be62bc633a0c8efd2","sha512":"edf415c79323ebf3ebfc5cdd5758f8bd485228a8ac571ef3faf13ac71f7f7936ddbdac8f98dc76093c0e3155073e76a09681bcb70b5e59129c954762f6e06cf9","ssdeep":"","tlshash":"694101d930d2386643ff603d553f6246a8307126468a8067bcf9cc7c38a2c52bc2bd2c","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-22T22:52:00.852598Z","times_seen":568,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.init.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/jquery.init.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-2490\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ux7Sdv9lZL%2BRFP5%2BTmjhHoG3bGVJ%2FUu4NgX5aqxIYPTYuBIK4pF%2BhfSG%2Fir8CQg5dmFgs%2F5oyUQDOMr2WQuexaxWCtqQlq%2BV1x9a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3556a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9ea72f72b0cc10dc21fd77be075d8ce5","sha1":"7f172814ed076f5314869a1194937f2b0d676bda","sha256":"ffe9e478c9ace9d6fe0c647347451de3834de660e0e7c6c8786319eae0c1e180","sha512":"96be53d8fc050e511fc01ca28692d30289de9d7dae04dbb1b643a9c49c047293904c84ddd9036448e564e472b26d3671d5abe752dc6af59545e7118dbb4ef941","ssdeep":"192:08NJyJ7EkM4S5CDiQ67qJFnKY6FlCLUqbTkZqyKY6F9GCLABe7JHJFnKY6FlCLUq:0YRGXEF9UlHXEF9U9","tlshash":"1112cd2824d3295b6c4bb03986dd407472b5e517072defa1bc8f23226f95a3816f8fb5","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-22T22:52:00.857755Z","times_seen":588,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.bxslider.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/jquery.bxslider.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-1021e\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uenoDJLns%2FhCDMSs1glDMFmXOWd7JrwDHyhUgicS6ueKS%2Bm0RN4j449rD6nHGSok7mexuKojXOCfk6hTQYPDZdjaYa94adV%2BfVhL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3956a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b7d4521aef7a399dc027fd3224cee671","sha1":"3b8862104f2a0cce661f34c3568ec3b828fb6986","sha256":"425ca79264e56253da98b36b55dac936ab6c887e3f464d97dea93734e1cd870f","sha512":"97908a0c4235c526a3dc7ed56c54d7bb4adc14b3932ea494dfee358c87c8e69c2ae12ff6250ddf711f5a4472f6807a1f29312aac53e31b532258584f7d7c4da6","ssdeep":"768:6ivK0enhMMoPyt19Htehb+n/aqvGkTrrPvYafqEM8JP7yO/:PvpenhMhytKb+/aqvGSrPvYafqEM8JD","tlshash":"5d538105216023761937237dab4aed04e6fb42278525e1a5f9fd870cdfb066401bbfea","first_seen":"2023-03-10T17:25:39Z","last_seen":"2026-07-25T00:56:45.398524Z","times_seen":363,"resource_available":true,"data":null}},"time_used":1113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/1.avif","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:57.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/1.avif HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:58 GMT\r\ncontent-type: image/avif\r\ncontent-length: 10588\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-295c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OCBa6X9xwKSpD6TYRWbVn74FHtqhB2M48x3xppLrij9BpY2k4128J6beCSkVriAVCdyc2mTD14PQmocS4Vv48q8C2n9gescHv7c3gF8MGXdy7Ok%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf111928c9b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10588,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fb80cdfcc4417f6ac687d9939f3751ef","sha1":"7eb16ef7405ed3d4e742ec32767263805e569bf7","sha256":"6c13e1e40ba12d6f150aed8c5e637e750e9f1af808f86b67e87bf3404f3acbba","sha512":"90fa6bf6492c501c3fb068120170ec246c42da7c86b3ab2744a4bb48641f8881d677580ccdae5767d696312447452dad536d9733a6c6c297b6abf198b7879342","ssdeep":"192:rGrl9e4ljur9tf4YTdlMjotiM2PUoPjXwaYWEkviMKRfV5d51UFvivs2p7qVi9:rWJ2fDP7CfEaYWoMIfHdMhWs2p7ci9","tlshash":"5222b08977e04c55cd9896f918396676b1067b2942ae10f31dc91bc1cc3d1ffdd64938","first_seen":"2025-11-23T22:47:51.128745Z","last_seen":"2026-01-10T20:54:27.097541Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/lttlogo.png","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/lttlogo.png HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 129541\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-1fa05\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5GOQ5ea2FR2a1PJ32wTzvm8py2%2Fr2l0SKxValkzk8D7j%2Bqkb0dcRHF%2FiBblpEP1NGU87BnsC63yGwzS2gx0LPqkEf5ccILCUwzqsgBCRVfWjlQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122a97db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 771 x 246, 8-bit/color RGBA, non-interlaced","md5":"914f58979be057eeab134c20abf3d52f","sha1":"8f40b40e8d2408ac93896bd27c8bb4cc7f7145da","sha256":"f17bae32bd266f42704200a20ccd84a0b93236b6af086f489e7f6fa4fa98339f","sha512":"2de7556659fa3c10e8c3086c75cf8779569d60624bbacd465460e51e30ea77e129d649e3574d863fc33e168ccd1f0cb5a2b1a04bb4147a27f457b8c5503262ca","ssdeep":"3072:y6q6UOKd2JZHeXRWo12CeynbaytsQ4OXDjrYlCE:yuUOXyR7zs3KDPY8E","tlshash":"d3c312940c8a4c0ad9ca0078cf55d1be1e96b2f3f9c2863157ace1b1bd525234ddae76","first_seen":"2024-06-01T04:51:37Z","last_seen":"2026-06-29T11:09:10.59251Z","times_seen":34,"resource_available":false,"data":null}},"time_used":1624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":807,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/common.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/common.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-38c0\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R59df9HLtqCU%2F5qsLIBQVUmw9m69QFhjZzGughR19w3QgXCV%2BcsSNtkhgKf%2BDl%2F%2BrE635bJaLlN8nKZj5pjtVRC%2BMjKujHQEuHhL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cdd2a56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14528,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9ce8ad56f799a7245dc03b5539397091","sha1":"e86f2a9915c7c244accb6c4b891f0ae1ba37d997","sha256":"45c2455441f35e746229ead3ca269ef248651935cb7eec5fc7693f488aad7e89","sha512":"276bddbc70e899e9cc4ed5d6fd78b0a76d179d7623bbd2747aa684df6b52179763553a57d71e2209e295f1b3f01b4ce28d88b575ccaebb8a68919421e55b7a38","ssdeep":"192:rtxSGljRldgPrcjkTXWXz173aT15zh6ZzZ2NVNZ:5xSGpRgokKkyZzQPP","tlshash":"b152d00cb11486b850fb337b6a7a6458fe26d53742868220fd6c99b47ff1144a372fad","first_seen":"2025-03-17T04:41:03.106121Z","last_seen":"2026-05-17T11:33:37.971817Z","times_seen":12,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/css/global.css","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/css/global.css HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-11af\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=haxk6xxeHPgifmEJO7x%2BDkdfzoVHeCrlHjq%2Fv0ou4CICvWSKPPsziZ2Mh52tlxvy7Hm7i8hTLw3mordinEvrdfWp5FdnrPsTE%2FuT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ccd2056a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4527,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9df13d578f4f71820e6923d93bd2dd3a","sha1":"42f9bba741ff706049e00ce9733ec3755e2028e5","sha256":"d675477cff73cf85000aebcf7ca8ec541730610cbe484cf9f9520b431e12029f","sha512":"b40b181f5f91dbaf35e68f9fbf50060552de8ae1ea2e384bee8aa3bab4620cd665618da33ddb1c2ba33c2dcc6e1336f18e0021cff24b40afd07ed5f08fb689b5","ssdeep":"96:k25ZFj47jLjAe/CDNyjO07b13+ncyf9+289895kEroBq:kiFw/jGDNt07h3mlf9P8+30M","tlshash":"1891762b2681062063229f74f69bdf559f396132808760b9fe815d1dc6dae2b63f274c","first_seen":"2025-04-09T11:19:02.077292Z","last_seen":"2026-07-20T11:57:27.057064Z","times_seen":80,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":862,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/css/animate.min.css","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/css/animate.min.css HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-f4cf\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pCROjY6Se7RHigmSTw%2FfWhrJNjAd3g%2FdF2x3deRZSVeyYDDfiQN3M78OZTtsRkbIEYW8mZT1evhbz1dQobcI3rhEs0gClNWqChkf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3156a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62671,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460), with CRLF line terminators","md5":"ecf4fff84387c64a35d168ceca9f9447","sha1":"f5c42c8fd7e68bdd358d429d1c449815f93e745e","sha256":"791367f6134bdfbb7489431697f59f8fe18d5e5a2acbee501eda814079d9b691","sha512":"e1134e8b13ead7e459f3bcab330da1ecb840d22067edd44cf113024e6fd59e1ee3f2acde4c0654e31cf1b6b8241502d710b67c2b691d804175320b83ccf717fc","ssdeep":"96:ODoPsvQHno/46vwWGBZbidbkIAKADnZAYAKAD8XEfXb9vGAWABsvGAYAWAmzf2HB:ODvQHnwwX7ksQeoDV82K3feF1bK2wvt","tlshash":"ea53c89a0dd1628456121e66c7dd9fa80b2cc6b328724cdf3387684f979179c33ce66b","first_seen":"2023-04-08T02:36:52Z","last_seen":"2026-07-20T11:57:27.046028Z","times_seen":436,"resource_available":false,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":841,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/slide_r.png","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:56.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/slide_r.png HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/themes/cn_bcgame_com/skin/css/theme.css\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-58d\"\r\nexpires: Mon, 09 Feb 2026 20:53:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AhAMc%2BgTUQ%2FKl4UVvqlQ0USF%2FFFJpU60zZ0gPJ7wimPuGvIH4oMkpXo%2FORv%2FqtKijZGDH%2FieowAzpLCMbxfQRdAEt2q8U4nMtWnB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf1114bdf956a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1421,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 56, 8-bit/color RGBA, non-interlaced","md5":"b60e7298d868b865d2fedc2ffb666b37","sha1":"990e1c81365d8beaa3a40810d011bdbdb4f9c631","sha256":"0edaa8f23f41b3be271e453ce788ca11e1f92abf5eb22e7c665f69313472af3e","sha512":"1d1592aa9f6709774d82cb95d3b524450d3a987a96faad22e2bc904bffd6942cf42be2990919a88496ad3d84f2cad41c5e333a5663a583ca6e5c1eca213754c2","ssdeep":"","tlshash":"a821d84eee025c41e298ec963ce1d0276f334980d9d4f40abc8ac0365c342fb049d9eb","first_seen":"2025-03-17T04:41:03.081169Z","last_seen":"2026-05-17T11:33:37.978569Z","times_seen":12,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/background.png","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/background.png HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 181983\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-2c6df\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xEcWCvX8HORyDERRT%2FXILFTwRJ3Ik4kiVZ5WSmrh064LKYsNpcoa1r%2F7sJ3O47WQuLqSD7BvEomYiL4ai2wHik1Rpu1vTjFPPUfu4AGwBvZYuc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf11225979b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1030, 8-bit colormap, non-interlaced","md5":"05bf65d40291d266c59f26f96e67cc72","sha1":"a82f0c303aa0db6e99b37cd73853d7a6810c3e47","sha256":"1a977499b07e4c440c3b1c4284f83140194739f0308cd5090f5f7157a1cd34f3","sha512":"782b2c8345334a55ab399e0767618b74a2bad35835953181831197ce640e4016c6d829f7b5ec02ef2ebb90c91a4aed08ef611ce0b69396874f6b8fe91528ff8d","ssdeep":"3072:yH+fSTQYIsZeo40OdAbcP5CSxRg5rKI/vSk+sD1WDHMfwNNo4rDR:8+aQY1ZI95CSxK57Sk+vIfwk4rDR","tlshash":"4c0412aa6cb708f3c5844cacb0b4add476ebebac05dc7ccef691089d9953c190e84756","first_seen":"2023-09-17T16:12:24Z","last_seen":"2026-07-28T05:25:12.863401Z","times_seen":3620,"resource_available":false,"data":null}},"time_used":1714,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":843,"receive":871,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/sport-item-bg.png","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/sport-item-bg.png HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 12434\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-3092\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnQAdOhM1%2BCG%2F2QP8%2BpKIhQz1ie0yYMcLSL1kCfVyXdum7FzknibvaPL%2BYro1368jo9ZSf6S0aklm59AQd%2BYGEs6umvM3oAcAlfY%2BwN4DA6l6hw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122b983b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 624 x 400, 2-bit colormap, non-interlaced","md5":"ac76c6c7dd993b8bba750449be70d3ea","sha1":"2c1111bcdfa2b3549c8e440c472b866553a270d8","sha256":"b909239d687e0c2dea7608a984bd4a8ad8fe589ec72079a9305f836971c9667c","sha512":"39a33c45472eb07f3d7bd89c60e91a13ad15d94ab4a965b3ff5bdc836383b7bbb5a1a3e03ffcddd14e600583f1f38adb8066347e14f88c51dcab40a8bf0de6cf","ssdeep":"192:YYjq+N9vUOkM3NQeisvtvRdy1/VsBlArzT89SaSkqxUSriFlKtq9RcIyMMwEGI6V:Y2N9vUPpeDvn8WoX8saqxULlb9gMMwVV","tlshash":"d042c0abffcb072865968497030f71a0ea0915ee98298bcd164c7b7b161c054b16caee","first_seen":"2023-09-17T16:12:24Z","last_seen":"2026-07-28T05:25:12.882275Z","times_seen":4091,"resource_available":false,"data":null}},"time_used":1127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.formsvalidation.