{"report_id":"ba33950f-2b4e-44a1-9451-b6d496e86657","version":6,"status":"done","tags":[],"date":"2026-04-04T06:54:31Z","url":{"schema":"http","addr":"1990833.com","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"104.21.27.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"1990833.com/","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"title":"k8凯发·祝您一路长虹","dom":{"size":3169,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b856e376fabbdaa007abb508c52a173a","sha1":"a5047d347944105063702d060bed9b989ccb5e13","sha256":"49eb56f3edb48e8c90c440a05b38d4b1e40a9963c91577d148657cea9a48c9ed","sha512":"52223886a18cf673f4d4f1b790114952464be430f4b284cffac24f289906fee60a6791927458209116dc61337f5c0ff774a11176f9ed13a73589503f3b8f6934","ssdeep":"","tlshash":"cd513075ccd188bb01138ac89a7bb61af5e2822bc506e901b5fd4dd5af02f93c80799c","dom_hash":"domhashdd0001f9b29d27456d6bce89fbe0f884","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1990833.com","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"104.21.27.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T06:54:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-03-30T05:04:05.902963Z","alert_count":0,"request_count":1,"received_data":355,"sent_data":463,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1990833.com","ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-02","domain_rank":0,"first_seen":"2025-12-18T08:01:06.517366Z","last_seen":"2025-12-18T08:01:06.517366Z","alert_count":14,"request_count":14,"received_data":820608,"sent_data":9231,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1990833.com/js/config.js?t=1775285649322","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8471dfe1f77118fa12c21a0bbcea5907","sha1":"7dc56b0efdbd45eeef2b6e6128c592ed8259219f","sha256":"d5e8eecaf86df1a7b37c26dced477e1d200b1ffef6093378b58e54698a899a4a","sha512":"426bcdc40269a6a7deabcc13518b16804390d2c421785f48b9332a7ce0df58200f68722cba10d578c52ce595e21c6e4280b5ae00c09936e4f7d5a91040333555","ssdeep":"","tlshash":"0f4153343cf44031916e60aab2af334971a2421e490cd767646ed598afe9db066ea8dc","size":2059,"data":"","first_seen":"2026-04-03T20:31:28.559523Z","last_seen":"2026-04-04T06:54:36.241936Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"51207f0e5a92e36a262a8b38e17c2761","sha1":"21f65100f98fb58ff7d71c1b51acd8396af257ff","sha256":"dc4d41e75fa53c5ef1783b0c0ba240ea1dbea74d8f82ffe16024df7f600c0ace","sha512":"0748efa77cba416f56e65c82157fcbd466a8aa7fbc39d48c345a1a2280fc9329d90de857d66d3a57e178bb1b6f4977f2fa139b342415443af75c32b595b863ab","ssdeep":"","tlshash":"84119e6cada7c4a542337c5ea3bfa200b1f200638419e825b57cdd99ef21e55085a9fc","size":1006,"data":"","first_seen":"2025-12-31T11:22:16.536112Z","last_seen":"2026-04-04T06:54:36.24661Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"354df111c9ffe6e38c2941366da8509f","sha1":"06d545cb6d567e29deeaaa2bcdd40ad6a22ecc52","sha256":"07cdc5ed93d38428fd51ebc7b0c3c16b32af9ea194193fc13e59f8edfd3fff11","sha512":"3d178516bca51c415a1fae724c774e80664ee9138ea2893f388c7d45f439b8ef3be4e85df9e2386d9fca4bee707e65e8dfff2bb98b4cf2a2e9531cd8f321576f","ssdeep":"","tlshash":"21900238cd43ac4d58163ab8011001f584f10850201e4806ce44e0400040e00b2253a9","size":54,"data":"","first_seen":"2025-07-16T02:36:38.785533Z","last_seen":"2026-04-04T06:54:36.247143Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-04-04T09:41:52.593293Z","times_seen":81257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"1990833.com/imgs/corp.png","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /imgs/corp.png HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 