{"report_id":"c5c4fce7-90e7-4736-a749-0d7339d74b92","version":6,"status":"done","tags":[],"date":"2026-05-01T12:14:49Z","url":{"schema":"http","addr":"love20268.com","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"title":"welcome-bet365","dom":{"size":357503,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36201)","md5":"0bfade7fc46ffbcaa8b778af4b04b999","sha1":"581eaef65eaa61555407b66bef39cd94d7b6132e","sha256":"a9fa8f3db343cf13ef61f4c26c081cc9882cf7765234e746bdfe817c0ceaa861","sha512":"d75b56c51fd7037b084064d7045f524261dc092323bdeb93f9b239985f34325867468b068288286a745fae1289550e787a0345be7326b61ddcaebb948c33b3dd","ssdeep":"1536:EbjMvOzsCSXp+kNIhfbO1lJ1ThU7MVOodb7nSakNIdlBBHywc8SiVqUiVqviVqA3:AwCUcTO1l/TMIlPXS1Vn","tlshash":"237439f4439c43f1e40b8b9dac363da132e134ebbfc44648f3ad0ad19bb2586586d956","dom_hash":"domhash4f28cacb3c45ac554bd936cff4116abf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"love20268.com","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-05T12:14:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.geetest.com","ip":{"addr":"104.17.6.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-03-05","domain_rank":196356,"first_seen":"2015-01-16T07:12:35Z","last_seen":"2026-04-24T23:18:30.898708Z","alert_count":0,"request_count":1,"received_data":21656,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-26T22:25:05.471148Z","alert_count":0,"request_count":1,"received_data":490733,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"love20268.com","ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-03-20","domain_rank":0,"first_seen":"2026-05-01T12:12:31.816127Z","last_seen":"2026-05-01T12:12:31.816127Z","alert_count":318,"request_count":106,"received_data":4753811,"sent_data":63960,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GeeTest","description":"GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.","website":"https://www.geetest.com","common_platform_enumeration":"","icon":"GeeTest.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b733e809fcd514bdf9414ce77e3f5bb","sha1":"53f38e306721e3a00f340b966ac3f7642bebb57e","sha256":"a05c0b1be0d5a6858cd22804367a5d3a2d23e45de4cc9cfea2abd9fc65766b49","sha512":"07dc77674e4408902b7243c9036e85dc45bfa8ccdf839bd0f9aebf8f38209bb773c5c58733083e52f79fc22fb034dd03664c97f2c84d68646a138ab52bdaa6bd","ssdeep":"","tlshash":"0ec022a60b287f14110310230374f3ac5431c029bc15f202321f42018f50b0d0830a80","size":190,"data":"","first_seen":"2026-02-15T23:20:06.598758Z","last_seen":"2026-05-01T14:24:54.831679Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"46c37814c8d855f8d26c8922d6a21d09","sha1":"77a8a7d835aacf3d4c325605b153d011418518a8","sha256":"bf3b91fc06aeb59c3f2832583ce2b70b2b8f4dc45df941aef8611949220ddf84","sha512":"24308fb6d5a6b83f2f8a328fde19300d8ab2a8f2d8116ef4cb160275ed664391e3d52794d94de19ab1a0feadab0168bf0a5e86e2066ccad31c2af2bc0a0ffc4d","ssdeep":"","tlshash":"9531e0282eb29531d423617a1f5bf2843235e62f3148ef043f0dc7661f24d6ba6356d5","size":1702,"data":"","first_seen":"2026-02-15T23:20:06.601892Z","last_seen":"2026-05-01T14:24:54.83261Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/41269.1777364763194.4d438e50.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1ad141cde778293623f6fd66005f3a2","sha1":"1c0f04924c9d60598de5795f2f8862eeb837745a","sha256":"4c7821310dce05e151e2fd43e2db22b62e6fa80d592151d2fcdf8112ab8ffb8b","sha512":"0c9a6f0cb2a84f7ba3ff021c311e0318ff45506d88aa5e77d896c92c8ecfa3be6f25e89a3a947809598f0bd36f87742e658f6d67ffa389f6bad394fe6af665c0","ssdeep":"3072:pF+7tB4Vgj5tNlxyUrwOWoYE6fDxCiuUlL5XE4roBlmomj24sp7pms:X+7tBwgttXxyUrwOWxEMDxCiuwL5XE4g","tlshash":"c2c339d4f290b1f547ab46f2b13744a5727e0c82314898b0f15aea557f3268cc6ebadc","size":119940,"data":"","first_seen":"2026-05-01T12:12:39.057703Z","last_seen":"2026-05-01T14:15:21.695645Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/sandbox%20eval%20code","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-01T15:39:12.394106Z","times_seen":831782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"361f3b361329ab12f7aa8598f4474596","sha1":"d10885271a35c30e2543a7a1faa395e6ec408a52","sha256":"ebe041ac9d8f2e5d225dafed52312a9da5bb32fdc9d918e799c3883ade9edd09","sha512":"e030ded5300ca29133055e51be6cfcbce4ebb590d95d89abb526c767d50deb6db00700523b5cc19770b93a91c785b448f30f90eb3e240adb929c4eed4de3b123","ssdeep":"","tlshash":"1ee0614e342954e555a3b5f737b3450c7416270e5850faa37d5d854c1f1059544ab3ec","size":415,"data":"","first_seen":"2024-05-05T06:43:28Z","last_seen":"2026-05-01T14:15:21.792043Z","times_seen":378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/config/initGeetest4.