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/jquery.formsvalidation.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-1688\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UOUVz9M%2FYHW0o%2FSaAESazMgym0POZaDac3w%2FoPZRvzqzh6ekUefWX3g%2BnicScwXQHq9KMbIdwqprKW3F6xU85zyCBStM3NzkZT16\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced2e56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5768,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4c66293ff8e67be48f8360604f2e4708","sha1":"5c6c2586081a950d2a48032f3558baab6d0829e7","sha256":"bb2bfbf0504761fd75f13a1bddcd4d17fb4edf6171588ebc48d6ba59a6ea7751","sha512":"0eac8c16241ad69baa091adc29c3bb060e3ab8a3aa7156e652b00329a74e658d96fa5ffb8eb12be77f9c0e0ea45dd60b0b322ccaf24296341592414b86d37d6d","ssdeep":"96:UZK5MwO6QPLKzLKiBLKLLKpLKxLKyiDmiSiBGyq:UZKhO6QjKPKi5K3KRKpKyiDmiS4Gyq","tlshash":"8ac1e8ccaffa204259b731f60faf806672b2a723054c9f007a1c42b49fd1a6567d7b85","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-22T22:52:00.911323Z","times_seen":597,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/css/jquery.bxslider.css","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/css/jquery.bxslider.css HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-1236\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D2dFDTcS3m395VQNQ7XeryennE5rfIQ4fumagBVi0PR3r3tS5kw1NZN8GBBZSnFwPlH%2FL68SkEucu9N9%2FFEMRtpnrbD1xQWYcmvY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3a56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4662,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6641b2b2dc4cc8a6e7587e08ff1efdc4","sha1":"b36b5df97398b6fd6299938413a2625c4eee0a0f","sha256":"f3193ded29f2ad799ed9553afb4ad6c9ec64d7d8af46fdb112ad28b98ef45d1a","sha512":"a2b8e728c6db439a25c993d04ab7699d060ddd068c207aab094d1aedc46c057c4b7408b1cb0c04ef5958c8fcbe4d9c03bba90f1a9ee489c2a4b7e21c4283c25f","ssdeep":"96:3v0bd/1Qec1Qi9FxDyJOep22gBzRDAuuftuu7gdn6BT2p/LjhsNLTgD:f0R/5cPgJ8BNDAhVhC6Bip/LF6TgD","tlshash":"b3a1cfd45663369f622aa62c3fb0835c8c688033af0b01fef4e1a57957ddb9413b7585","first_seen":"2025-04-09T11:19:02.071492Z","last_seen":"2026-07-20T11:57:27.05803Z","times_seen":224,"resource_available":false,"data":null}},"time_used":846,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/css/lightbox.min.css","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/css/lightbox.min.css HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-adb\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UACtQrxu44tPKvokLwXKcz7AYTq0r9cShQ%2BmZF40Nv22RAy2%2BfG%2BvvI7XIpolaOa%2FxirTZHZ9NII8OALooZkM2uJ9jDGsu194hTo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cdd2856a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2779,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2776), with no line terminators","md5":"60b6d81dca4f38177ba108ecb005b5f4","sha1":"4a57b7f5b772a1c224c1cbeaf773fc5572c04fbb","sha256":"b472603d225e3446dc3642df70857c12e48b9c1fcd2d270c69e5499af7f6aed6","sha512":"00d80f08cd527f8df2193f6713d2770e7869ee6b999f21f62a53d984de0d4233a9caaa4e0cd47c8e46bf25225e7a73684615e4ea00e865b44c72ab3bc6bab922","ssdeep":"","tlshash":"93510137b758712ef533c246b9d497d54668e193fa731f9ee288b132d2872442c32e88","first_seen":"2023-06-16T06:39:27Z","last_seen":"2026-07-20T11:57:27.031497Z","times_seen":186,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":794,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/language.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/language.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-680c\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VirIapn9JfQ1PomrxRTt7re8MEuyyQc8K%2FuT0x6Rl%2FJDDl5nk3%2FduXtGo1Z05TQ1n96%2BUAO7wh%2B1JNgAdJkS%2FrqR8A0BXJzTBT%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cdd2d56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26636,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26204), with CRLF line terminators","md5":"e0fe0cfdef0a30dc5d76bd5b271055e4","sha1":"5c5a7f6a85371e1deb4ccc995d331ad1aa24e778","sha256":"22da846d85c32742daa8d179d4c350b63e539c781c0b55c21350e0c2c56a0941","sha512":"448fdd470971ba3f45e47fb35a84d95a6206ef120eb56c87ace952a1b835c0cc78e9eaa0fcc2bfd5c2956cb0f56c607bf9666db23ac02c6c2578ed6af75f1ee9","ssdeep":"384:7+nb3s7a3beOMW6dL1BqupobX940xpspapY4VbQCj:7+nTt9aBpYNmpaxVbQCj","tlshash":"1cc294dfa346043a65ff92cdcc986f2f86d4093255a3d039f0fe4a4a3b6592de114a39","first_seen":"2023-03-13T11:25:20Z","last_seen":"2026-07-20T09:51:13.773161Z","times_seen":89,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/news.jpg","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/news.jpg HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 13 Dec 2025 08:00:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d01-1fa51\"\r\nexpires: Mon, 09 Feb 2026 20:53:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5IiJKFr%2B5TBS0CTp9F0Tbv4YbRLK9HetW%2BMuVoLfKqn%2F3Mt6bAeod9k0pAkrAGLvEkhAepC2uuCsNpGCPiXBcuUgYwWBBepKz%2FUN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cfd4056a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129617,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 1280x853, components 3","md5":"ba2e0d1f458055fe3715b499b79c9379","sha1":"06cdf215fde0bc6f680fd89f5b594785a4496af3","sha256":"e132a2ec2dfb2d0dd12542d4e5a9c9d8a9735eae904c7f2f227481580551e40a","sha512":"b482672f8f7ab8dd837ff22c6dae13d95150f562f853eff193be5327518eedc8d009f565e5390d3c6dea68a3a2882898e6f25874eeb80a59726e377ccccd25ae","ssdeep":"3072:TGUNun3t+4ac7UxUi14v6qb9GW7fTQBRlOCBCKUQJD5H8VkWe:bNy7Ucv3BrQBRl1UQcze","tlshash":"25c312dc3690427c6baec6861f8fc779dab07e2b58fd0b484294190db359204f2d49e9","first_seen":"2025-12-20T01:20:04.546263Z","last_seen":"2026-01-10T20:54:27.108259Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1121,"receive":556,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/lightbox.min.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/lightbox.min.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-2128\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rW782tDPSMMD35zoMV4TEKqcBjq4W7Rq99rCFUGIeOYDDHRJqBJOKkaDC7kOq86rsmD%2FaqQrChuGlJP35RzO%2Fd%2FePdc9f9OkEbVV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cfd4356a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8488,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8205)","md5":"0f8f7757e0c3ccbd26b738b95d91bd3b","sha1":"12a3fd559dfede768d2cca5014634d55f343493f","sha256":"7f36de4455b10ca52ae3e585dc4cafd63851715da1ae3e4b2439f66ac045ebfd","sha512":"d9e8a395d29a9cec732b9e2dbdb1570dee752310808cec98749b1bf9721c285c8b366e930a0927f54b97e698437604409279a190ab4e4c39ef7496b39d0e8c8e","ssdeep":"96:iiJg6kB8Z9PtFdKcaevYgvozT9piR04FJKTYaLxLUKmt0ey8/IwkCaIR04BLNKZ/:3DkBgdKJevYgAzJcmxLxLFPS9aYBqxt","tlshash":"5e026545fb202039eaaf40d7300b5b1a1736663bbe039aac743cc6e999f5d445967f34","first_seen":"2023-03-07T17:30:52Z","last_seen":"2026-07-23T00:43:40.830446Z","times_seen":995,"resource_available":true,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/layer.css","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:56.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/layer.css HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-2c22\"\r\nexpires: Sun, 11 Jan 2026 08:53:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oBURS2imHnxe9fyUY5SDAKi5r5%2B2E4SgMrlt%2B1m6%2BoGlOgsLI1Xul79vqSsPwH6eEvDbmx19fEFvhG4v%2FAiXCP69lkdEJXxQ0oKs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf11143df256a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11298,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (11217), with CRLF line terminators","md5":"404e67c5b6377b9b686bff7aad6e11ae","sha1":"846b2c0737fbe73b74245a9d9ea8802d759bcf8e","sha256":"0cbd91e291b4127a3109b88905f8b2b7155b69fa52162685e30e88562e89e8d5","sha512":"ade0d758b0f8d1e6ab7c90f1d4bac0b73cf64065e24ed61be8f6e6b6db896be82ebcecd0f3ed17a28869a47caf17b45a0de8aeff0a18a17b7d4874ab4b6829cc","ssdeep":"96:r7FL/x+NjAQawo0cwP8EK6nMLsDWVsXfPHL/LztJDzy8m0T9zBKgwBnsj:9Lce0RmLeWVMrzztBm0T9zBKgwBnsj","tlshash":"3d32e4e144811299b0278655d6dc7ab922f88d53e5630cbef297381fcb086dfa2f6247","first_seen":"2025-04-09T11:19:02.083016Z","last_seen":"2026-07-22T22:52:00.853107Z","times_seen":442,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.global.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/jquery.global.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-7098\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4XreDzUm72fxswcEKop4LK%2BAm3RpD%2BaM2i1jIDrVQsi90zjw%2FchmZSYJq6cxRipjRON0ng5QEB3Ax86ziM88xc4R1A%2FPYcxqtx0w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cfd3f56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28824,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"97503e8b42a1d15fefb6383d0167623c","sha1":"703f0f15fa6d4b164ad27703a052ee1307c7c863","sha256":"6ac75cda7cd6b70995b00092437fda001bc6c851dad54667fbff18847910f7fe","sha512":"ae1ffda8229be4a139d4878d6418684c96d7cbaba9db70fc17588ef26db83dbb0b04ff66aec1e2570e567816f35a401a7dc0030434318583672d96877374bf6e","ssdeep":"384:ILvw555wkiPJiqOMiqT6nPjBrOHOUoieShqIEQe:AMhiPJMU+rbM16","tlshash":"b2d22e5d79f754665533b1791aafa00071ba8813050dee00be4d62c0afe953ea7fabcc","first_seen":"2023-07-05T07:23:08Z","last_seen":"2026-07-22T22:52:00.858274Z","times_seen":269,"resource_available":true,"data":null}},"time_used":846,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/tongji.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/tongji.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7j7OOamDr7jcm7SQ0d%2B0HOCHlC3qAvCvJN5ySJKkxyHnLS8zO8rhhD8bmB567q9keDOQ6%2FQyumF48szPGCsIbbNYOIwGHGH2PEIs\"}]}\r\ncf-ray: 9bbf110cfd4556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"ebf53a5670818ece427c93e377064a30","sha1":"148e68dedfd17a8d5ff7b86149ab1dba1c93b28e","sha256":"c72f613a27e797b4990d7a78315bc197fe65a9bb7237c7222c3cb734d34a1bd9","sha512":"7b7235f99002cf3e50750d1f02f4d3add1876b66e8f7b6c7ef164b74d170f68c898511bac8e220fd1f27f99eb35de717c1954890f9d17a44890b6c1d70894c0d","ssdeep":"","tlshash":"14f0c07310439c1a57711372a5b3b55dc2e77e1262249860f0c0307f3ec5fc0e887616","first_seen":"2026-01-10T20:54:27.116431Z","last_seen":"2026-01-10T20:54:27.116431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":978,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/slide_l.png","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:56.