May 2025 10:41:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"683050ec-2b99\"\r\nexpires: Mon, 04 May 2026 06:54:09 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Apdg4a1SxiSaRCe5Pgck73EIBNJHOQDjhwWZ7xGNBHHONlwfNEnOP9ApgDP6%2F5wUTB7iVqIraERZVqWkxA0CSKhQR8UlZPQGeqnK%2BJp07A%2BqPzDEemNKzWpmjwVnyg%3D%3D\"}]}\r\ncf-ray: 9e6e666c692523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1328 x 32, 8-bit colormap, non-interlaced","md5":"9de9c497a8abd7cba99ce82e2d70d8fa","sha1":"83c5366941addfcf8231e41b12f273d80657db6b","sha256":"aac7ac40c9d1d282951101e044f94f97f022a336fe36272c0fe1fe871a688667","sha512":"74eebf0d970308e6e45305b6e954f1d72f9b6830a0d4358f30f2a80028f81e7e75929a12c7ac8a231fac958b29634d459b2233c27d6c02375fc3bb6521174656","ssdeep":"192:QRTU3k21JC1i+EUYzrlMHZZbjVC4dHFy+JXAKTVY2RkQ5HvbkvR9oR/5YLzQOWxu:t3kCUYyvbU4dLXAyY2CiPbkvzo6zwgP","tlshash":"4132bfcf1a488eb49ce2c91923fe55126f059da5ac0f5f25951cbc6940704ef8a78e4e","first_seen":"2025-06-29T01:50:30.901151Z","last_seen":"2026-04-04T06:54:36.238609Z","times_seen":1077,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/imgs/faviconk8.ico","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /imgs/faviconk8.ico HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2; __vtins__3MYXLiUG2ChMwHGh=%7B%22sid%22%3A%20%229535e457-55b2-5afa-aaa6-6b4eaf83385c%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201775287449812%2C%20%22ct%22%3A%201775285649812%7D; __51uvsct__3MYXLiUG2ChMwHGh=1; __51vcke__3MYXLiUG2ChMwHGh=8f8ca44a-7ec6-559f-9362-8d2413a67160; __51vuft__3MYXLiUG2ChMwHGh=1775285649819\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:10 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TaK9D%2BCHULbToXbcQNlAc4qdhQw6h5tskcVAaAzn%2FXe6oST4MSAyi5xNljV3XNyKF%2FWBd8YZ05mGpdHJFCT7b%2F9S%2BS9A22P7NjCcxu8CmmMK4jSGCHHuMF8RWDqFLA%3D%3D\"}]}\r\nlast-modified: Fri, 23 May 2025 10:41:48 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"683050ec-3aee\"\r\ncf-ray: 9e6e6670398a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 48x48, 32 bits/pixel","md5":"992f1f3a6046e477d0684aa8ec1c6156","sha1":"2211e24598856aa9647cb7b06daa3adfdc296f46","sha256":"462999ebf85dbbc150721da6b34fd737ed1464e3cbab93cc5916d31b9666b0b1","sha512":"c76e5eed8bd1203aee6689fc3dba8d9de6078ee8873f2e2f4bea83ed12d00547b3211affbff6821b8303cc4157aa8bd435febf5b1161ad8601d9c9d144160872","ssdeep":"384:j36YpZ6uG2t7GYIOAY+McXRyWVdPApGxanT0cygqJEQGDRe8mD:NBpRF+M8PdPAJTdZqJEJMpD","tlshash":"ac62b547291cdf93e260bc7f2085f2324a31ae8a7d0d96e48930b7d1f820e5b5e4e5c9","first_seen":"2025-07-16T02:36:38.779664Z","last_seen":"2026-04-04T06:54:36.239188Z","times_seen":905,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/imgs/pcbg.jpg","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /imgs/pcbg.jpg HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/css/index.css?t=1775285649322\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2; __vtins__3MYXLiUG2ChMwHGh=%7B%22sid%22%3A%20%229535e457-55b2-5afa-aaa6-6b4eaf83385c%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201775287449812%2C%20%22ct%22%3A%201775285649812%7D; __51uvsct__3MYXLiUG2ChMwHGh=1; __51vcke__3MYXLiUG2ChMwHGh=8f8ca44a-7ec6-559f-9362-8d2413a67160; __51vuft__3MYXLiUG2ChMwHGh=1775285649819\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 30 Dec 2025 09:38:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69539d88-b15d6\"\r\nexpires: Mon, 04 May 2026 06:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scjmPhbmSCXdIqEYbyq8TZiiwhiBAsR%2BR6cX%2BUJQ26uvYd4z0C9Wee6grikhv6TTBHePxJrshaGUbldRsSYp%2Fmc89Mri65wNxjQy%2Fc6vD6OQBB0QVLWGaA%2BQ1b3%2BPg%3D%3D\"}]}\r\ncf-ray: 