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","size":14975,"data":"","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-05-01T14:24:54.755812Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/home.1777364763194.5393ab06.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf6ee8ad595cabea1ac4ecc6104dc84e","sha1":"8c22ac39d91ad5259f4ee236839744d12f8e396c","sha256":"07f0480d826757b11832f6a3cf7b67ecfc1575be7548f07ce5d107efcf77cb7a","sha512":"8c5bcedfa11baa4ec20fd69ed3402c9b849487dc473a1ce8e6071bf3cabeee043e1e9268b789425e2ef011a74a0562e60b78faee4ccc697c2220b52cbab7e5d4","ssdeep":"768:72tnjyU2gJVsP+wSCx46Bj8lJaptxfsDLVfuO2KSIMcK1jaJ7wBqBJJLhQXq9G+/:U7sNoLDSIMcrmSJtxJjdd","tlshash":"c3f2f884efb4e7f8239fca9b8e319070652527c1e0ccb8a461ed5f187d1a396b4745a8","size":34472,"data":"","first_seen":"2026-05-01T12:12:38.907512Z","last_seen":"2026-05-01T14:15:21.765147Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/21954.1777364763194.57c97863.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3625ce676273a0a70a815bac91290b96","sha1":"d6228513247625005a157d90f69c76d8bc7e6117","sha256":"896205d739c30b1f7db4cedb32cc6e2a5bd400b8110242413f9b3aa4a38bc2d8","sha512":"ddb917ba3f43d4c69a85f9577dfde3dd511e31fcf2e14d1e08ad4b13f98ed17d02891440f9e45c1e3932a65785071f6aa004b766d1336eae7f8326270bdc495a","ssdeep":"768:7PeaSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:n81R6Ipyk6o","tlshash":"b5132088fac2b06dd3eb733085bf505ae66a1dc0668c5438e260d6917e7198dc1fb5f8","size":41968,"data":"","first_seen":"2025-12-29T19:25:02.029727Z","last_seen":"2026-05-01T14:15:21.775393Z","times_seen":772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/12048.1777364763194.f8bef623.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"405515e348f88271ddab62bddb3181a1","sha1":"bd594f29b11e6012d55f3b43b9dce0309ee9c3c6","sha256":"caa8d19fc59d89f6d56d50abf191853357be63dfe60090c0b5b1a3ad79889ec2","sha512":"d7a316789a95aefaeec62a24cbef7244e0a91625a88c95ec37858cfdb7538a51d02ba2e5feca3bc2e5f523cb5c14da28ab629086e4bd87555083c7ee7f22fe16","ssdeep":"6144:n/zKTUAavC0Jjytg7DiQPkcsz1WHSouVHrqML:/WcjytgPJPcVHrxL","tlshash":"8e441b84b291f0b4879b42f7a22b4055b17e49a030ccacb4e265ed90be7555c927fbfc","size":268283,"data":"","first_seen":"2026-05-01T12:12:38.881207Z","last_seen":"2026-05-01T14:15:21.742602Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/configPage.js?v=4/28/2026,%2016:31:32","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9a1da2795b6ac069691e02b6934b110","sha1":"3b31f29574988e3f8253cac52a29500e246be6e1","sha256":"288bd90db96659b95b35830382e465d3b48ab13b5aee95b36fbc3a004bc91d95","sha512":"d760cddf6e74524c7ae79dfb7748ad3841aa07fa97ff0c7683123f29f2dc0e5be8d4cd8e611e54271dcd2facf8da72963dec0c28bf16e610fe4e53a164803f9e","ssdeep":"","tlshash":"ad31428e22594cfb874b7f95736b060c68a631419445ad91bcddcf1c530994111249bc","size":1542,"data":"","first_seen":"2025-06-09T14:55:55.160162Z","last_seen":"2026-05-01T14:15:21.76349Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/65246.1777364763194.8333614a.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1abf0e2775d0125d8307853800ea7ae","sha1":"57b7d1d09c2346bbbcdbc4f9e7ed10fe473bfce0","sha256":"0f903d31be30688bdcce02288d688b23493e9c3fd56de17ad6fb123bedc2c745","sha512":"732c8829b8d95a686e57f06c62c22bc31faa7446c04e4823b7a77824b2f17dca62049f098294307dd1bef1df3f2a87dd93b8ca0bf90c3f113c82e46faea804ed","ssdeep":"1536:T2+iDvYvNjx4Uyao0L8oDNzAuMMsTAQ0mqt2pXYzA4dANVQ:a+iDYvPo0L8oZzAuMMsTA7mqt9zA4dAQ","tlshash":"ec73a501f78272385fa7e290220f2026e16d191505ac5bd8f179ffb93ef0954aa7d7b4","size":73516,"data":"","first_seen":"2025-12-24T05:36:48.556093Z","last_seen":"2026-05-01T14:15:21.753223Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/45540.1777364763194.c52d0b99.