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/slide_l.png HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/themes/cn_bcgame_com/skin/css/theme.css\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-596\"\r\nexpires: Mon, 09 Feb 2026 20:53:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14Ssk1JhF5yL4icE3849d%2B%2FEK6CnZJkQ3mTmmo%2FxZz1vsDFm5bgL3hjVIm0%2BxOd3Fn2%2BFaG6g9V%2B0ZXOTrLxqPVs44fhKtGpifaK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf1114adf856a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 56, 8-bit/color RGBA, non-interlaced","md5":"8eb1c6e78a62cd190fde80bd983fc738","sha1":"ecb98fab40af09f93e483eaf174e238e2af313d3","sha256":"9fe465f7ae08bc59e1acfaf3e3fb136fe1ececebda3a63c20bbf154a18d9da69","sha512":"bdd639cba89d090fe6fc29cf3b4d251195140760aaedbddda4e92f48bf784ab86a8615fd4750167e32d53dbf34ecff4e1e58cef7ca692aaa382f80ffe653b3b3","ssdeep":"","tlshash":"0921b64afa413900a29cd9c269f7d41f8c2b5880d5d0f586bc4fc4265a203b586ec6db","first_seen":"2025-03-17T04:41:03.062587Z","last_seen":"2026-05-17T11:33:37.907382Z","times_seen":12,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/nav_cur.png","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:57.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/nav_cur.png HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/themes/cn_bcgame_com/skin/css/theme.css\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-423\"\r\nexpires: Mon, 09 Feb 2026 20:53:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cjj2oUNHMca1Qq4LOh6fpp3suRKyj20MuxBtLfMM8OwZRpyLBWRsdmklf3Z7V2viwPCIf3k90%2Ff2qzGwcBt6hSHoKPcR1IxWbtD%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf1117ae2856a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 6 x 5, 8-bit/color RGBA, non-interlaced","md5":"1496f589c0f049845d265fb07bedc284","sha1":"af1e7111288ad04e3bc5d5bf4fdc1ad6ec0d2f13","sha256":"4b68fdf82fd86669e50335890f5a3df7e6b2fedbc274e93257239bfaea43ffed","sha512":"fb6d9dc9c9218d818a0ee83e970cc248665e217085d9cfd5de7da9d9e671ab65797c9fa126e218b0c6528680c55d40a08daa75b637ed0649be523f3c064a903a","ssdeep":"","tlshash":"9911425dfd512c01629ce89328f989278d231986e980b019be8fc8634c301f948789cb","first_seen":"2025-03-17T04:41:03.032201Z","last_seen":"2026-05-17T11:33:37.963985Z","times_seen":13,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=270C0E159B95DD4C\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=241179769\u0026si=84ffcc6211b0bdc1bd6b046eddb130d3\u0026v=1.3.2\u0026lv=1\u0026sn=9672\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fcn-bcgame.com%2F\u0026tt=%E9%9B%B7%E7%AB%9E%E6%8A%80(RayGame)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99_%E5%85%A8%E7%90%83%E9%A2%86%E5%85%88%E7%94%B5%E5%AD%90%E7%AB%9E%E6%8A%80%E8%B5%9B%E4%BA%8B%E5%AE%98%E7%BD%91","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"183.240.98.228","port":443,"asn":56040,"as":"China Mobile communications corporation","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:57.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=270C0E159B95DD4C\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=241179769\u0026si=84ffcc6211b0bdc1bd6b046eddb130d3\u0026v=1.3.2\u0026lv=1\u0026sn=9672\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fcn-bcgame.com%2F\u0026tt=%E9%9B%B7%E7%AB%9E%E6%8A%80(RayGame)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99_%E5%85%A8%E7%90%83%E9%A2%86%E5%85%88%E7%94%B5%E5%AD%90%E7%AB%9E%E6%8A%80%E8%B5%9B%E4%BA%8B%E5%AE%98%E7%BD%91 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Sat, 10 Jan 2026 20:53:57 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=F19F9E7484EB0F4C; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-28T12:33:08.740838Z","times_seen":375312,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/css/main.css","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:57.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6921e98d-1a095\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hD%2FcsgYqEFY%2BrcECyf6GznpjyVb7cB9LJe8hZU3EAb88AoWXP0gF78VUVjdsI41xgzXokjBblL8vcoq0DKXXvqoDvtbDQN2pDBxiO3fXvSmmdT0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf111918c5b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106645,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20675)","md5":"080a5530fd00d8308bde3b87d86313e9","sha1":"c84c5e24303c513e50d6266e6708685044c9646a","sha256":"6ef2b2b90714dd8ac98b8f7ab313d3961af3a6ac58919b7f1863613f59049571","sha512":"f03e22a33d6553ac7d2d3f3ecc54187a4b30032ba2d34a421f0717df3b3c66b211ce8c2b183aac2dfce65cdd5bb150538ff77d55d478be56dd153019d4412ad3","ssdeep":"1536:GvCPN3HzO7HeZsGvVHlaLE4STizU0X4qrriMnWf9jnR:EkI7HeZbfaLE38pS7JnR","tlshash":"16a36c655ab33816b02b8ebf37ef3319393880435806fd587aec269cdf8527545a1f89","first_seen":"2025-11-23T22:47:51.067977Z","last_seen":"2026-06-14T20:36:56.606872Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1127,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/fonts/latin.fab57614.woff2","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /fonts/latin.fab57614.woff2 HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30928\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-78d0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVTNV%2Fv688%2FCS%2BjTR1mBbN6zf%2BWlzsOdLK1%2BX2bb18lu7UC5dFTZ0tw5ezJV%2FppHVMPlEsbqAMaADLmexyp%2B7%2Fvd5%2BTpg%2F3IYTKanFiovj%2F2rTI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122d985b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30928, version 1.0","md5":"57cf39e316b7e79e7cd2c70bdd01c8a0","sha1":"3cb638f40c93c286c90f8b3bbc179ecd9fd182a5","sha256":"fab57614b562fa655d1663afa2720078a3b016e0fd780cf7305c06338642516f","sha512":"bbaf1293cd10f0706845072c39f78e760ebc7159d5da74870b569dfcccb4aed71cf202eb1331424ddcc13863ff94e0aa112290b3dd153306f2a4e964ce44f5fb","ssdeep":"768:X/WjfF4jGDEvdJC0f0JjzpyArP570Y73D9dU4Zg8+V3Xe:X/WjfFqYqD0J/rxQoT9dD6XdXe","tlshash":"31d2e1fdc995e285b426764ab6cba807ff83d350083b7390dd6c59310886ad490235ff","first_seen":"2023-05-01T15:57:54Z","last_seen":"2026-07-26T11:38:26.145133Z","times_seen":2104,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":840,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/css/color_0.css","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/css/color_0.css HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-31cf\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2BaW%2Fs%2F7hP4X%2BqUNqkzu%2BISgr%2FWFELOTGS1eCyAz44wRYHi7hDTO5O7daOzoPVjhqVNiNAkEGB5bLHekWinMmgcpiljMM6zafe4j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cdd2556a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12751,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (375), with CRLF line terminators","md5":"f6ade3b1e27aabc2e8ec7a44666ddf79","sha1":"0463fc64159647b66ba2b56369fc115450cc6e82","sha256":"49541a4ffcf3f5633cf421ce454165353a349d0cd23cf7f6f7977d4a53b23474","sha512":"c213803303bfe81bc2145c349ee7893b37ec8c23a57053ab2005f6e5f486fadfbf9b1cc6d0ef791ff916ffdc57a3f5c2d1db43d4ef0b5585014b15cd6eb9d0a3","ssdeep":"192:iFRQlBEAhd56GBHxU5IbUd08ZczCzS9+vl9e3v+:iFil1hdcyU5IbUd08ZczCzS9sDV","tlshash":"e8420e31be8512ab3937c95e306bf9a6ce1f5df5d60a17787826b1b2f18208005bfe01","first_seen":"2025-06-29T17:01:32.249395Z","last_seen":"2026-05-17T11:33:37.843836Z","times_seen":11,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/base.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/base.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-10c3\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qeOiGryrW925SDIYydBeYny%2FUTn%2BEojBi6j9WuQwo2t7U5LrpbP8xp6XWfnG68FQu3DVh2j4DIWhA6CA78RSdYxywCY04hVcn4Cr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cdd2756a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4291,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"b217a41cf08538d072a5aa008f2534b0","sha1":"93a54c08bed6cc4e5518a9e619a8b842ab124341","sha256":"a96e91a41892e6e4629d3c48ccea9a0de4999c1e1a217c629f3289bf70723927","sha512":"196ab139e264ce8ada7fbaa78eaa364bd8fca82a7234d88c719c3d77010bcff9086808f1037e9e6523d065b433b7f8545ef76e85427d683d7308abd1ecb9d0b5","ssdeep":"48:9FaFVh8WQhET8+aCe9gFo2AsAyH0iBkdFexTncsdU1sdUxyoMdEjoJMPvVMRRq7+:jyVD8TC0g10ckaxjXP76NnyLmry","tlshash":"61910f6c461736268e3173769faa610dfba301770642ca143caed3591ff0a3249b5fe9","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-22T22:52:00.917015Z","times_seen":578,"resource_available":true,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/next.png","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:56.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/next.png HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/themes/cn_bcgame_com/skin/css/lightbox.min.css\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-546\"\r\nexpires: Mon, 09 Feb 2026 20:53:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qd2267wiBrnFf1y8SAbnk%2FbG%2FrfpRF0XG9YLSPcItEydnrf5u0yVfFsZlZvHDj%2Bu1Fbv%2FggUc26L3RdGWh84KGh30qQZT%2FoEdQfD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf1114bdfd56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced","md5":"31f15875975aab69085470aabbfec802","sha1":"777e92c050f600b4519299c3d786b8f2f459fea4","sha256":"15b869b02c6fbaa8c6c26445a2dd2d9bad80fd27b1409f8179e5dd89dc89d90a","sha512":"edc920dcd2f5ac9a6e08098c6a59f888a9cb135ff4ef3dc2183931e065b6531e00e2c8acd3c329a3d90eb939ea3db318a9b677b5aa78a227815373d7008d40aa","ssdeep":"","tlshash":"c221d8f1f658249b813a8279587be1602cbf985e31b4cb8709ddbb3323b5c04e102376","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-07-28T09:42:55.640341Z","times_seen":21107,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/3.avif","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:57.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/3.avif HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:58 GMT\r\ncontent-type: image/avif\r\ncontent-length: 10583\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-2957\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CieqocioZyAz0u70nbvRlS%2BOkmrbAA1LniwIaJ8fd706Qmh484a8hwiKi8Kymdzg7i7%2BSrcb1l9AUaTKoZv5Mtej4HfJ2AWVXgxPBjbY%2Bm6sqY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf111938cab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10583,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1d7225fcb869fc7e91513546694c16ec","sha1":"be333dae8acd00c4d9e7e5c900b57a9e88ed04bf","sha256":"d5f5ee444bca69e96d35b57c366161e150606c81e9c299ff866b6a9c665a81d5","sha512":"cc5fa92cf57cc75e0218aa3b5580cc2cb03cd12a9b92b7f89cc6ee3dfc886349af46fe7800ebf3a0217de7b6e50827cdd818d558c1f6372fc9715d0ccc619116","ssdeep":"192:rGQYa3QExI4F21Ti3jdlCxb4W2JyLRv27x7z89sSTwAtZBsimykm8uT:rsaLOoTbWIzuTrtOyhlT","tlshash":"3822a082dbd61e27e890e27c20eab3497ff6f8d5116616f70c681bf05151336ce986c4","first_seen":"2025-11-23T22:47:51.105823Z","last_seen":"2026-01-10T20:54:27.129487Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":"广州有啦网络科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 04:08:22 GMT","end":"Sun, 19 Apr 2026 04:08:21 GMT"},"fingerprint":{"sha1":"AE:CB:32:71:EE:EE:E6:72:A4:88:B2:9F:4F:C4:E5:B5:A8:C2:73:6C","sha256":"7C:F1:09:2F:6A:8C:5B:F8:63:DF:D3:32:B0:F3:F8:E7:01:29:0E:F2:55:8B:4F:6C:58:55:8E:44:E9:EC:15:F4"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 327\r\nOrigin: https://ovcgs4.ncuwibjnvw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ovcgs4.ncuwibjnvw.vip\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\ncontent-length: 0\r\ndate: Sat, 10 Jan 2026 20:53:58 GMT\r\neo-log-uuid: 4441119109792445070\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T12:56:22.601433Z","times_seen":17579919,"resource_available":true,"data":null}},"time_used":861,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":828,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/event/js-sdk-event.min.js?u=K1XPyxsmxxNoCA2A","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":"广州有啦网络科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 04:08:22 GMT","end":"Sun, 19 Apr 2026 04:08:21 GMT"},"fingerprint":{"sha1":"AE:CB:32:71:EE:EE:E6:72:A4:88:B2:9F:4F:C4:E5:B5:A8:C2:73:6C","sha256":"7C:F1:09:2F:6A:8C:5B:F8:63:DF:D3:32:B0:F3:F8:E7:01:29:0E:F2:55:8B:4F:6C:58:55:8E:44:E9:EC:15:F4"}}},"request":{"raw":"GET /event/js-sdk-event.min.js?u=K1XPyxsmxxNoCA2A HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ovcgs4.ncuwibjnvw.