9e6e6670598d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726486,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3840x1760, components 3","md5":"829abd77951c4fe943faf145f4d93c16","sha1":"57960a7872ff4136d74854b2b6100e5f5da0780f","sha256":"ff6a346e35c19b75782e34a30f8600e2725fa35515cb3812afe95c2ec36ce99b","sha512":"612aaca4dfc3cda4b2dde368f8717ae9c47a8b86f37814782611357a8dd2d4c9b3b0c7f4daa16e7b743fb92991eaf499941dafacce8f7d73d0f25c063a7feef3","ssdeep":"12288:G7PbAxZNIqaX9TkXWZEaG65WM+Kb7CCXwMt7QUtAuM1F53ACXTkC5qzOYSXfHZr:WeZNIfvCUWCXBt7QUyuM1F5wSSz2f5r","tlshash":"caf423e64a555402ddacc7f0803fd93e3e648e3c58961243a52e1eb99ee6708cd1fed8","first_seen":"2025-12-31T11:22:16.525483Z","last_seen":"2026-04-04T06:54:36.239717Z","times_seen":73,"resource_available":false,"data":null}},"time_used":1920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":1364,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/imgs/android_btn.png","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /imgs/android_btn.png HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/css/index.css?t=1775285649322\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2; __vtins__3MYXLiUG2ChMwHGh=%7B%22sid%22%3A%20%229535e457-55b2-5afa-aaa6-6b4eaf83385c%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201775287449812%2C%20%22ct%22%3A%201775285649812%7D; __51uvsct__3MYXLiUG2ChMwHGh=1; __51vcke__3MYXLiUG2ChMwHGh=8f8ca44a-7ec6-559f-9362-8d2413a67160; __51vuft__3MYXLiUG2ChMwHGh=1775285649819\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Oct 2025 17:19:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69039e1f-1568\"\r\nexpires: Mon, 04 May 2026 06:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKue5TQgL966QnULc187oochSMXMHejo42Iu%2F3A1Se0UyiVoqVYRVnYOi2eYb%2By4YoqPtFyGsr1cOdKBaOcM7LX6Q0ublBjOkuxPBwSKyYfUtUgMeJeIvU6v4lcitg%3D%3D\"}]}\r\ncf-ray: 9e6e6670699123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5480,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 40, 8-bit/color RGBA, non-interlaced","md5":"823320cf08606b7d53fa82ad0781efe8","sha1":"e754a74bc78bdfbecad7959b975326f0be5f5fa9","sha256":"dc3d4cac402517c13e0763d417320ae82755e44eedccc6111c4f8a6dd3974246","sha512":"d4dea974c11a4f7d9568d66c9d83d76010c46544e751ea92faeb015261ce5dae8d8a312afefa5cd2b4437586b529c4935df14d812b2434fa4a54dfd9a740f52a","ssdeep":"96:SllcHitlIxv9vk7C1+I4wWHLihk/xZSi70F5hj8Eirzg8v5iZAHR8nynpPiMFRk7:ZIIHUCD4wa3Sg0PhTir75pxrnMMF27","tlshash":"ddb18e4e5dcc40aa004dcbd9365bab051b33a94451982e2aacff065f6f2c9937ca2b95","first_seen":"2025-10-31T07:30:10.751243Z","last_seen":"2026-04-04T06:54:36.240318Z","times_seen":147,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/favicon.ico","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:10.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2; __vtins__3MYXLiUG2ChMwHGh=%7B%22sid%22%3A%20%229535e457-55b2-5afa-aaa6-6b4eaf83385c%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201775287449812%2C%20%22ct%22%3A%201775285649812%7D; __51uvsct__3MYXLiUG2ChMwHGh=1; __51vcke__3MYXLiUG2ChMwHGh=8f8ca44a-7ec6-559f-9362-8d2413a67160; __51vuft__3MYXLiUG2ChMwHGh=1775285649819\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:11 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUCvbwMu7zmAnRiI6gVOzAC3U4d2w%2BEIwlcIsm4rxShnFh33P51nGs0sw0EpBUYxt31spBb7X%2FxhTN3KvCih7A7St3z%2FuBeVZHM3qcP07RFV70nXCqQfJHlAwWEQIQ%3D%3D\"}]}\r\nlast-modified: Thu, 30 Oct 2025 17:17:41 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69039db5-3c2e\"\r\ncf-ray: 