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"07ee92181350b39d79f99514ee924d31","sha1":"9ca738df1e046d627dc4c4617c8dac7cddd0c56d","sha256":"0e694a18d938f3b4478c1eac641594aba2da8e3699eb83605010273b95941aab","sha512":"265e3b0814e6b2c74187e59d7b9f6e07168815c1822eec02886fc589a582423bb470bd70657f045f28b6f67258176fc9d473bd89f6218b2fad976692a290fcb8","ssdeep":"6144:1YD4wFsYiSGfKnIKPP6Xm9Gm3MCrn1OSgpozfEe5a:1YD4wFsYiSAKLJ3T25","tlshash":"e524e894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","size":229350,"data":"","first_seen":"2026-05-01T12:12:38.951273Z","last_seen":"2026-05-01T14:15:21.701134Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"5281f83487c386b7836c0a61310eee71","sha1":"b69aa5eb7750fa2d18540f7a8f28dab10d4b2631","sha256":"5c4f27503b020517fa4d8a831ce6ea7c9b425cbda5603e8e6ce9119aa406cea4","sha512":"4d7ca7094121bc51fd7e24de7f2b9218624f1c7c2b5949e25ad2be53f4b1babc0ac6265a9e20acd2d51fec4e844baebdd7d1aa300a7f52f3b360bf36a8979ca2","ssdeep":"","tlshash":"5c8004047d5d50540000503014740c0d5c133c57403f0314340dcc013fd5c401447441","size":36,"data":"","first_seen":"2025-03-03T20:54:16.013922Z","last_seen":"2026-05-01T14:24:54.833544Z","times_seen":2464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/g5/gd.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.6.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d7af3f3975e0fb657b71508b79515f9","sha1":"b36988028196a947b1d67af0856a79e6cf054283","sha256":"41cadd609d64b1958d25afc39e73148bf669fd94f48e848dd47494e7de5762b7","sha512":"ed69806d7f263fec8f66cccf0de8757df3b17cad5629c242e1da0d668830870d42951b8a05cb6780ecf8034800313d02531393745209a5aa3e00ac5d936e1bed","ssdeep":"384:oGm+XLBnDztmdGnnsQn4DgIzHilQVdlsGxCnXdPVcVf:dm+7B6gUKMrxCtCd","tlshash":"5d92204e6cf5a0934a43b078c9af6114b538da53041c9d597d8ce3a4ef684389bbafdc","size":21040,"data":"","first_seen":"2026-04-05T08:11:55.721652Z","last_seen":"2026-05-01T14:24:54.745951Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/83749.1777364763194.356278f5.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"91406d50af87226a9a4a3f2bfa559328","sha1":"550eb6cefef030f64a1fe7d28a67d9286c80938b","sha256":"271ed98f1b72d5ba8e7bfad8ab9dd4edf4824811ebf43806718f4311fcbbe80f","sha512":"f0224614d9f259a71b464b33d757a0c49d24075e4f2bb7f105cff9df0e1e4ac151659eec1e36ae71f8a5201a9e729af9c49b53c51b4168b4a2e867ac492fc499","ssdeep":"768:zEYSEh/janJVLi+wRfx46uj5lJaptSXZDHPBnF4lc+hI+HXrJlFFSv0F+SCKJQEE:Rz7xYpHpn/+t0E2zXDNFGl6V","tlshash":"3413f880e6f4f9fc265ec9f797364474a02526c6a0c8ece0d1a96e587d44ba7b4348fc","size":45112,"data":"","first_seen":"2026-05-01T12:12:38.944416Z","last_seen":"2026-05-01T14:15:21.783194Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/31098.1777364763194.4108b3dd.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc604f9ac5ff6a51dbcea58aeb97d8e1","sha1":"893989f1b28ff2f094d074699b8980b9b845ad22","sha256":"e4fed891ab2bf9e518a602dce8fc7192c8dfc635241278bfa315fc3240c6022d","sha512":"d35e20542487380f8bf8a261da0fb87acebad87bb8a723237664fe23c1d9e5fc02e83274329c6959d0712a3c810d6d3f64c561e2d314cd2877f3d8a4558955b9","ssdeep":"1536:N+0YvC9jlTKAUSseG1SY46DCdlBBo3AgXOG9AsqCfCXsvCfCXsLCfCXsyCfCXsfX:wKK5sY4brG7O3SnLJNpL","tlshash":"3674b6f4c248c6fdea04ce0a7e7d6f2d50723783f2ec56c446aaf8865e92857245c4da","size":352738,"data":"","first_seen":"2026-05-01T12:12:39.026876Z","last_seen":"2026-05-01T14:15:21.759273Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee16a86bc3b88782c5c907f9ead0c7d1","sha1":"f405a7c3c791f84e49682c50273fa2d52114b8e4","sha256":"4dcb462e6dc1c81213c9ba9b153f1aa8c7ed17221e80e6cd48becb210afef37e","sha512":"0d3d0b021a145d5393769569321ca87b0308728e65f12c0d93d3d1c654e0da56d99b1dfc5b44488c6a216c03654ed80299a14b91c7c85dec380e491ba042b80e","ssdeep":"","tlshash":"b3c02bcc210b0cb151e72f054b7fb300b005320198d1db31380f33088f21d07eb54828","size":165,"data":"","first_seen":"2024-05-05T06:43:28Z","last_seen":"2026-05-01T14:15:21.790053Z","times_seen":378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/chunk-svg.1777364763194.1e4dfc16.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cc71bde1db31cd84d523ba58295ddab","sha1":"8fb296daf15298f69bfe80d65d9acdb5ee8a129f","sha256":"c77709432d2568c80a60b827d95c7c5b1241653249900df056d9a572877dc5e3","sha512":"a121037c805fe682b6f22e5069dbc96d8d005fda71d4e14b5909b5c680954c438914c212c87e74b49f4f69c5fef39598925f53d6ad7483421740865827959d43","ssdeep":"3072:r8nz2uaLZSZvx6Q/sIPrekK+m36Ua94sRZI7gbpF/:r8nz2uasNxpXPrekK+m36UHsE4pF/","tlshash":"eba4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","size":464052,"data":"","first_seen":"2026-01-02T19:20:17.992466Z","last_seen":"2026-05-01T14:15:21.711517Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/75351.1777364763194.6e695611.