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 15 May 2023 03:20:16 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6461a4f0-127d3\"\r\nserver: openresty\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=1296000\r\ncontent-length: 21583\r\naccept-ranges: bytes\r\ndate: Sat, 10 Jan 2026 20:53:58 GMT\r\neo-log-uuid: 1770881404927965087\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":75731,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65308)","md5":"d8b86cb6f6c21e85b9c937dfdb9c2d28","sha1":"b4d1693de341bc8907adf4ce9c92ef81fded922b","sha256":"76321b4c7a653d40fb72e4e2501842d3b12f3bd2822e7d1103054eeff1a6a53c","sha512":"5557b2e594e8fa69722453a399c2b48335a241f01ab22c1ae151a98fa637139372d9105c7d48428d0af31cc9c7d70672fd0ad59f58823963e813d528434e3b1b","ssdeep":"1536:Mm/6jaOdXslehi41GvwsciNxLbxLcBXs1v3kjs+TTk1TVBSYreiMUGsnJ9+Saebb:MmDS8SOZ","tlshash":"3c7309de31c2b07253e7316a106f610bf13a5d556c0e5820f215d999bc78e8b82bbf6e","first_seen":"2023-04-07T05:45:48Z","last_seen":"2026-07-25T08:53:14.250517Z","times_seen":1714,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":45,"dns":1,"connect":19,"send":0,"wait":22,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/css/font-awesome.css","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/css/font-awesome.css HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-818a\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQpjOqc6yBvYsDyJM%2FNWA9S1DI55zbjHDe3469f5Ze%2BOL8HNwSjza4zfTiDknPRVMxwY7YTBfrnAiTP8Dkmdo%2FWwV3ZpnPyE0N92\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ccd1f56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33162,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (306)","md5":"d0e8248c3d7516f930bc39daa206e64a","sha1":"c7e402126b1edcf171dff3f3b0523cd024597c50","sha256":"4ee69cac088f0928ef8f4d86bfe8dff00763812407c5e5155e16db242cba4a78","sha512":"6ee12809baa407851b18156a4cf0605bc83e27e9fd2546828a69fedf509bab88ac176890a97f08806cca8855d0234bf3b9cef52313f53dc9e1742bb03a4654cb","ssdeep":"768:y0j++A4CSIDqvnI+YTBrQPvVlJjPiRAiq:Xj++A4GDUI+Y9rMVLjPiI","tlshash":"c5e230ece5bf18904391e0d16386a270fb3dbb2c9c4a6d9cd2a6798cb1c1255d2c63dd","first_seen":"2023-06-16T12:54:23Z","last_seen":"2026-07-22T22:52:00.858951Z","times_seen":268,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:56.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 20:53:57 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Dec 2025 15:27:43 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JB7BpnkpvvGwtgicJZCn87kf1PjKSZoCwaNQahX8VVHb44UJ%2BbOK0WA2vDLr48HkmlE4SYu88lK2eIm3POWK%2FZkuVMewg9vDi%2BXzD5tzzMgWduI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bbf1112eb26b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18499,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2320)","md5":"dfd183c52913e58cbb5d88bc5f8cc4c2","sha1":"e41994c133354f3387b2e9d39996e9254503ff30","sha256":"a5f64d106bc9882a6eafdce8a3ebfa4f79ca5703063227d3bd436b243b31c8c6","sha512":"c9d024d42f0ba57e1b41e498b7bee0ab27bf00702caecb8661a7051c6d7e0d0bf0b4dde0c3d0b9944c2f11757c9093485f8128032bd74d95e48f44d45ed9e3aa","ssdeep":"384:E5bqnsPg8LN+POpU5IalqzvPmBzQUV5onU:E5WsXLN+POpU5IalqbA5oU","tlshash":"76824133d1f1013b119694969a24977b6e62e687c60ee34676ec0af94fc7e83cc1324e","first_seen":"2025-12-20T04:55:22.806563Z","last_seen":"2026-01-10T20:54:27.13534Z","times_seen":5,"resource_available":false,"data":null}},"time_used":934,"timings":{"blocked":39,"dns":30,"connect":1,"send":0,"wait":840,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/config.js?_=%3C?php%20echo%20rand();%20?%3E","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:57.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /config.js?_=%3C?php%20echo%20rand();%20?%3E HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 10 Jan 2026 17:45:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6962901c-1542\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3%2BnfC77llzX1iGo%2Fzllx5hBwkLXXhVYYFNq2KKvUqEPtm78qJgIG6inKzkQ1ytZSwRkEows1UX1TYUXBgTwiuWUPQgnFQmvwXz4EFb2jtQOGRI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf111928c6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5442,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6703774a34b2eaaba33fe94b6cc30099","sha1":"c6106c5f29c2ce950d40d1f23e16ae113a32f9d6","sha256":"aa3854553dc0f20729e552bcd709d4098a79857804b69f64fcfd1c5af58f9780","sha512":"71adba263d5a3be69e2acd291b0531451deb91244fa2110ced26b05c685502b914437ac59552923f581a53f74bc27d26df415cb59950e3301dfa0be114e8eb1d","ssdeep":"96:KqIq9diKjZJjGK0/+gD90vVg+mM5zVdqoVamawpma9maqLma1qrBmaalDOTtf1N1:KqIq9drjZJT0/+gDevVg+mMFbqoVaapZ","tlshash":"5fb1479bb29e1c3202bb1d9e9f1f63883c92164adc19dcc5ae0c6ce49f50e45d51bf51","first_seen":"2026-01-10T20:54:27.136626Z","last_seen":"2026-01-10T20:54:27.136626Z","times_seen":1,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/fonts/latin.fab57614.woff2","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:54:00.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /fonts/latin.fab57614.woff2 HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:54:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30928\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-78d0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjY6mt9KRM7qIUDNKb%2Bri723hak7OhBtJ1UrGrbJr1xLaemyEE5kF35nGqYRkyewTcEkifMrRiYCPp1TScM0I7GiVL%2FDVwRjh89353KOVBSdfkU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf112f0a03b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30928, version 1.0","md5":"57cf39e316b7e79e7cd2c70bdd01c8a0","sha1":"3cb638f40c93c286c90f8b3bbc179ecd9fd182a5","sha256":"fab57614b562fa655d1663afa2720078a3b016e0fd780cf7305c06338642516f","sha512":"bbaf1293cd10f0706845072c39f78e760ebc7159d5da74870b569dfcccb4aed71cf202eb1331424ddcc13863ff94e0aa112290b3dd153306f2a4e964ce44f5fb","ssdeep":"768:X/WjfF4jGDEvdJC0f0JjzpyArP570Y73D9dU4Zg8+V3Xe:X/WjfFqYqD0J/rxQoT9dD6XdXe","tlshash":"31d2e1fdc995e285b426764ab6cba807ff83d350083b7390dd6c59310886ad490235ff","first_seen":"2023-05-01T15:57:54Z","last_seen":"2026-07-26T11:38:26.145133Z","times_seen":2104,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/css/widget.css","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/css/widget.css HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-18844\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yy9ox4rVcSQ6ZIOYBm4mDRhCoRFrjLILdmHyFMn%2F69%2BPNNsem%2B9kya3G2yWJ%2BGFqNAm7EpZgPc7incyBQ25wUWq5FovA0rn8wiU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ccd2156a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100420,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (475), with CRLF line terminators","md5":"c038cda52c9023cbfabee1edbb480936","sha1":"4d529fe50b969a0c6d83f746e1b631de85dc9fc3","sha256":"7ba8447f23936a7be4d7e6e2995385e9dc0f88ae5f42653914421dbe5aa16c98","sha512":"074838ae68b746563a074c03d9d4b3854811ebb9d346e1a3a6681551cf139406fb57eedd9d6b69ab6b2c2d61a04e394461e3b5876f9cf55a17f146b5bb05bc67","ssdeep":"1536:T0oYyhvDCtQzuu+bJGIKZGWTLiqssCRtmzJ3KWyv6hpE0zE4GqONDHC0p0J66tzm:DVuw5ARTSm","tlshash":"38a3b810bf601028906bc617b9e796e5fd3fe01692731badb9147a2ad38f59b01be344","first_seen":"2025-06-29T17:01:32.243423Z","last_seen":"2026-05-17T11:33:37.958251Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1121,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/59acfb690c637.jpg","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:56.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/59acfb690c637.jpg HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 13 Dec 2025 08:00:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d01-57a3\"\r\nexpires: Mon, 09 Feb 2026 20:53:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2WKbhPHX77VCLfe%2FUs4dJQ22kwPJVMuyPrauUoOezEXG3LYhB%2BWR4Sc6OJQZzBMwiMSnFlqjIEB7uRd7nZynYLbzs1W6PjqcrioN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf1114adf756a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22435,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 640x331, components 3","md5":"cb8d11544a5861723f8591688c9db785","sha1":"a3d6c5f7dca0a9be1f5b095bd0cbeced28248ed7","sha256":"3c0be6d1ac88eb10edc2d0c742bdb64e04331e3ff195a0ca17af32a1452e74aa","sha512":"c43a4295f4d35adac12f2af153fefa0c0b5bc049259b8f1d76ebc5edc892e0acfda230d2634ad1de96e37d18190ab9598a9ab5c31c10bd0bbc672935c06308ac","ssdeep":"384:Lb9pUTYUx+2nRhPdWaILKiX8J+UnE3VAsdL75mwY+fB2eu0a5P4miAqzt:LbrUTX+2XVs/X6XgA+n5C+fPu5Pbfq","tlshash":"10a2d06c427257d6e76173b7b24c1c09f183990d53f2a6bd12e2eca0514eef9c1a2b18","first_seen":"2026-01-10T20:54:27.140465Z","last_seen":"2026-01-10T20:54:27.140465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/close.png","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:56.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/close.png HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/themes/cn_bcgame_com/skin/css/lightbox.min.css\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 280\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\netag: \"693d1d00-118\"\r\nexpires: Mon, 09 Feb 2026 20:53:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v9YQSTCUAn%2Fr3LzDuUHN0DXiHsLTlKHAZ%2FyJ3a%2B8J2Z9f%2FRppN4k3wrdws8iURCTBLrH4MYg9M97GyY3oH0cgzYuVReNlmwhJtEV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1114be0056a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 27, 8-bit colormap, non-interlaced","md5":"d9d2d0b1308cb694aa8116915592e2a9","sha1":"3ca48361cfe0e41163023d03c26296f375bb3eac","sha256":"5d62e6c90005bfb71f6abb440f9e4753681cb23bbd5e60477ab6f442d2f0e69c","sha512":"ae70339ec05f19d698a319cc265da583814711acbefd81ddcb7d6d5e59934b78b289e5a55c666af62216a8f9ce5de60afd6f41c54ef7e4ea569d5458cef78af5","ssdeep":"","tlshash":"14d02bde1679ec69ec90667161128210d83778517264a145704fa125944b685f515367","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-07-28T09:42:55.656126Z","times_seen":22324,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com//favicon.png');%20?%3E","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:57.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com//favicon.png');%20?