9e6e6675e9eb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"cc215d201e98797460d08293f15eec11","sha1":"9b18e4e12bc749aedc6ee1087d33c7922a0ec8b7","sha256":"b95a79db35061449bc017376f335550f1ee5a76aa3207f76fddb23a9d60d23a3","sha512":"6bc01398bbf192e381abbaf28184bf6fe814691bfa3513e57d3d51664c65b4dee02c3b4287ac94b785e3e006cebe04048921325811f070f8c4c3ac21cd8db9f5","ssdeep":"192:Uc2ZvvaaVVw0o8WmLYcnSDAu3ioo8DoW1Tn/EUb9R29iKBmXSLFz/ZbvGxna7Nsb:UAYpNLYcSDAybJzAUb9R2FLFz/xGB","tlshash":"eb6282816768cebac2632a727066b27f06791f4d3adf85844a717ce3f8d00862f359d5","first_seen":"2024-12-27T21:49:37.954336Z","last_seen":"2026-04-04T06:54:36.240917Z","times_seen":1914,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":560,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T06:54:08.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 06:54:09 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 03 Apr 2026 10:31:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2; Max-Age=86400; httponly; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhGF2m%2BQ1vVT7feH4SAP%2Bmjhjpg%2Bm41cQzgCAcPT38BJMyFJPEIeShqkNLMFj6ixoUF1qR45QhZ7aHkz7SnFyFdWjoSdMdtgGt3Ux3dtIxU9BTEBPzehs3y26Aq8qA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e6e6667e80a0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2595,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"c7be5df522c7f5446165e7fce15e5537","sha1":"d48e22be85cee2e170df8572b697d745eddde67b","sha256":"9a16838f8dee48d6c6f231d0b18f71387f1993b188ec75841b4a5144d69b4fc6","sha512":"ea7cba741b7ad30e14acd97a47929d4bbf1b1d54516f22e328c39a0b2754052b76dfa1db1668c16c33c95627eb3fab6ba5a06dafed6503e2d72ab43d1bf92bb1","ssdeep":"","tlshash":"5c5131349ce2c4bb01634a985b7bb606bad2c127d10ae901b5ed8dc99f42f57cc17d9c","first_seen":"2026-04-03T20:31:28.55705Z","last_seen":"2026-04-04T06:54:36.241462Z","times_seen":3,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":43,"dns":20,"connect":2,"send":0,"wait":554,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/js/config.js?t=1775285649322","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /js/config.js?t=1775285649322 HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Apr 2026 17:05:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69cff35d-80b\"\r\nexpires: Sat, 04 Apr 2026 18:54:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lD3PLR4s%2BRYLV7uKELMW9uXltfaG%2BA1wMzfwZgaU8oGiwqVtAjTPR%2BbBjEexMmno0uqpERfZXKFjIarBIfxsN612n598Rmnnu9Dm9UTo4lEOOJJcWuRrlC9QAFtSvg%3D%3D\"}]}\r\ncf-ray: 9e6e666cb92b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2059,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8471dfe1f77118fa12c21a0bbcea5907","sha1":"7dc56b0efdbd45eeef2b6e6128c592ed8259219f","sha256":"d5e8eecaf86df1a7b37c26dced477e1d200b1ffef6093378b58e54698a899a4a","sha512":"426bcdc40269a6a7deabcc13518b16804390d2c421785f48b9332a7ce0df58200f68722cba10d578c52ce595e21c6e4280b5ae00c09936e4f7d5a91040333555","ssdeep":"","tlshash":"0f4153343cf44031916e60aab2af334971a2421e490cd767646ed598afe9db066ea8dc","first_seen":"2026-04-03T20:31:28.559523Z","last_seen":"2026-04-04T06:54:36.241936Z","times_seen":4,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/imgs/ios_btn.png","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /imgs/ios_btn.png HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/css/index.css?t=1775285649322\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2; __vtins__3MYXLiUG2ChMwHGh=%7B%22sid%22%3A%20%229535e457-55b2-5afa-aaa6-6b4eaf83385c%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201775287449812%2C%20%22ct%22%3A%201775285649812%7D; __51uvsct__3MYXLiUG2ChMwHGh=1; __51vcke__3MYXLiUG2ChMwHGh=8f8ca44a-7ec6-559f-9362-8d2413a67160; __51vuft__3MYXLiUG2ChMwHGh=1775285649819\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Oct 