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8235b8f85a5d635b40d5fd318878904b","sha1":"ff21578abcb9d16cccd72693f94c57daf09b4fd0","sha256":"bf229f1179d95d34e9df661a2fb42a10b32718e4102cc6d492648a680fbe8dd1","sha512":"11cde1f9fa451a9f6a07e0937978498c4e86b8c1fd37d91c332bda056e76b0c449983b195734a380a7997f8df9385c3d92a8eb3e8943a519d960e2c3f8eead78","ssdeep":"1536:517BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4z:vjHoKRKphCnDgJoec+IDWIzls+xXr0X7","tlshash":"9c141a84764170b8c396a165322f601ae22f789650dd9c24f3789ba47f7470df26fabc","size":195266,"data":"","first_seen":"2026-05-01T12:12:38.980505Z","last_seen":"2026-05-01T14:15:21.72515Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"49bea4e1330b9d3f17c1c143ce23cb3e","sha1":"3a8874032b5979ba1fadfe141c0ebf28baa32fc7","sha256":"07f2a8f457d336c5a0cb2267f53a4be2676d30140da225305675f4b3957eb68c","sha512":"9cf0ea9cec23fb496db40aae14fe1df1a305d4a847e23a724645052c742a5995250f9d7f3f0584d3226aa17c6af04201f72cf7fca01bf4c788df2ab4cf488ad0","ssdeep":"","tlshash":"b580040cdc5544570000501014500cc57c170417453f435f750c04451fd34700007c40","size":36,"data":"","first_seen":"2023-03-08T15:23:49Z","last_seen":"2026-05-01T14:24:54.834029Z","times_seen":2531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ce02dcf11f1634908b4afc4e1bcc632","sha1":"f8911bd806c6ddd3daab7f3eba10081d7af38f74","sha256":"46c7be5f428c72dac25551dbcf74f494989a3cf773ff04f9e115e15ad7dc2893","sha512":"c4f56e0a143f096a106956d55a60f07405a2418d8eec9917a027d0ede74e7119884002051c598445519ff87ad5526d035c221bbcfc65ce817539e6162f157ac3","ssdeep":"","tlshash":"1901735d483748107b2225bd537f5045f1a2516f9e87cc103c1e5b00eff48a72591bd9","size":750,"data":"","first_seen":"2025-08-16T16:35:14.594808Z","last_seen":"2026-05-01T14:24:54.834478Z","times_seen":2056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d7029dce5d85a5da627234c9d9dec9a","sha1":"24fb150f1cc1df574ff3e2cafbaa0da15372f707","sha256":"b0ff82425661555aef2b423d91265672271ef5854e3e7b815e12f9b363fd34d9","sha512":"db505fbc49659020a42eb8e2064c9aa0aaebb166f309faf0245432a9a5ceb1d921a6cd040d445c99d38108057d3c9aa84556a5b47433b7401ae410239a28202f","ssdeep":"","tlshash":"f741027d826345a51973346a1f9e734836f340b31149e9113e5c8a802fa9a5f83b7bfa","size":2333,"data":"","first_seen":"2026-04-05T08:11:55.739213Z","last_seen":"2026-05-01T14:24:54.834956Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/chunk-init-1656f0b4.1777364763194.d896ffeb.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5ffdf7d068fb54e5b2bc029157c97a3","sha1":"e6b169899f11d90c9243f5626b1fdaeb3b336b71","sha256":"cd0ad3095337a01660496864466c49b01390ede138b39dcf9c0593fc8238c571","sha512":"a5191d183f4063447b6f7860825e413366897e7d8be6626ea81e4079fb5b666dc95a55ec6d98499011e63d03535b08a810725205b27be52cf8252b3558276daa","ssdeep":"1536:atwqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCifM+:atwqhOIK2nCLdyACifMur06/D","tlshash":"17d3ec54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","size":136038,"data":"","first_seen":"2026-05-01T12:12:38.921317Z","last_seen":"2026-05-01T14:15:21.681108Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/config/telegram.js?t=1777637668078","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","size":116886,"data":"","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-05-01T14:24:54.820072Z","times_seen":739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-01T15:39:12.39024Z","times_seen":830158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/78817.1777364763194.41fe8f56.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6a64f95d1fbdd735f3a3694a0d2cadd","sha1":"8d184b6e0ecb1b8c1486454776ab236fe21a239a","sha256":"cd438d01937798b5408d43d40af9498f4a54a687afc17f1e2975a674e068e621","sha512":"820d7ae883f64f91990491fa7b978e3944ccb3d823d17d8a39bb3eb9414ddcd4600f821f1d3d6e66a02ec13c4ed70fd34e335847b28e388d04cc48ca4108dcdb","ssdeep":"3072:d9jvgdbhFOhg2i/VhDSaD8G2fWbciajjhXbNIfS/9/mKTW7z7VhwTl0sn:d9jvobhFOufhHMfWgQg9+KTi5hwTl0sn","tlshash":"05541b95f76ce1be875e58fe79228094d02c6b41b4c89e45c29e2904fa7f385fab047c","size":279830,"data":"","first_seen":"2026-05-01T12:12:38.991629Z","last_seen":"2026-05-01T14:15:21.786597Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/chunk-common.1777364763194.97ace344.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5ed4fc554993c1064f69eb3ffff4a20","sha1":"b552ce3d775d875fe7c9303aaf155d9de22905fd","sha256":"8262db62cc0bf95b3a176206165dae360d6811127fbac7aa04422790974112c2","sha512":"67f9898585d971c0b5e4867cc54daeafb9dc676e01f8c54bf9eb88fce3a53abf1c6ec7e3f3f2a66a96119f958bd13d9f8fa4e5764b211cc2f0dd948556cacb27","ssdeep":"1536:3BBzbgGcdWWa2UTf6oryXHuLmbErF/G7D1dMI5NHnCY7LJkq/voaGAClVbGD3tFZ:3BBfvTf6yjFe9HnCY79Z/voaGAcgD3t","tlshash":"0cf3f8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","size":162627,"data":"","first_seen":"2026-05-01T12:12:39.044379Z","last_seen":"2026-05-01T14:15:21.692615Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/index.1777364763194.e9764755.