%3E HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7; Hm_lvt_84ffcc6211b0bdc1bd6b046eddb130d3=1768078437; Hm_lpvt_84ffcc6211b0bdc1bd6b046eddb130d3=1768078437; HMACCOUNT=270C0E159B95DD4C\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oaEbzFHfs3YJurGBCK1Fhgx3xE3sscqu7dT6PsfWsmlmJy25%2FewaWDjr%2F0FNqt%2BC6oYGAh9jlHl9szsGz4qgBNDJ4YbPjl8z5bsM\"}]}\r\ncf-ray: 9bbf111b7e6e56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":554,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"ebf53a5670818ece427c93e377064a30","sha1":"148e68dedfd17a8d5ff7b86149ab1dba1c93b28e","sha256":"c72f613a27e797b4990d7a78315bc197fe65a9bb7237c7222c3cb734d34a1bd9","sha512":"7b7235f99002cf3e50750d1f02f4d3add1876b66e8f7b6c7ef164b74d170f68c898511bac8e220fd1f27f99eb35de717c1954890f9d17a44890b6c1d70894c0d","ssdeep":"","tlshash":"14f0c07310439c1a57711372a5b3b55dc2e77e1262249860f0c0307f3ec5fc0e887616","first_seen":"2026-01-10T20:54:27.116431Z","last_seen":"2026-01-10T20:54:27.116431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/hthlogo.png","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/hthlogo.png HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 52963\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-cee3\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sfPWs%2Bkk%2BwLkbfP4R5p724dC598j5rco6OA9oura%2F9TP6npobmOMWAvTBeZHoxPCikowPb6biYlAs4kR%2BY1CGTJIseodFZMlaH%2Fp%2BDxELZmY1f8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122b982b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1117 x 454, 8-bit/color RGBA, non-interlaced","md5":"acd7aa3053ae77f508cd9c0b26b35e03","sha1":"cfb954f7144fa292e1c6eec69abd80f007c1b224","sha256":"d64e150b025f78e7c32eda47d8fec40a90c0e5dea86927731836d29d0b257fa9","sha512":"6d07e42f4794a75257c2206bc673a050eb0838e832a0ea3ea516fccc0249c0c7038cdd027793c445a812df902e359ad5ab9639bc4d2ccbf2c2e8e217bd71d429","ssdeep":"1536:7ZdvnfQKmZR5jb54rZIGbouL51Rz7h8MSUbR+rx+N:VSKsvbyRcM/z7eUUxU","tlshash":"9f33f1dc6d67469bff52c0b04ab4925033397a888171f98a9bca87175cfbdc02868d35","first_seen":"2023-11-12T07:36:07Z","last_seen":"2026-07-22T13:46:07.197289Z","times_seen":301,"resource_available":false,"data":null}},"time_used":1349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":814,"receive":535,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/fonts/montserrat-black.be2a4b98.ttf","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /fonts/montserrat-black.be2a4b98.ttf HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 198416\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-30710\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2T5I3%2FmCzvmMibzHU9Xa7hgaBZw7K6GfRc7jhq4sYxLGWAQGlZjzUukpBiOhmSMu4MZRVK9yw7ILnLqNwvzD4S3E8F%2BHjn595MAV8VXXP1n%2FkDw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122e989b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198416,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409, Copyright 2011 The Montserrat Project Authors (https://github.com/JulietaUla/Montserrat)Montserr","md5":"55e37a35525c63e130e76d588f2f5e8d","sha1":"d6efdc8c120df6af92ad5836c150bcbdac58b44e","sha256":"be2a4b98fed0915bf1cf1eac6b6fd25b41cc3cbabd5c284a951e7655220ec359","sha512":"056b4b63248780e1729f422c87173b4a3e5f0345278dcf01a34e0003cd176893412b391a8fb1ae466f6c09319351fc4656406e54e074208f56f83a774e810dee","ssdeep":"3072:GJODgCa4wEC5SP+CuNUi6T5Qcd1vOBLpnmcmKjtsHhC+of6MuFLBLY7S5dvP3Ycj:i0gCa4wEYNURiC1vONplSzvrT","tlshash":"9114e50abb07964dd9425e7597f3c3b07776be70baa8824bf4c216b4e4cb6e5484234c","first_seen":"2023-05-18T07:54:03Z","last_seen":"2026-07-24T18:40:13.765925Z","times_seen":784,"resource_available":false,"data":null}},"time_used":1714,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":843,"receive":870,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/theme.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/theme.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-21a9\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bMJroVV6QG4UTEp0ddXGJ2fqUi2dOrblneJdRz8L3talbtqnkXOcljobsITzu%2FY1xmb7Bjkx7AFPJnQ2D63F8AS5RW5y5ezlIAV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cdd2b56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8617,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"39726bdba83bc37e65d029b89096227d","sha1":"f8808299ab1878fbf3236f5a91b6512ae81bd5a4","sha256":"8c4345a17764e9e99fd35ac1dda07a5ffbd10b365ca448fd06a954bac922cac3","sha512":"fa85f7997672873727bf2829aa1348e0d2d3bd9b4d509332eb88b00c38f59532a4d29f10d2af1eb759e2d556b7f81d8de6094270ee8f09d51ac77bb85312a273","ssdeep":"96:sIFg5TjcAJ76zCLLMa8yEx8qnA5oukDnKl1uOGMIJ990KukXJ97SS:sIFg5Tjn/LEyDyIva9RZ9Z","tlshash":"c102ef4cba540b7c90cb969b217ee424fe1b8a13434b8531f1bd80757e971c66bb2e68","first_seen":"2025-03-17T04:41:03.100308Z","last_seen":"2026-05-17T11:33:37.866345Z","times_seen":15,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/components.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/components.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-cc4\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFA4BT70ngUQzWBwbynR0hQbwxB12T96pA%2BM%2B2FhsT2%2B4s5zgvyHAs5gR94VH56TQZ95LYa5TMWn6D4qrVr5jNad4fjvi75tgBpR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3356a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3268,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"8e7e93f03518538dc1af849df229fc1c","sha1":"6742cc702fdf085612c90c1f04bde8797b4a1108","sha256":"4ac1fd1d74e3229424b523df638fe3813229dbf6f1391457cc5747599eabad67","sha512":"bd650b1acee1fcec35558bbde1903ce484690c3880138f0c2bab86742942fd30ee39394cdf54de255bfef69535bbd5b63320c193e0fc39623161d924e0cff4dd","ssdeep":"","tlshash":"8c61062a4f3626988837766a8fd7465ce3876453430b80a1bf8cd95d0fb0d1267b0fd2","first_seen":"2023-03-12T08:14:41Z","last_seen":"2026-07-22T22:52:00.873185Z","times_seen":249,"resource_available":true,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":842,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/logo.png","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-3984\"\r\nexpires: Mon, 09 Feb 2026 20:53:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KL3xjJv5zFIryhuxyAeGFsU4JIqbWjf7P6XUCCgR804rD7qmoiEZv3dB4vhr3MJHT9D0X8dKz%2BeuKxJMCjhObNvZve2xeVFVF5U6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3656a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14724,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Logo Template Illustration Design. Vector EPS 10.,\u0001, xresolution=99, yresolution=107], progressive, precision 8, 612x584, components 3","md5":"c11843b3834d6c9952760369c3c84965","sha1":"7ed3fc437609e9a4c145035ccb2fec061acaa55b","sha256":"ce117f0d62c40e1e77102b0ca3fa971aefc79d5eedfe4f4e66714ccd647bb7ac","sha512":"17543753b16d226f344d2f8ff5fc0e4454aa383f9a49d2388e7915410c7c635833c86471d1483e0cf351498741d352f77ff0b9803a4f08573c6ff23c72012904","ssdeep":"384:zn2X/PHW7Yvyg+FA8ubOFMbkKJLrRhXNVDX:zUm7Yvyg+FAbjbdLzvX","tlshash":"e0626b5dbf46cd11e4ca033265e43381ba971ea2dacfe14fa2ea5f2129704e11fc4a47","first_seen":"2026-01-10T20:54:27.145838Z","last_seen":"2026-01-10T20:54:27.145838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1059,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/prev.png","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:56.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/prev.png HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/themes/cn_bcgame_com/skin/css/lightbox.min.css\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-550\"\r\nexpires: Mon, 09 Feb 2026 20:53:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOqvJnQgd875nEkeo5xdyuDKfEXla2MQ3LW3zqzsErsoKWA69EHUcHdCNbx9Kfk0d2vYv6zuHBBb8Rmf3Q%2Bine%2FVUvrpbxTqkxKp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf1114bdfa56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced","md5":"84b76dee6b27b795e89e3649078a11c2","sha1":"6640a3432f7ba7aea6129cdf7a5d3eabd47c295c","sha256":"7fd9273f20fdb1229c224341271a119020a5eee74ccf6b4605730917c864caf2","sha512":"f7128971cd4b6442ebac344cad93186e1fcc976470e2f5a4e758f3439c7b07421fb99a927450414b86b4bbfc0f2cc605b0e63c217057e094f9d866d9906960f5","ssdeep":"","tlshash":"b121f8b5a75040bddc73b70a4428be38ced1ba204dcdce0b42719c77a082c29d7f1082","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-07-28T09:42:55.655395Z","times_seen":21123,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/tongji.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:56.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/tongji.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14yXAKdb3EF29Tplc4zoe3zfaOGbn7F39gpqxkDQSN5tvqLmMjxQRr5brweSoWI6wSsWVAXNJYhb09KNmGG8i4VyRbyulfk4VxfC\"}]}\r\ncf-ray: 9bbf1114ee0456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"ebf53a5670818ece427c93e377064a30","sha1":"148e68dedfd17a8d5ff7b86149ab1dba1c93b28e","sha256":"c72f613a27e797b4990d7a78315bc197fe65a9bb7237c7222c3cb734d34a1bd9","sha512":"7b7235f99002cf3e50750d1f02f4d3add1876b66e8f7b6c7ef164b74d170f68c898511bac8e220fd1f27f99eb35de717c1954890f9d17a44890b6c1d70894c0d","ssdeep":"","tlshash":"14f0c07310439c1a57711372a5b3b55dc2e77e1262249860f0c0307f3ec5fc0e887616","first_seen":"2026-01-10T20:54:27.116431Z","last_seen":"2026-01-10T20:54:27.116431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/load.gif","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:57.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/load.gif HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/themes/cn_bcgame_com/skin/css/jquery.bxslider.css\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:57 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-f39\"\r\nexpires: Mon, 09 Feb 2026 20:53:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Epp%2FU%2F9PFJ6nHJL5HD8KjrQBE1sk0mXhQYsGj0sS78IPbT%2BpigaGItqe7xzbxmT2yhBST1HyrQ0UzIgEIoaGDYqUsBsLCFRB9wME\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf1117de2b56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3897,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 128 x 128","md5":"0e6e0f46d7504242302bc8055ad9c8c2","sha1":"e33b51188f79799ae5ca5df0665483a7c8402bab","sha256":"3c5cacbdad8f88e2639de87f92ffc832e6e60a2d77631f55350fd5f109237ced","sha512":"b0c31c31bbedc9d257c6b0bc401857437509bc36c30f569fe5cd062fe6436b907bb0fac8868cd82697a5a00632bfec3f1e0838f269f3ed08f0f23229d7181f0a","ssdeep":"","tlshash":"9f815dde621bf5cefa6628b612f09f7e20f5703d401b3c2d099cfa96757419e2340169","first_seen":"2023-05-07T16:24:38Z","last_seen":"2026-07-27T23:13:55.726112Z","times_seen":629,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery-1.11.3.min.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/jquery-1.11.3.min.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-176d5\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFwdJoXYY%2FVGit4rYXwTKekLUWXzMvg5uGoHMZa9s6J5R5stnfQofqwzniv%2BudlJSpbsWKxaro0KUMUXnr6cMwaEk6HvPrGixLIo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cdd2656a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95957,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"895323ed2f7258af4fae2c738c8aea49","sha1":"276c87ff3e1e3155679c318938e74e5c1b76d809","sha256":"ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8","sha512":"c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf","tlshash":"3b93d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-07-28T06:39:18.159014Z","times_seen":18395,"resource_available":true,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1115,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/extend.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/extend.