2025 17:19:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69039e2a-14f1\"\r\nexpires: Mon, 04 May 2026 06:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGFUhhtn1ijLpepmt9AbRk7cwNs5Ic8B1vyz4reGDNbUEjlxCuknY6NFBUtoGHejnF%2B0VA2xEA3ARm9swjcM%2FSJy6f0k3qozREsVGQA2qoS3nCqmUuhl71vNAkW4hg%3D%3D\"}]}\r\ncf-ray: 9e6e6670698f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 40, 8-bit/color RGBA, non-interlaced","md5":"16035013b6cfbdeb03218e5a1dfb4fe1","sha1":"57c7d41e6a687102edd47b2ac3a4d58275ea5ac5","sha256":"5bc61823e296ac56b63572e1536d4e023eec7431731b6b7d63244f9c7a1146ed","sha512":"517d4ce9165b128330cff0bc07dc54fa0c1f21e26170e3d14e3dd293fb822f769ce214f5809aaf358a25f828b22b6fc7b565b42bd31967b4c357a923ab8258b1","ssdeep":"96:SllcHitlIxv9vk7C1+I4wWHLihk/xZS5q/EZPlgCjWcSa6VFg2ezvzjYSK1c:ZIIHUCD4wa3S5q/KPCcv67g2I5K1c","tlshash":"05b1af85a0a814adb10f4b7b366eb8a2c83fd546435cfc14bae7458ec208c923491bf6","first_seen":"2025-10-31T07:30:10.749486Z","last_seen":"2026-04-04T06:54:36.242438Z","times_seen":147,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/imgs/logo.png","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /imgs/logo.png HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Dec 2025 11:42:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693aae36-28e3\"\r\nexpires: Mon, 04 May 2026 06:54:09 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iO6lr9%2F6Xt5t8u6CE3jiQlVIr9k2vrOgRcyVnHFsarjfFbcqDCzR1bhg2zXuH4jazqVUfHfK%2F9bX3ls5ZnSRCYd3leSH9zk2JCvJA%2BfIokkkZs01S6WQBOh8fj2dlA%3D%3D\"}]}\r\ncf-ray: 9e6e666c592123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 529 x 96, 8-bit colormap, non-interlaced","md5":"9c35073359ed452747743a29c0192849","sha1":"9bda9ccccf8c8fe5f3c0ddbe0ef448125a35734f","sha256":"fe45c9536901c3aeef965c3f40fdfbd67e06035c3231c654c23dbaccd123166a","sha512":"93d2d1337cff0d4fc5ad3ff03a1234db997aff9bb3c9b2a30586a26dbe4814b3af09ba057856c2eabeb265940aff7dfe7883cef840d4f7802db19e9e5c6bfaca","ssdeep":"192:GdsjlShdePhtzVUPrKXN0wV40IBT4+S94XMsOM0zehvU46uNBd:4sjshYPhtOPre0wtI14IXBhkuNBd","tlshash":"e222ae153fa7ba4f13438d216825b4f5f2222cbad00222419196fcff523bb5ba12675e","first_seen":"2025-12-12T06:17:28.440196Z","last_seen":"2026-04-04T09:36:57.386949Z","times_seen":584,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/imgs/sponsors-1.png","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /imgs/sponsors-1.png HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 838\r\nlast-modified: Fri, 23 May 2025 10:41:48 GMT\r\npriority: u=4,i=?0\r\netag: \"683050ec-346\"\r\nexpires: Mon, 04 May 2026 06:54:09 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYFwPNklD9WROsidkO8mxvofE8Y6jIdaeu6ZeG%2Fm%2BuhK3YIQWX4XHc64rRIIW71oP82VJ7psbnWBwgNHRrMQNQXX81gxSR7JE24akPFzrc8YhOtzZ4wY2DKdJQd1gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e6e666c592223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":838,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 26, 8-bit/color RGBA, non-interlaced","md5":"5e4b0f0a2334a25bea11ace616f92b23","sha1":"bae95c09d313915574142570be3c406f0ce40ed1","sha256":"e1bf95a2463bb33e14faa166b875120b008056b6988a60592f2194b29f4c0d20","sha512":"225ae24a8415291a3a9cf5c22145706f862ff1eb95c073af5b21b3e72723d26d78ce0c2045f6e6528ed7dcbd7448562010e4a59f6c5c6c8a50d8a1005ccd1220","ssdeep":"","tlshash":"fd01daec4fc07838b9dce749c0190c2cdcd5645f60d39c475bf0aa4407018ee486457b","first_seen":"2025-06-29T01:50:30.887469Z","last_seen":"2026-04-04T06:54:36.243428Z","times_seen":1080,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/imgs/sponsors-3.png","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /imgs/sponsors-3.png HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 May 2025 10:41:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"683050ec-dc9\"\r\nexpires: Mon, 04 May 2026 06:54:09 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJD7cJFD4dy7Ha7fE7CAIG%2BXYWl1Kde5PTE3UqQ1MMoYZD557z7lh81NXt9CRjO7RHnjqiu7Ng%2Bqq%2BQ3edl6mX6iDgzpwCp9Bru23CxkmDtOMlrOH%2FA4z31F%2Fi%2BzmQ%3D%3D\"}]}\r\ncf-ray: 9e6e666c692423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3529,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 24, 8-bit/color RGBA, non-interlaced","md5":"f48eec98d2a6175eff3a69bb255744eb","sha1":"644f7a9790d33179c0b78a55b0484eeef26b1792","sha256":"5bcd22d52faa2d16c5232ec7686b324edf5a1b6978140c197dc70179e924efc0","sha512":"f15c0fe7851b62d9f429cabef68b6e2b56ba1dee71cb1576d76d685b7ce7a79ffcb892d2bea06f6d0701851dd5dcd59270ca01d8f13c461755fae196407909f3","ssdeep":"","tlshash":"4c717ed1f7b444ee326d557730bf04cb102caa5b7c781eaad4c4c603e00a0d3490a1b6","first_seen":"2025-06-29T01:50:30.905653Z","last_seen":"2026-04-04T06:54:36.243955Z","times_seen":1079,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/css/index.css?t=1775285649322","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /css/index.css?t=1775285649322 HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 30 Dec 2025 10:22:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6953a7db-ca0\"\r\nexpires: Sat, 04 Apr 2026 18:54:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMNQ5o9kibNTAoLrzdWmYJjbbLg1lTY14IyvlzxcNqVc%2BOVzbHgIDWka9p5xj%2B%2F6fQ7vtD1rAbhLpi8Se41JK2TeBFo%2Bj2lXC4mudPGBIhHh0tWiB%2Ba17CdzsctzaQ%3D%3D\"}]}\r\ncf-ray: 9e6e666cc92d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3232,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"92a761238b01e255ffce6263f0be2d80","sha1":"fee0b8dbfccc682bfb215fa223652dc2a1a1188a","sha256":"fa73860270365f03593f1e029e8876d9663e496c8d4c382625c23ee0f3486d91","sha512":"6e3cd66bc4eb5cbcae013068fed7501097bd00a2f833c0f8ad41189c2a1d0aa8e2873c6905375a3c643dcfd135f7d2e152653fc36e7059c8da98a5722c3db8d3","ssdeep":"","tlshash":"15615691e751660a3157d6586ca2a709537cc001a20eda7d2bf734d8ddcf28a61b3be8","first_seen":"2025-12-31T11:22:16.535226Z","last_seen":"2026-04-04T06:54:36.244501Z","times_seen":74,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":"广州有啦网络科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 04:08:22 GMT","end":"Sun, 19 Apr 2026 04:08:21 GMT"},"fingerprint":{"sha1":"AE:CB:32:71:EE:EE:E6:72:A4:88:B2:9F:4F:C4:E5:B5:A8:C2:73:6C","sha256":"7C:F1:09:2F:6A:8C:5B:F8:63:DF:D3:32:B0:F3:F8:E7:01:29:0E:F2:55:8B:4F:6C:58:55:8E:44:E9:EC:15:F4"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 300\r\nOrigin: https://1990833.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://1990833.com\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\ncontent-length: 0\r\ndate: Sat, 04 Apr 2026 06:54:09 GMT\r\neo-log-uuid: 4855529779074513315\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T09:46:13.591387Z","times_seen":13326202,"resource_available":true,"data":null}},"time_used":884,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":884,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/imgs/continue_btn.png","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /imgs/continue_btn.png HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/css/index.css?t=1775285649322\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2; __vtins__3MYXLiUG2ChMwHGh=%7B%22sid%22%3A%20%229535e457-55b2-5afa-aaa6-6b4eaf83385c%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201775287449812%2C%20%22ct%22%3A%201775285649812%7D; __51uvsct__3MYXLiUG2ChMwHGh=1; __51vcke__3MYXLiUG2ChMwHGh=8f8ca44a-7ec6-559f-9362-8d2413a67160; __51vuft__3MYXLiUG2ChMwHGh=1775285649819\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Oct 2025 17:19:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69039e12-124c\"\r\nexpires: Mon, 04 May 2026 06:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=us0XIqbPAaiA6K9r52ndYVH2FcZbdgXoguC9IFRAHyOpW8r96kU%2BF8JJ6PYnAXStbR%2BytsEW5uSPwiU%2BB5ct%2B9jjLu5AImbmQ%2BMNCbu%2B0Wzwmn2ZGm5O2KedL4BPow%3D%3D\"}]}\r\ncf-ray: 9e6e6670698e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 40, 8-bit/color RGBA, non-interlaced","md5":"86821e9565ca1e5559e695489d7da6ec","sha1":"67d02aec30a795b5cefca5939b71e4116f6a6e8e","sha256":"3f704e984e2c402558e5b0d2312ad66c72e58f3db1f31ce08718224e1173e93a","sha512":"da90bb6955943cdf7b9935ecf700bc624fefea482ed34e35630e3ceeafc4a1097d8560eebfd3a5ff504665d0f30561a7b5571ec834141f02bb4a2a6e2bb1d869","ssdeep":"96:SllcHitlIxv9vk7C1+I4wWHLihk/xZSsVdoVF5Lx2IppN879urzy:ZIIHUCD4wa3S8I5QIpz879urG","tlshash":"21a18e8c29005159180a45ee693bce51872bfe99b34e3e04d5e6438ed510ea0bca7be3","first_seen":"2025-10-31T07:30:10.771626Z","last_seen":"2026-04-04T06:54:36.245517Z","times_seen":147,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1990833.com/imgs/sponsors-2.png","fqdn":"1990833.com","domain":"1990833.com","tld":"com"},"ip":{"addr":"172.67.141.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1990833.com/","date":"2026-04-04T06:54:09.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1990833.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 23:41:48 GMT","end":"Thu, 28 May 2026 00:39:35 GMT"},"fingerprint":{"sha1":"5C:7B:3F:A4:C5:65:F6:F7:A7:B7:B5:55:D6:BF:2B:BD:D7:25:DC:E6","sha256":"AE:A2:8C:26:C6:F8:53:86:46:B5:86:04:32:60:AD:D9:31:27:53:52:F4:52:79:22:02:6E:B3:6A:A6:B8:AB:AF"}}},"request":{"raw":"GET /imgs/sponsors-2.png HTTP/1.1\r\nHost: 1990833.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1990833.com/\r\nCookie: server_name_session=78d8bbcf4097d499b6fdd69559cb86d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 06:54:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 May 2025 10:41:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"683050ec-fb5\"\r\nexpires: Mon, 04 May 2026 06:54:09 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umSTMCcpl%2Frfl6AKvmihYPz8ltkeXawg1GXlNl06OgIu26ldP%2FDa6%2BoT0LGMCnUERLn8uyHih0Zjtmcb7eBrWj6BPq94Szkr1DOAlywlS7rOAS8%2FuIBGngP7rP9CLg%3D%3D\"}]}\r\ncf-ray: 9e6e666c692323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 94 x 24, 8-bit/color RGBA, non-interlaced","md5":"053711d7818dd9472a7fa4bfd0f6e350","sha1":"cdf9f7696d419a2d40bb4e232380eaae646b93ce","sha256":"ed20d27d2228adc1eb6ebbad865b208541186f36cae3cb8751aa586fd61855a6","sha512":"9883d9bd92e1e00c06bebc0b5e9aef08d779b3dcb1201dfa50fcf4a407e8a3e9551795bd9a085895ad205f9d5b0344faeab0abbb91a3248a74547b7bb88be6c5","ssdeep":"","tlshash":"5c818e4925ceb30f13f08274aa618899001a90fd53f439aad02686b773bd57620aee8c","first_seen":"2025-06-29T01:50:30.907289Z","last_seen":"2026-04-04T06:54:36.246079Z","times_seen":1080,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"1990833.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}