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c47a7637fe18f7f4238275fbbccf76cd","sha1":"dcd634f895662c19c387dc9667e2e1cd4464390f","sha256":"f7d056978d1c22de4f8649f0faedc0d7ab568b7e4b2e13ed8f6691c1d9dea378","sha512":"26c96dba3b23124bb83d57e4688d156f36559d2f870058dc6dd5781834e0481e9eceb080c7654ab217c2d2215d9184f0eaa32c3f8d2e6029b79bd214fad1e19b","ssdeep":"1536:sVeemPvh/nLa3gWp5ocsySUP73qKlp2TCRnm30PBeZGzRmEYU0oMbP6QZKmlJKDd:Dnh/Lafp5FsyL64M2fB6D8Y8i5HE","tlshash":"09b31bd0b2b4f1f8535f86b7b73220a8512d1a81b0cedca8d6ad2e94be41785fd315d8","size":114375,"data":"","first_seen":"2026-05-01T12:12:39.038556Z","last_seen":"2026-05-01T14:15:21.716284Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KVN8M54JBZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"767c9117d6b8934f8de45b89102813ef","sha1":"a056d1938cf06259e8354ff3cd61e255060c8a1a","sha256":"2541030352a8ce1f69c1730c45746d30ddce0f1795aac43e8f6d0dc752fe040e","sha512":"ff5ef75944cba987fb8ca95888fda568efbd4db4943eef7b4e2e3cf95d0f04a6718293ddc0b8bc9f42e6743b28a5693881713e97a61079dfeac70598fc67f927","ssdeep":"6144:8k9QF9EIHcSxkQDPAFB8OOpMcNAcKdE/khrINVDHQdliP54:tQbHcSyQDKB8OSArZd7","tlshash":"b8a4f8ceb3d674625296f478903f01cba57b28a2b45cc896f189cce02d34a5a5277f7c","size":490129,"data":"","first_seen":"2026-05-01T12:12:38.939875Z","last_seen":"2026-05-01T14:15:21.736497Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d053d2da6a5968d7b648d3f7360092a","sha1":"32ae5713edeb00288a3f8f3c02462a5d0ca9dbb3","sha256":"8896d194e4c39e87f52924073dd2d56b4aaab46fc9f7c56a57534545eef1d7f3","sha512":"01f9b63cd24ab6e0e097637341b78cda657192f98e37a39f0f75548f8fe0180418a86594df76858aee7d514282ac4dfb8263e1729ff325035897b841d09206a3","ssdeep":"","tlshash":"82f0a00e0ee548131963707a4c0f9201203b2513414eea08bffe9bb24f92a688a679cc","size":550,"data":"","first_seen":"2025-03-03T20:54:16.018132Z","last_seen":"2026-05-01T14:24:54.835487Z","times_seen":2528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"25ba01da3f0b1b471747da4637862cd0","sha1":"0c5b0ce449b041467ab3bf825d2cb6c5dc9c8250","sha256":"5f9229d7d1276d1475836391ce453b7432244854be7368ae4c4c590f22789af0","sha512":"58d82418709bd36179a89dd6af167368c35512e8abc68ead43e9be0e5c5fd5027d83289b2ee30e6a211239b4d67790af51039cba61a54b4184e556741437c4a4","ssdeep":"192:K2wqx5Cvtib5XOQRzlaECoXZTAoV51nsPhwzvBa/id3+36a/E/97g6I52MdobsIc:K2VwiYwJvSoVXsp+pa/iZcVk97g6nMu6","tlshash":"8e323b69a5b71bba25673036277f301889b080630319fd947c0ff61e4fa5436629bbe3","size":11906,"data":"","first_seen":"2025-11-05T12:10:48.37972Z","last_seen":"2026-05-01T14:24:54.835974Z","times_seen":1338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/chunk-init-c0d76f48.1777364763194.d07b4d73.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebe7bc5fe49f92ff5b7a91a5546a073a","sha1":"af883e8992b428664436b422435a625e2ddf0ff1","sha256":"2eca852f7358d3815246abcaf6d9bc4805e280dfadc510458b667b4ebddbc5b6","sha512":"5c72b4c2958f0fe87b2cf996aa30b31c26ce9350518aafd4490574dc5c0ac5cc40b1b80c92323ebffdda2b8539ff5b29187c34e380d0332b6822a97aa486c714","ssdeep":"1536:tG5pxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3Ns:Avz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"18f31b987392b1b847dba6e1523b1075b57e1dd73088e8f0c159a6803f31a9cd52afec","size":161198,"data":"","first_seen":"2026-04-08T23:29:41.652682Z","last_seen":"2026-05-01T14:15:21.781383Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba4d957ec99a023d40fedffe8f2c9132","sha1":"32e9e162bad0ea93fde3f137877e95bbbb574327","sha256":"24e8b158f0130e4778f80107b4c038c9edda27db68dd815e66221cc1fb5837b0","sha512":"d0e45e79632f3ec13d043d91c87ef458d1ded7256a3aebe641b09e205ccd00b863424342238a41b73fd7173eaf8a260640fb3110c8a48422ef03050b691d5e2c","ssdeep":"","tlshash":"0311c05a59d18132665b303735bd43887724a013d184df413dcc99557f98da5cabf6c4","size":934,"data":"","first_seen":"2025-09-26T05:04:14.419402Z","last_seen":"2026-05-01T14:24:54.836538Z","times_seen":1485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/theme.config.9d4c256e.