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-514f\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svTfVpFYiBgcbFm2T3fAweeHMWd%2BCTDgdOLAxm9MdIqvpZTac%2BB46RT73l02Ta0CupwcP%2F067zvAdr%2BogFfVqrw6UyaAdDF05m9K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3056a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2d570bcf760b6a01c46bfa9302d3549f","sha1":"1614016872b93bc23d8f1de2c74147f111b2fdd0","sha256":"3b60e2098990475db453a7f57ba2b03b1be2ae9c53aa94adc667f14a44f36781","sha512":"d18c93c4aba0efcae81b5fed09a812a85a5dd1fe45ed467509e1b2803702dbc3b6ad77e2a4450098ba78f3b75b521138daf25696c5b496f7bce77be22a688861","ssdeep":"192:poycVkdomzF/qtEuDBH9SWNrVXdA5koSUjst6Y8CNQJM3wuJo0WGFQWU5gAct2jb:i6zF2GwoxJqT39NRu+q7","tlshash":"a792fc1867b712509a6730760f5fa40c767a84275a0bce087c6ca3d4afd897462faff4","first_seen":"2023-05-22T15:42:39Z","last_seen":"2026-07-22T22:52:00.905433Z","times_seen":454,"resource_available":true,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/1.jpg","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/1.jpg HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-222a\"\r\nexpires: Mon, 09 Feb 2026 20:53:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZM%2Bw1LZu6vWi2QHfNJtbl%2F%2FHDuL6qSQ7K440E2vXbU%2FZqdoL7f5PjWVdsweBAvQTHPp3giIa0umQciL%2BE1NTPJETV%2BTN%2FXzwHkC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3b56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8746,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 272x121, components 3","md5":"7c0c75061cb19e1ce0a83f89f6e1fa72","sha1":"b2d072251e60323e5d6c92db9531df5e22a66501","sha256":"5f2940ebe182cba2e6d839c36defad65f5ac5498000cdd7cd101076c89876a6f","sha512":"e2266fc3a84c1f8ced3832ca3ba61e849aad29e62a66fc1cfecce5542a3dc09abf07f53ba8810d44a0312f8628a999f267b9196567d7e2623fe6f32784c49db9","ssdeep":"192:QcW18OE+VLrXPZ6W+57N6jLLlewOJSr9TmAjNx3SnPCA+u+DhTy111:QcpORjZ6lohewOiiP3QNy111","tlshash":"0a029e0ee5a342c1fca98d2b28e3dd1a0efe3470a4c8f54565c4d8e5d6072e0eb116ce","first_seen":"2025-06-29T17:01:32.239569Z","last_seen":"2026-05-17T11:33:37.917158Z","times_seen":11,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.form.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/jquery.form.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-4bbb\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KFeJHqrvUIq8hjkNcWxzOix1hroVWVbLlt%2FB02T7Xve8d6Gdzh4BaJdfjt6zVnceDHrR%2BHP%2B7gleuotOG%2BD9sMvr5a57jDAwCAwz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cfd4256a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"2a9f6296bc4b381234cbf9e3ddff3c3c","sha1":"f177123aa0f8b38efd76bb0918ae6ff9d0a15b64","sha256":"8cda8d163d76fd30acaa34af1129f9c27dcefd2fd16b240fdaa1a64d9db3be5a","sha512":"1c781f60fd6c8eba098061c542ac1994f4c15b6368a35e541c41bca5e62b74b70cce8d15944da45383d41a417500a888300c62b6ff9318804426e7c281fdd9d9","ssdeep":"384:bUjRuXSNk7/OY98H8e+v8ebkq5zgMBK9OWt7M7nEL3i53eEjvTe1G8v:diHy4OUY7nW","tlshash":"2b92628eb891449b9077b3349fbe9001f7b2a43b428681117d4e61e06ff8874a3e4f9d","first_seen":"2023-07-05T07:23:08Z","last_seen":"2026-07-22T22:52:00.870897Z","times_seen":384,"resource_available":true,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":842,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/loading.gif","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:56.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/loading.gif HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/themes/cn_bcgame_com/skin/css/lightbox.min.css\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:57 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-6fb\"\r\nexpires: Mon, 09 Feb 2026 20:53:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6GsY3qjzoQn8W0tI6gR%2F%2B0wiBPvqmUMAriZM4cSNTd%2B49yuAd6n7ericTBW2pV1AFoNw6%2FpKhyCJt390nKht7yFYdk0lSo7bx%2F3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf1114bdfe56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1787,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"50c5e3e79b276c92df6cc52caeb464f0","sha1":"c641615e851254111e268da42d72ae684b3ce967","sha256":"16ea0cf66d51efdbbc2a62b11ab0419fa72fb3320844f1d0d710480245ac9925","sha512":"06afb0ee97d49b23b8de5ccf940a95d8497fc0b19a169aacbe7924dd0a088df65c3d1f4ae7d73a31a1fc7b5a1569fedead1f1757c10c281a1dd61564b9cc39fa","ssdeep":"","tlshash":"86310b7ebd2352bff98950b6c47c554c6bb638e4c0818286032d74a5bd3576d104d43c","first_seen":"2023-04-15T15:36:17Z","last_seen":"2026-07-27T08:25:35.912599Z","times_seen":2391,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:57.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 10 Jan 2026 20:53:57 GMT\r\nage: 2807490\r\nx-served-by: cache-lga21931-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 847211\r\nx-timer: S1768078437.386777,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-28T12:49:20.813672Z","times_seen":494954,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":63,"dns":3,"connect":26,"send":0,"wait":27,"receive":8,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/fonts/montserrat-regular.949efd65.ttf","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /fonts/montserrat-regular.949efd65.ttf HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 198552\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-30798\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXKQRe3GqwNojNUsKxWuFVdp3kL5z%2Bxu3uJhzW%2BRCTBZ2zWyjT0m4HVh0oKRQiJlHO1fZ%2BQPQ0661JBAlR15PPoPQt6xlPfvPLFhBjDQBCFf52A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122c984b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198552,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 18 names, Microsoft, language 0x409, Copyright 2011 The Montserrat Project Authors (https://github.com/JulietaUla/Montserrat)Montserr","md5":"34de1239b12123b85ff1a68b58835a1f","sha1":"6b81c92b065c20c37190d983a79fa38cf6e60552","sha256":"949efd65ba9a02a120d693ba6606767d990ee821c30fb59a1cb9a95d2c7882ff","sha512":"d95e12662128fb147843d86fad03a2b8a27e5460df7c024e48714a96625ae2cd781a2bbbaf94d07bab927f1fcb37506ba0a8a1b4e9edb301007131b8ea740966","ssdeep":"3072:MlRlN++fLDZ9Rp7RLrmcmKjtsHhC+of6MuFLBLY7S5dvGJkmBX01Zwmk:KR6+fLDZbp7xxSzvGJkmWLk","tlshash":"2a14070abb1ba35dd9425d34daf3c7f4b365bf70bd5e824bf08213b9e48e2a54941248","first_seen":"2023-04-14T12:45:49Z","last_seen":"2026-07-27T07:11:08.011859Z","times_seen":1594,"resource_available":false,"data":null}},"time_used":1949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":843,"receive":1106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/fonts/iconfont.599951c1.woff2","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /fonts/iconfont.599951c1.woff2 HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31460\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-7ae4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fg8b%2Bod7XNap%2FSDxyxZREw8NUk5%2BEmlpYzMpHKBUXYnZC%2Foauu0pPXX63pKatVpbkGGBkqshxcz%2BXx6euGeO6Ko9NDySZNo78BftpnHZbJO1o64%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122e987b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31460, version 1.0","md5":"b0530b23615e0bdd80af2c1d798dfa67","sha1":"5b81dde90f5c33b9281dde774eb34fec622a3630","sha256":"407a95e9d3f3d987e7f5d7a73e7cb743c3f4525260ae3b00acff310aa719e0dd","sha512":"581639e8a210142ca9e71eeaa0ba00d4e6bdd968b80062d651d6bb04fc2c9b336b4dd39422a74f493675adcb485f70fade26a788260151379a5bc93c0bc65cd8","ssdeep":"768:cIcVR2hPAcTmEgVT9BZlkrnOQZS19fRKf:Y0hPYxxBZ66QZS1JRKf","tlshash":"87e2f147c0397083eeb52629450793e9ddbf2a91be0c5b20061b613f95ee495c3a772b","first_seen":"2023-05-18T07:54:03Z","last_seen":"2026-07-26T11:38:26.146063Z","times_seen":1048,"resource_available":false,"data":null}},"time_used":1121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":843,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T20:53:53.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 20:53:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BvMUq%2Fav2YPD5IRY0L%2Bgsag57sGl%2BJv2iQ9kNGZkl2n78vwTrGxgPK%2BA9AW6Bw7g%2FX8LTX0SyQF63tgXj9EcmTrPkOeqb4YGLFNM\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9bbf11047a2d712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]}],"data":{"size":37317,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d0d4a296c935956e5c6855fa3a4c3feb","sha1":"0df46a2f35bce8b458036c8f664aec9506de6460","sha256":"946123f4d81b067ca93a3e99a978db8d2bd03142a1ec6dfad4836d8a6c8c1c2b","sha512":"27f56377129711adf3dbd4f0a8cd8b7f5d90197972d8ebe08ab21b95d71d213d6eaa69e9a28b517dc8ed18091ac0eb32e740a72ca2ba93267aaac7e1bbcab238","ssdeep":"384:IdwoZ3rY41AUP4XwLP4OwGP4/29P41aEeczPOfPs2:Iyy3tgomhDt2","tlshash":"9af2a72264f15427019380916a356b5fbfd6fa1bde1b4a40b6fc4bea6fc6dd6cc13208","first_seen":"2026-01-10T20:54:27.1593Z","last_seen":"2026-01-10T20:54:27.1593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1169,"timings":{"blocked":47,"dns":37,"connect":1,"send":0,"wait":1066,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.menu_style.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/jquery.menu_style.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-57da\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFyqhHQGR1FWmy1HXDlRWU7%2BL95rglzD25tQw0km0TsAI2ukQXLNNaBPjNVKiXgluiRx8Q9iyBuZeK727IFVk0QyyHuevKpZ2HVG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3456a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22490,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (647)","md5":"ce2ca79e427922376182680cac97e866","sha1":"b113e2d81b37ced71dcc452c2b7bd807b56c9b5e","sha256":"aa7738c75d162fe2182223dbf98ac25c75f38dee123a81f8c18171616f57429e","sha512":"146f16c71e67b44515f98e8bd5be22a8bc27956109cb4f02111db098c6906f5f3bed74b821d0cc7ffc43c27a2d3688bfb09736bd5774852f4af883083b5e0f85","ssdeep":"192:2g3SC2hgHTSCib0XTERe/8OLMSkOL/OqrXqRBcN47PFvZEJEC1EKaUOKvya79EkL:ZX1r6pJnAFZwIYVCcNqFLd","tlshash":"9ca29c6958f32936146b75be1bae702c7aa29513830dcb507d8de640bfc487807f6be4","first_seen":"2023-05-22T15:42:39Z","last_seen":"2026-07-22T22:52:00.873709Z","times_seen":452,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.custom.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/jquery.custom.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"693d1d00-0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zn8fX%2Bz6zW9mlBJKQslkAmYCrmrzjvGpGq7HLJaINWL03t73LJXFViEkxSNUPv3MdygcP32oUz2PPKfwhISNTnT6EiaT9ardouLX\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9bbf110cfd4456a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T12:56:22.601433Z","times_seen":17579919,"resource_available":true,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":842,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?84ffcc6211b0bdc1bd6b046eddb130d3","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"183.240.98.228","port":443,"asn":56040,"as":"China Mobile communications corporation","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:56.