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc58af4902232ac7fbf48d96dbc0afb2","sha1":"d56e58af1478ec85a50d3e10d51287ea19ba50e0","sha256":"62652566eeb5adbe5a8fb2aae2403fb966297b2f3d8f54efd5ab8914bf7b400c","sha512":"6a172aff5219a2651c5013bc2da4588f261106fd5c1b0d45dd651c611a51d69a1379b9e40aac9371aa10fb2c6100dab5950db312bac6179557be1956ddb59249","ssdeep":"1536:Z2JREobSmtlIRM4Sb2mcTa2mnzyJog9CcHWhM:cHtlGu1Jnz45Hl","tlshash":"b7a3cd7ee24c963a6177a8bfb46de101c12e9c0c9b1d5fdef13e20a25710669c831de9","size":106392,"data":"","first_seen":"2026-05-01T12:12:38.890894Z","last_seen":"2026-05-01T14:15:21.691666Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-01T15:38:22.188666Z","times_seen":636614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-01T15:36:23.625653Z","times_seen":215212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/35142.1777364763194.2458367c.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2335dddb2acc2d4395505c34d24e7fee","sha1":"06cc51400bcd2b5a200e5b330bf41de6102c8995","sha256":"88d74a619edb5f951f6435fdc637bbd8aec0d0dfe0ec0a4a5e8a522203528dbb","sha512":"4e4b4dc18587ba936391d88edd54693a50c859970c217af560590afab6afa562fb40ce7bbec79f35850b1cab66d885c4a12f268e2aa43e6e449b80dac24eb5ab","ssdeep":"6144:RYhhkpltRf4iyveBHlBfb0wvge7Ancbt82i2UfIL5EoSltLFe/fwwutUcAct37/m:RYhhkplTf4iyv0HlBfb0wvgaAncbt82p","tlshash":"d1743c84b690b17483af86fb721a9194d25e0e9460ccace4f27d6e40bf11746f87b5ec","size":342224,"data":"","first_seen":"2026-05-01T12:12:38.941946Z","last_seen":"2026-05-01T14:15:21.782291Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/home","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-01T15:00:28.107483Z","times_seen":82898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"903f8e527c435e6e0654be60e6525225","sha1":"6f946977b6c062d9cb92af23fc2e869fba22249f","sha256":"5e5c839607a712f272174f8cba4b8e9be8585e07c79cace2bd763ec48c35846b","sha512":"440f57e28c10a324e4e0d4a7bdba5e6556114d94309a83e001817219b6d71a967b2f91373389dff77ca957787ade0c11c2fc12af96cee7655d3ab5039445eb5f","ssdeep":"","tlshash":"b8a002432f098545100128658475b14aa850e565f55d9d5425a4550196707995c57904","size":59,"data":"","first_seen":"2026-05-01T12:14:56.730061Z","last_seen":"2026-05-01T12:14:56.730061Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"love20268.com/ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036fb467600d10b16d76dc640e","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036fb467600d10b16d76dc640e HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://love20268.com\r\nXign: zxcK9wN1S0V/vHfNVl2opmW/eVdS4wO3KKp1F+YdV0pzFKy/znuc/gRNnt9jNXEop1MrfPrBA3vjHRhDIFEaANkMMzQwpT8YpfZtldRIHtpamkdbkH1UyvPmeV+jUcGn4CprZqXbUOMKy2cJFIjPqKipN25+SCd2dOL6ZSScdhk=\r\ntimestamp: 1777637670787\r\nsign: n2p18726m7676m4e\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: EKG6eWdMrjeQtwQ3Db7JbwPMj4aCETDb\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:14:30 GMT\r\nexpires: Fri, 01 May 2026 12:24:30 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1736\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1713,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"54fd5ee00a9affee2b82fb0c9ea8cedf","sha1":"b923178411b77569dea154c68420229b55c3ddf2","sha256":"66d30993f95598618eb3d0632ba27f691f42492952318d64cb3f9205ffb27967","sha512":"16748867792b420bd4130d335261388db6506e8065228c3bd84cd4c95880782d94ec31ba75290d73155103638f57a75ace78d8438fb41eacfd00bd68997aed89","ssdeep":"","tlshash":"a7513a4252afe360d94dc9ae6234c2d4f3421a38a82b9e16d33e96138a0790c02ce4e9","first_seen":"2026-05-01T12:12:38.898601Z","last_seen":"2026-05-01T14:15:21.760126Z","times_seen":3,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/navbar-sub-num4.23a5de74.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/navbar-sub-num4.23a5de74.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: W/\"69f07064-184b\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 177 x 100, 8-bit/color RGB, non-interlaced","md5":"fc52c55f35d3ddcc27b5fd0d62f284e3","sha1":"a9fcaf17a158239367549ded1f01130f3af89de6","sha256":"d8cfe2df2fc27f8fc440f6437b0855638da8d4140464fd543eef7f93ea91f483","sha512":"c2f3384c1a9e13ae70d1e5dd099f06985f3b726b770c982808806429e116eb047cbadeb5134b167c2f544d5d82e3a153649c5c42fb2fb66c594f97cffe30808a","ssdeep":"192:SE7xylIMjtf4N0+YaiZGjBS1/dntr/JQLduerR:SE1gIkf4N09mjI1/5+uerR","tlshash":"dbd18d8bcf4496cc96db20d604f9873716e38d05b6c863253e29cc1f19721797a8d3ca","first_seen":"2025-07-02T09:37:46.20068Z","last_seen":"2026-05-01T14:15:21.766154Z","times_seen":48,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_f43e9d5f-d14a-4ca7-9192-2afd23fb5f75.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_f43e9d5f-d14a-4ca7-9192-2afd23fb5f75.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895feecb9354-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"bc7e0ff3a2bf34b520fdba534b127245\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4%2Fn7V0Bp2dHc6FLU%2Bngw%2FsW5l%2FMbD3k4W5Ddk4P326LBm024BqwZnzoLElNlIj%2B4ZosQdCg%2Brw9a3th0eJ%2B9YGOqUHWMh9kwYYFONWwoVKzjhSWl5v61IheDaQCp3Nqob69v7tO2e8ILPwMRM8qKrk%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 4720\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc7e0ff3a2bf34b520fdba534b127245","sha1":"19418c006c3d37c364b40e80fb7849a582b3ca13","sha256":"401c0c27aaed8df0d1843cbed42886048edfefc19930a1402882206bd909d896","sha512":"a1356e8def0bd5d6dc3230a0856ee8a8f966e24b688405d407c1374e78c8d4942d03643212827f962a0fdd29b1c887d93c0875326e00f11430603562a9bc7726","ssdeep":"96:XiEGVoQvRbJDruVdGbmjqfJZzg7fsRB0Yr9DoXmESN0qg2rOuDL:yPZbpSVd2mh7fsRBLrWX2rhL","tlshash":"79a18d46176f4862cad289290df89cc93cea14da7bcc9d343c693240382d5a8f805fee","first_seen":"2026-05-01T12:12:38.925654Z","last_seen":"2026-05-01T14:15:21.741749Z","times_seen":3,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_c0e159d1-07cb-4b9f-b45a-2335469ac56a.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_c0e159d1-07cb-4b9f-b45a-2335469ac56a.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89600cec4e53-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"51e19824eaeb21d9f287c75a81d72109\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVjSVs2CSBIxpPuK627%2FEezxsCd9mb7C9to0tqMUTjEEMVR%2B2zstwyNHRLchgWVjLhV2AuQRVVOABOcEDQ1w94Xxnt%2BfIgjriVAAvO6gAUzwVcWTCwLCH5n7yPB6Hl5IQQhwn%2B3AMApq5XufNENwpFQ%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 10260\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"51e19824eaeb21d9f287c75a81d72109","sha1":"a482a0af2a931f9f5715fab092f1414006d99664","sha256":"bcc1cc1a2a4f80ad5cb39283629ebbd30d41822a259746d973328fa9333aa1c9","sha512":"c01cb2d28c0a74d8f0598fb75b404c4f723964b7cde279853d20466a25807abc8aa6721395a080bc21a1c2151e50695f7ad28642d4e9c4f23ed5bcb27e0369d6","ssdeep":"192:G5FlbufL2Ugj853ul1eIozD4GVpm50oJPRWX19g6WTaKekuyTl7CDiZvjfjtyejh:4QjKYwxEkG7mOoNRWXJHktYDiZrrph","tlshash":"b922aec3a737ba5f3b902e6c04e602a03f2406afd66b6b028d4d4fce50c8d125595c77","first_seen":"2026-05-01T12:12:39.033799Z","last_seen":"2026-05-01T14:15:21.730543Z","times_seen":3,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/css/93445.1777364763194.4f034e44.css","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /css/93445.1777364763194.4f034e44.css HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: text/css\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: \"69f07064-0\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/float_right_contact.d1892e60.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/float_right_contact.d1892e60.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-2eb9\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 247, 8-bit/color RGBA, non-interlaced","md5":"d19d26603d7bc87f4ba30563933485fa","sha1":"0c7b22b5556d0c46b38beca88746d56328c130a3","sha256":"cb9ffb5ca1354d23da49d7a184c1ad12cce4013edb703bbf7e7c719484e0d82d","sha512":"bc7ac0329ca6b9a9176d9c6eed115de425d6699bb47f1feaf9a9f2560242de728e5b8fec9909b95dec71e7278dde70ae8850ee1d8f8cdb67e693d76a8aed7025","ssdeep":"192:w7Sykkn+HgBtE2HgzFjPOpYHgs6ezXu8g2Vlx+D4H7DUMq7vImLhRr3bgAQkY8eP:ten+4E2HaFjVA9ea8DllH7QNQmtRr3bw","tlshash":"f932bf41fe506a8c5139b5a3fdfc82271e13dc6a0563d0ff9cd9788258b81a0dac99d9","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-05-01T14:15:21.683192Z","times_seen":998,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/rdao-r-1.c2e7696b.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/rdao-r-1.c2e7696b.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-3002\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 57, 8-bit/color RGB, non-interlaced","md5":"e2385d2a0d7c043e90ec1e1e3bf6a1e4","sha1":"1be4ba4215520c1e884c27991984e185e2848283","sha256":"c578480a5ddbede9c417bd3e3a85d752b13d61e4e8127e4d1868b708807b562e","sha512":"cf7a514c39d2512fc3c0f7d84c4af956d1d6927f8411dd37766b7ddceca56beb50fc17b0341d78b442e7eebf12c4137942b08c5265211f865581245f09b39575","ssdeep":"384:l1LjlQQIY0/qcuBkNdOq40XqCLAM8xeYfRk2a26:l1Lj2QM9IkNlXHA1LfG2ad","tlshash":"7442c089a84025e5a20ce2d360e98673dfd6c8c557d1f9be2def04b96b10c7115f41ce","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-05-01T14:15:21.738323Z","times_seen":1016,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_e9c90a00-d7a7-4b12-9cb9-84b7fc583d68.