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?84ffcc6211b0bdc1bd6b046eddb130d3 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11285\r\nContent-Type: application/javascript\r\nDate: Sat, 10 Jan 2026 20:53:56 GMT\r\nEtag: 0f79532c83f2c53cdbc025ad56a3813f\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=270C0E159B95DD4C; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29891,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (615)","md5":"85f00c9a6ce5a4af66a0a6382af1a0e4","sha1":"f7b5eaa08d49318bd991c0f8a5b94e47972b3924","sha256":"f4b609d44a0dbf23602e10478ea19187256afb78a1ee9a57d35ccc9f9390393f","sha512":"d4f87cc1fd60083937ae516e4fad5f8cb68ae152bec54c0bdb0e3f23c623cd6b3ed865b22f631e95e7de6fea475e419742f60f557efa71f4bda7cbf32a6aba5c","ssdeep":"384:X5JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:X54VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"e1d2d9e9b282713293a324a5153f724af07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-01-10T20:54:27.161217Z","last_seen":"2026-01-10T20:54:27.161217Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1431,"timings":{"blocked":580,"dns":1,"connect":195,"send":0,"wait":254,"receive":1,"ssl":396},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/b1.jpg","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/b1.jpg HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 13 Dec 2025 08:00:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d01-57df\"\r\nexpires: Mon, 09 Feb 2026 20:53:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjeLZIU5iJTIUpyvZFbCYMdDpB0cLAd97kH4FJjL8DSBEfcWsTC3MaNodGLvF7hIgQMGUpicbMQtjMR5pjzV%2F%2FYrgZUXhDztkrGT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3756a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22495,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 680x383, components 3","md5":"86c29dd1f572c00d9fc80983cfa6018b","sha1":"67c98e79a675e936a3660d5a19c2ffe59e173c16","sha256":"845f2e18e55cd8c9b51371542be70b2709d45f42a3ffdf639aee1254e3d4b68a","sha512":"dd85e5be380b453ac2b3fd4cc4151ef21115ea4a7484df0d9d5a1877bf5b3105201b7085c0c123882b43135c76cb45b1478abfecfe916b7213ecff9764f54ace","ssdeep":"384:ML/azajSQzqD4mqTSEK+4OAtYnC+dkDRIqAsbvVM5aStycLaEXJmBZjL7H:MmZQzqD8TK7YC+dkDRjUtyzEXIPn","tlshash":"2ca2d0e03d2ad050b1178e70ae46ba0dfea617758562cd86399ae93c033edd5bc77421","first_seen":"2026-01-10T20:54:27.162198Z","last_seen":"2026-01-10T20:54:27.162198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1086,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/css/variouscomponents.css","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/css/variouscomponents.css HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-100a4\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMsLtl82DlDU21NPAG5qunVjBQVXXuj5n2EPqayf5fsC8CeYBgI8SzPMVnj3V1ePnxnxbumcghMgftG5NH1hJ2X0%2BYLEXkhFafqj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ccd2256a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65700,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (472), with CRLF line terminators","md5":"81cd39cc6adb1f8c5313bb32fa01c28c","sha1":"9e15ca28f9b86f7f4caf371db7b9fd9c8c1e8895","sha256":"3e8879ef36a6e94b371f14876841c1289eb9461c4bf5ff5ddd5cf040f5c32741","sha512":"1e7f3d4edf54a2d21364d987b230adc9311444008943270e4b2c652ea1870d0e80da88d254ad05801d2542edb679b31a034b147fbe9ebc11daa38f825a7e0636","ssdeep":"768:XdjKlK+sjRrrC1RI+HYUj0JGv+gH2Flls64YdLU4rzCYl2r8sM54kTGQ3SAU9jkM:XNKlK+sdrrC1RI+HgGvtH0YfAC0aRF","tlshash":"3d534410be221168a037c717aad75ee57c3f8413b1ef1beda700eab7c4ca46a11b9355","first_seen":"2025-04-09T11:19:02.119029Z","last_seen":"2026-07-19T12:29:51.488422Z","times_seen":59,"resource_available":false,"data":null}},"time_used":846,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":845,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/2.jpg","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/2.jpg HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-2685\"\r\nexpires: Mon, 09 Feb 2026 20:53:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yIWMTcqxbPkThIOq9W2J3zgr2lReal4UC2KLx%2B%2Ft8h2BS6J%2Fv0c9CITdwsW0Bpm%2FOvv%2FM9ZcbxHeCts6itC8zADGxzUvlj5dfv%2Fb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3c56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9861,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 272x121, components 3","md5":"e8c61f7f1cf520413fe1c24abb09c088","sha1":"5db06613e0483bc35b17b6e633259c877914c3bc","sha256":"2e2d08d7beb06831813c27f181bc278b021dde7388b57cec524464b033797a91","sha512":"2927a1e7927d4236d3216ea335edaeb7d7acd5f8ab2e2dfbab13e2744f07836b538d10673c31cd20f127ae1cc69b09d76d497e681af3423886dd5b9be4123e72","ssdeep":"192:QcYTtAa8x2ZfnpT8oUOIf+qSSHVYGqZWcO695CUVTlxrtFPWhz:Qcd1sZfp8ODqlHcOU5CUVTlZP+z","tlshash":"ec12af4db115e2c3f09eb4e7d5824d0a23e5dfc5b3889169acc97ee6fa351e0290954c","first_seen":"2025-06-29T17:01:32.253792Z","last_seen":"2026-05-17T11:33:37.877232Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1062,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/2.avif","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:57.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/2.avif HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:58 GMT\r\ncontent-type: image/avif\r\ncontent-length: 13174\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-3376\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2Fo2JaSodFMkUpPQXybcQEzp4XGf%2BI3VIxJxVEl%2FKERwvAn35WvMEHzi%2BmsTPJUanOo6tf47MsLqaL4ckFHRFu%2F8J28%2F4ER5tnlx9cyk%2FNXYozg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf111928c8b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13174,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ba37b1afa1e6390608cfd7ae2ba21c3b","sha1":"42d0c7a160fcebb48a915b6cddb3f95e6c3626d6","sha256":"7ac3fad9cc96f7d82fb485776cd553b8cd92276bb6a3a67c1e33f90c637e18be","sha512":"37ef3e56edc3972243f0620ccace97e24ff177a8ac36e069691fbb3b4314d2f422d565b5f5b28f5e662f96a51180e495a467ebfbfcb4d56ce78c783bc8f360fe","ssdeep":"384:rPeNR0If76pSC8GcuemtZXNw57ywylVflK:LGDf7698GcvmtZVwcfg","tlshash":"2d42d181b30fabdad47d043d04b81c27a7eec860834b9d66996926751a0b3e7c4c967f","first_seen":"2025-11-23T22:47:51.099428Z","last_seen":"2026-01-10T20:54:27.165386Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1079,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/ag-66.png","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/ag-66.png HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 202845\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-3185d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2F%2BTGMOf18TyexTzi%2B6Ny9SWOJ8DRCnoxDmx74E2%2B2sPwfFsii86jIN0S43kWWBn834lAARzSibb2Z9qrleLGsShblO8ii5F1pqIB%2B8gudd%2BPYg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122997cb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 590 x 564, 8-bit/color RGBA, non-interlaced","md5":"ebd06c4807e383b514308a2dc4310190","sha1":"4cd8de7a7f55e7d4e13ac49d7123e1b384f8a1fa","sha256":"6be932e29d1abf8f75bc7609eddc29180773634196cd3c6a3d37950e473377ea","sha512":"7f6832549e57985a1019db5ce81b03b064bb09c2d49c4c92a194fcc98255cc430cf90c6331521424c42b9925f5602499b7ac990b664ce32f4aac1bfc0868fde4","ssdeep":"6144:zhQs0qYxgTxd38aY3zLyv7Kk4DT+hJfvUOipHJr7ECN8:lQsFYxgcasvk7eT+rvEpFvN8","tlshash":"e01412dfbc0f66650f6a1aff25a6a5ed251bb93ec325d9704f4351210923e0c691af03","first_seen":"2025-11-23T22:47:51.076332Z","last_seen":"2026-06-02T01:15:02.801027Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1895,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":819,"receive":1076,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/MKlogo.png","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/MKlogo.png HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 11200\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-2bc0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FTdIdHqySSlLZOSgieWp7PbxhQZfrd6HYk%2BHXoOri1DhRp40a%2B7oIwUCFLqEu6PIOKNioACmHjCpiyj8riV7W0sOUnqAayhHqfkcBOUJtS%2BNGlE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122a980b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11200,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 340 x 106, 8-bit/color RGBA, non-interlaced","md5":"574ba984da87bae1efd28a28e581fa22","sha1":"144fd828f7aa823ec570b316bcd5febfb3deb940","sha256":"603eddb26e4c6ebe6066029aab7c4a645bc913ceea8d4c0f07ba036a42df9bd0","sha512":"64ca3fc51f57e66927aa882ede047070a0bbbac801c86ed401bda675bf64781c1e621b9c55af8f59dc623e84ce8dd714b4b3e6e95f3dbd22daba83fab97d10fc","ssdeep":"192:A1SGrhXWo8kppKqFQBR74H0Khb4+V9d0e5CWQtaBhTqJyMRp/Z49PCiJsfm4eONe:AUOBIR7Y0Knme51BoUyUvZv","tlshash":"1a32c00f231e9f322dac904d5af373f0868976f0f75e5868401f81c667a67472d618b8","first_seen":"2025-10-21T01:29:25.35492Z","last_seen":"2026-06-02T01:15:02.762126Z","times_seen":24,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/b2.jpg","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/b2.jpg HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 13 Dec 2025 08:00:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d01-6b1e\"\r\nexpires: Mon, 09 Feb 2026 20:53:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtLzF7d34Z8am2ivpuKXJz4Who1eYuqzejTTG6uP1KHxI59cSY3T%2B%2FST%2FPQUoN6hyxrOEnF3E2tlvQ15j%2BC2hFxNtESj%2BDBWqs0I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced3856a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27422,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 220x275, components 3","md5":"552cb95c586302f2291a6200250cdd33","sha1":"e0d93e6a7ac992cd29e99857f2128ac30b6ccda6","sha256":"0c0767168b9e4e298fb119eb38185e98e0fdf3afe30f0f3a66d9c5e1ca93642f","sha512":"2aa4108459e2552969a6a93ebf7669a4fe063ab20c67d43aef1df897960c7f0969f9cbe982e2cc86e5eeabc17d50f4b44be5161e926f6afc77636e5c4d926866","ssdeep":"384:gJzaFz82vzGegbmLu3KYNb9zrV39fa55HzIy9nkqW2/uTD7p2xOdAXkUOPF9Q7Em:qWa2qegbGRuXU5HUy9kRGuf78xOdUmuL","tlshash":"e8c2e15e879b9858fcaca1f8949720675bf88e3d8ccb6aecb7d404d0f03144d177416a","first_seen":"2026-01-10T20:54:27.17255Z","last_seen":"2026-01-10T20:54:27.17255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1056,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/4.jpg","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/4.jpg HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-1f20\"\r\nexpires: Mon, 09 Feb 2026 20:53:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OsFdkJKtur675WEZ%2B%2FvGuxoRE9ghMLMfqa%2F6%2F%2BdRH23NhIYHDx%2Bfn%2F2HIrduDbIKR7oE12iEAGiVNA6N7jvmlBznChBHzk0ocg7h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cfd3e56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7968,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 272x121, components 3","md5":"9ad8e4b724d2f04cebd9c66bbdeaba22","sha1":"4b72e90512b36c3363cfecd662636bba52460772","sha256":"f4b9db87ab57fe4231461891ba1ce33a1fe833a2d6c293098a7f6ff410d37c84","sha512":"f641e1618055113c46bd43380223813aa1bcf7f3356592c142bb1161a697c97a339c970664c27bb85234f13f2225f014b5a29b875c02f099180c91abb14bf7c2","ssdeep":"192:Qc2/HUrEfJEjK0s7iG070Di6fixcLPFqiMFBEiuO/aa:Qc2criSK0s7Z2fcLPiBJt","tlshash":"16f1a00de3411dc7f2a66426d2e3dc2f96f198c4b4d0be8165dec602ca7797488a47dd","first_seen":"2025-03-17T04:41:03.067195Z","last_seen":"2026-05-17T11:33:37.871274Z","times_seen":10,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/ayxlogo.png","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/ayxlogo.png HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 32061\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-7d3d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UIY7E%2FBQP11U%2Fl%2FeOzRNTiVDVf8zxgKZZhl93ZErAMJ6YPZIS9N9Y279BKHcLcsNNgsWNJKNx1JMQyfJA1zP1wKQNMr361jqIbkI4Jte%2FPu56rU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122a981b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32061,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 340 x 106, 8-bit/color RGBA, non-interlaced","md5":"dede407484806506cba5e98aadc05d28","sha1":"205ecf85a7627ae6ff8ebe03da2e8ae19e3d4634","sha256":"8253f7d1a77aa67c2957766d6ff65dbc789c5908288c962af2f9ba4724f25352","sha512":"2a0308a1ab4cfd17450f0a3ec9ebd28b5628fc9d3f684dc36319cd8f7149f57c69c86a9e9734979b0f23633754c959971358ccbf3619f24273c703f42f711221","ssdeep":"768:A9Wf/mRgFWOXbgxFF5ZYMRVDa7/C7Fo/44aWRY:WWXmAbgxFF5ZYMy7/EFo/W","tlshash":"b7e2f1a8dcca2abe46343c96ba00c5b333db49ded196ea93c1f4aa7034d62315461da1","first_seen":"2023-11-12T07:36:07Z","last_seen":"2026-07-22T13:46:07.174383Z","times_seen":218,"resource_available":false,"data":null}},"time_used":1086,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/fonts/latin.fab57614.woff2","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /fonts/latin.fab57614.woff2 HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30928\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-78d0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SdLldLQxfBfIBQByoXYN%2FuzTFdcPrvtAp8ppWjBWdbvJYnnXNptoDiR0DxlX55lSfMrWPFjSToL8PEroxhLaCSxtmMTCTboK%2F%2Fy3zBSAs4iLfaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122d986b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30928, version 1.0","md5":"57cf39e316b7e79e7cd2c70bdd01c8a0","sha1":"3cb638f40c93c286c90f8b3bbc179ecd9fd182a5","sha256":"fab57614b562fa655d1663afa2720078a3b016e0fd780cf7305c06338642516f","sha512":"bbaf1293cd10f0706845072c39f78e760ebc7159d5da74870b569dfcccb4aed71cf202eb1331424ddcc13863ff94e0aa112290b3dd153306f2a4e964ce44f5fb","ssdeep":"768:X/WjfF4jGDEvdJC0f0JjzpyArP570Y73D9dU4Zg8+V3Xe:X/WjfFqYqD0J/rxQoT9dD6XdXe","tlshash":"31d2e1fdc995e285b426764ab6cba807ff83d350083b7390dd6c59310886ad490235ff","first_seen":"2023-05-01T15:57:54Z","last_seen":"2026-07-26T11:38:26.145133Z","times_seen":2104,"resource_available":false,"data":null}},"time_used":1115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":837,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.superslide.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/jquery.superslide.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-6c61\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xhLqtbTz0BapNp9iJrcdpgxfo66JSO3qTrtFa5wUHrS3pGzOGSnQp2fsS8G6JT3ruxHrUfUulSo5CBldEpuvafrx6eAQKs6rnvNH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cdd2956a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27745,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (308), with CRLF line terminators","md5":"c9fe6e8cce8964664d70398be23a3389","sha1":"d7196a4c13495717b4e21a2db4884392652e9365","sha256":"03007cec48036012f9bd344d6c1dc4a7e9db9741f6570d0200b3173902707c89","sha512":"dc6f96ef80a7b621e5e91cfa0cb9284e6884a0f8de5bdad403e94753f3341ce044bec8166771a91e63b533a476187003917a15426c33e883c4bc195b0edbee74","ssdeep":"384:1rFDfNkiWqBoOTKa9+Z+TDSR2Xsj97IPUM:1rFD8OTKo+Z+TDSR2Xsj97I8M","tlshash":"42c24096f20ce6aae4ce63b154bf8d4de83ec0364a4d5496f94cc84877e4114932bbf9","first_seen":"2023-05-22T15:42:39Z","last_seen":"2026-07-22T22:52:00.920526Z","times_seen":394,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/leyulogo.png","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:58.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/leyulogo.png HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 31223\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-79f7\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dNwC4M21rgSoj891rSNxIwJKtw9rdrcXXC%2BZK7ZB%2BRG6pz0hNHX6%2BJ75%2FEVNT9qPj1xtLCI6Zom5P%2BlmRFcUBTUmmpEKUF4qOHYjwJfxFnqqBwY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf1122a97fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31223,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 771 x 246, 8-bit/color RGBA, non-interlaced","md5":"dcab547ac34ec7992df739e9b783cb69","sha1":"eefed698435a449517fc4831e1f353939da0f87c","sha256":"71437c7f8df92dacd674ee82c1cc7c91735cc9d4141c6a48e924f77475cee9d0","sha512":"3a18a135252c0b24bee68ae7b1d7cccca04d95f4fdd0445c8ff7ba8b83f82d6f8c541c920492fc8a54e22b9559a9d96a9a43b4e4d0f3d76c5ba468a30a7d0301","ssdeep":"768:BYO6atDpi0tNj2cyU+LF94/OsonRSmaihO5:+O6+oyYFGJonBQ5","tlshash":"3ee2d0c6c87ac556c38982d063b4956227601cd46861d53b28fec5335fb31bdcf4edaa","first_seen":"2023-10-28T06:10:58Z","last_seen":"2026-07-22T13:46:07.143531Z","times_seen":244,"resource_available":false,"data":null}},"time_used":1116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/maigewan.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/maigewan.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 10:54:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d45ee-4e4\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r91DdBCc6uwhTJWKx7QDADma1flEu94Vw%2BiZ4F63crfhOSWtcWHVkwWgp8IH%2F1izc2xZHyGmD3eFGQVonatIK6zcb6ulHJtzq9JL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ccd1e56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9c84de4478a3bf39eada4122c1af2268","sha1":"51d51360e28d971ec0e26fed0dbd74de277bc1c4","sha256":"47d3758dcb30e3dbde3b9bb99cef9e116d056d3ce240e712ef92c73a9581bbe7","sha512":"8ddb9d088a9029a61083898b0564589051b7da112f921a3e13a069f8cb59cb2a08dea11b5932f55f8a6d96f5de65e482084563c61cc3f8d853ba004ffb216eb0","ssdeep":"","tlshash":"5c2165357efb603c02350035ad1ed509b0f8e038fb6bce06a06d74105d98f8818aded4","first_seen":"2025-12-20T04:55:22.714281Z","last_seen":"2026-05-16T15:20:25.670048Z","times_seen":17,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/css/images.css","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/css/images.css HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-8ae1\"\r\nexpires: Sun, 11 Jan 2026 08:53:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fc24uHlsRrdLK1Z33ZCixMjP7cx%2BHjG7JXsXtM5RCmQpcT1R3J88%2FOPKpU%2BeYs8tq6%2BQv5%2FfNDe3qXjdo6dA2T8ARdV2v8A9oC1V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ccd2356a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35553,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (590), with CRLF line terminators","md5":"bcec010d275213a1f75691b7ae4577ab","sha1":"5551c0f9eb6efbbe41171a98fc20ed67c22936b8","sha256":"30b33d659ccf88835e7518695d96b055b34078e717d311b8c150c1e30e953c4e","sha512":"46096e0ceb0bbe5d774f035c0524c8e00b7d8998970cad8b6a5f71a069e5b06205a58c792d4909719d35643e446dbcf6a61de10191bb77bb06bbd277c923fa88","ssdeep":"384:K8vns2d5MWf8+xJEkHG6u5g55vXqiZOd8+kQ:KZgV6g55vXqiZOd8+kQ","tlshash":"15f27ca98e501294c2739b08f3c68b68193de373f5231cef3341199f965b6ac42ea757","first_seen":"2025-04-09T11:19:02.068672Z","last_seen":"2026-07-20T11:57:27.079754Z","times_seen":190,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/js/jquery.nodecommon.js","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/js/jquery.nodecommon.js HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-84d\"\r\nexpires: Sun, 11 Jan 2026 08:53:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R8cCKYNyz5acb6Ev%2Fm0TfwXvW4iRMmTr7Qh53PYrXJkcvCOXL8V1TNwVCiewy9WNV4AkESTkIcbgc2jNGS9V%2F70UAkTLpwriika3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110ced2f56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"498c9a5a02f1e20e1a2a7f6100a84982","sha1":"f49a7ce465ca068ef35bf03b6aa68652df4db663","sha256":"e06e6f77a6e708e5ccfcfe6da6a6d3928989bd2f2a5d6a0d363a6dd58d790c2f","sha512":"9d279e5fe2f61b812ce51694ab05310a6319c2bc508063c63acf8d4f41c9cda14404e70a8f02ace9e9f8d0efcfcf33d2a15ffdc8f2d7a76b29a1a6a84a75dae1","ssdeep":"","tlshash":"5b411e686bb22556a417362f079f528c32eb412b438bcc33375c69547fa2d2413f2799","first_seen":"2023-03-08T12:52:21Z","last_seen":"2026-07-22T22:52:00.86392Z","times_seen":597,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cn-bcgame.com/themes/cn_bcgame_com/skin/img/3.jpg","fqdn":"cn-bcgame.com","domain":"cn-bcgame.com","tld":"com"},"ip":{"addr":"172.67.133.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cn-bcgame.com/","date":"2026-01-10T20:53:55.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cn-bcgame.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 10:49:04 GMT","end":"Thu, 02 Apr 2026 11:46:22 GMT"},"fingerprint":{"sha1":"D5:FD:FD:F6:6F:57:88:D4:00:52:75:76:25:B9:8E:64:43:07:0D:32","sha256":"F8:29:B4:78:1E:73:E2:DD:03:1A:1C:AB:5E:95:AC:73:70:35:DA:3E:37:28:CA:DE:60:38:31:BF:E1:96:50:6F"}}},"request":{"raw":"GET /themes/cn_bcgame_com/skin/img/3.jpg HTTP/1.1\r\nHost: cn-bcgame.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cn-bcgame.com/\r\nCookie: PHPSESSID=cmu4dntqhkb6cn3sa6pfncqvd7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 13 Dec 2025 08:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693d1d00-4ce9\"\r\nexpires: Mon, 09 Feb 2026 20:53:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M2sm0MguJCjtWqDv7dZYKy8Ghj9pNvlnXLjL%2F7QuEAxm8I5LR5T8lpRQs%2BtZsDkuGDxHIKKrP%2B%2FAfRISZJO7Kv0rLta8nzSgWO0Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bbf110cfd3d56a8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19689,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 272x121, components 3","md5":"c89ba8891a75358d51f99827a4d4f99e","sha1":"5a34eec09ca13092031bbb78cc5e672a8bc4f8f7","sha256":"8807b295908077693fc25871df869bf7b68c90f8095dfa2263ec179e93911d64","sha512":"6c4ffc43f013aa5646b91b213362d8417fcef2da0c3607c4bcf2816a16ca375676a5aec54f3d6be07c7b7d2aeae7d763e4cb3daff09964a61e7f21787235f0bc","ssdeep":"384:QcqWznXlAU2H7l7UTWkzJWEyl87zJ828RAXQyAX19/:QcqWzn6BaPMEJ7zJN8R/yAX19/","tlshash":"1692e051b43539cfbd88c5f49ae0cd464fea6c438566903af6e8b50592781f3ee9c2c8","first_seen":"2025-06-29T17:01:32.24618Z","last_seen":"2026-05-17T11:33:37.961829Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1089,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cn-bcgame.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ovcgs4.ncuwibjnvw.vip/images/4.avif","fqdn":"ovcgs4.ncuwibjnvw.vip","domain":"ncuwibjnvw.vip","tld":"vip"},"ip":{"addr":"104.21.68.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ovcgs4.ncuwibjnvw.vip/","date":"2026-01-10T20:53:57.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncuwibjnvw.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 05:22:47 GMT","end":"Sat, 14 Mar 2026 06:22:37 GMT"},"fingerprint":{"sha1":"6C:44:02:3D:0D:50:D5:2F:D8:8B:93:68:D2:BC:C1:DC:64:5E:C2:B8","sha256":"0F:35:BE:CF:E3:19:8A:55:2D:84:08:4F:E3:6E:42:3F:25:4D:9B:94:55:10:1A:5F:0B:B2:D4:67:F1:F2:36:98"}}},"request":{"raw":"GET /images/4.avif HTTP/1.1\r\nHost: ovcgs4.ncuwibjnvw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ovcgs4.ncuwibjnvw.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 20:53:58 GMT\r\ncontent-type: image/avif\r\ncontent-length: 14885\r\nlast-modified: Sat, 22 Nov 2025 16:49:17 GMT\r\netag: \"6921e98d-3a25\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2B6u2OiC37p%2B5%2B2XktLdrBQR%2F73lSuHTC8bi%2BedldIL8qeX7v2uUg%2B%2BLEAhWecQSJqisPGnUpFT2lE%2FjLRfQ9JshQIEgx02bf0LGUZh%2BZT2NZ7Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bbf111928c7b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14885,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"dce9f25fdbc4518856718d22a0500a59","sha1":"f6432b97a04a73ca8c50ac5c8152c47f355dae54","sha256":"f432289b5d1bad563070b650cd2f91975c3c5795ed12223bec3cdd49bc34652c","sha512":"0837812794073fc0b16da4689720bf80401f654390fc3f103a489b68d245151e669e23b45f99d63bd023466fc454126c56974e320889337a87f313584297a223","ssdeep":"384:rD5iFNCXpMMwch0FuufCM4Pj/fGzHPVLdTeL2O:nUqZViQup4zGzv9dSF","tlshash":"e662c010cbb4cf6bcb45863da0417e072b331258f5e3233d995cb6655799977486e3e0","first_seen":"2025-11-23T22:47:51.086443Z","last_seen":"2026-01-10T20:54:27.187741Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}