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_e9c90a00-d7a7-4b12-9cb9-84b7fc583d68.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601fd78470-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"bc06593cbad0f48a8d18136522af2d9f\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzMKJVeVgjgxRXY4uTDvHOKqHytV4FeWYDfXuBSsZLlEOglcKAdPhd1eUL5Ocl7rZnzmXadawJKJNNDJXhdA1ngWHTceN70jnopqqixvELmPEJud5gBCGeRtS5werWetO2Kd%2FB8GtrIau0ItToV8qwU%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 12434\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc06593cbad0f48a8d18136522af2d9f","sha1":"db8a06b3e8f8dad5e44a50e99a2ddc6701e8cb1b","sha256":"33f57dce1c87bee624b5a327007985733aed5096dd05cd501b11353cdb2719ba","sha512":"f60904e7ff199d8beb8d9889e7059a92ae4d5c30df2ff5409ea8231468c3486330bb352162553b06b4f45aee2292a57118eede72d328525fc8e414fd00576899","ssdeep":"384:WNnOMs5F29ogYNNwp37L1ZWtP/30qQvaM:WROZF29ogYgpLLf6P/0q4","tlshash":"a542bf644a1822a3d79e5c4c16d90ae0de19b28973e3a877f3597c473389c708a537a9","first_seen":"2026-05-01T12:12:38.902141Z","last_seen":"2026-05-01T14:15:21.778706Z","times_seen":3,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_5838420c-e57e-4b26-9519-0bcaef82747b.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_5838420c-e57e-4b26-9519-0bcaef82747b.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89600f37106d-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"1d7c9d78ac74d646e3202ca81adc4d37\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zrxr86%2FnxE1kP25XLBlu3ZW5HiTRIDV0Apx0qdUQPqUuTz6LayqCDvRDeBTr1Gcx5gbMXaoD8IqC7cmzXYCP42fr%2FAhoKqY4RrknSVPx0Gt3o6LNc8pbwwqiOFi7jsOv1bmjTka0p15ko0OX8Hs3l4%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 14154\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d7c9d78ac74d646e3202ca81adc4d37","sha1":"70b6688a22158774b8793d7a8430aba0fc575821","sha256":"909ceb8c2490afee1a77d26263e49a7448c7ec81aef29a87df3bd18a643f9053","sha512":"f80824bc7a41b6ac08afc07f47687b0dc628819506e6612dfe8fb9ab8e9d4baebc0b66d9b8941cc30da7c13338e2c982ca02b57754e8b0640a03dd5560479349","ssdeep":"192:UnwVc4D31OJse/J57JVHfSBIZBfYspcHnkTROrDBxQvdxBZ/GptSfiEEE2m:UwVtM/b1VaBIrfdsmRORid3opz1Fm","tlshash":"4e52cf2bdf0e814b7074111474dfb1bb3c53ea487265a4e8f75de23ad0aa2369a30386","first_seen":"2026-05-01T12:12:38.904005Z","last_seen":"2026-05-01T14:15:21.755593Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/api/tenant/domain/list","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /api/tenant/domain/list HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nx-request-source: https://love20268.com\r\nXign: nlQRYUUSweQU57+dzqkn2f+ec1Jw8iHJOI5FwMkuXpC5hUAySy1BYs4IpvmBJOz+dfKBApBTV7755foZqkh09MhcGetY97v3FoqHizBBqnv/pkF/oi4p+yVTkJ6ipvHjo5ITfvyeuOoR2SMMWEIvSatBGFFwPC1rDzlLacWwEL8=\r\ntimestamp: 1777637671356\r\nsign: 71n4f1n172o6r54c\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: 7Br3DAD4ejhmQPjmRtjmCw6QDyynszh6\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:14:31 GMT\r\netag: \"1777637670\"\r\nexpires: Fri, 01 May 2026 12:24:31 GMT\r\nlast-modified: Fri, 01 May 2026 12:14:30 GMT\r\npragma: public\r\nserver: openresty\r\nvary: Access-Control-Request-Headers\r\nx-cache: HIT, policy, memory\r\nx-content-type-options: nosniff\r\nx-custom-check: true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1280\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"351a7d04f9cc89846ed392cc689bddfb","sha1":"bc1d1875e8d67ca4a6c7205277049c46b2e865d6","sha256":"024e850359f353bdb31020f1f0705fb29aa52c746c8684afe6656cfc5de46504","sha512":"5780a50371e4723ca3c0d022182cdc5625e6656d25d699fc5044638dec819ca293ff9c759fc9db44e5d11d857f636a66078eba67a96723515e284b9299056476","ssdeep":"","tlshash":"2d31c8640f607f99efa1734a7055a26f968b628a5b6862107c9d454fd7879d800e02b1","first_seen":"2025-10-02T21:55:10.473048Z","last_seen":"2026-05-01T14:15:21.75671Z","times_seen":19,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/45540.1777364763194.c52d0b99.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/45540.1777364763194.c52d0b99.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-37fe6\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229350,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"07ee92181350b39d79f99514ee924d31","sha1":"9ca738df1e046d627dc4c4617c8dac7cddd0c56d","sha256":"0e694a18d938f3b4478c1eac641594aba2da8e3699eb83605010273b95941aab","sha512":"265e3b0814e6b2c74187e59d7b9f6e07168815c1822eec02886fc589a582423bb470bd70657f045f28b6f67258176fc9d473bd89f6218b2fad976692a290fcb8","ssdeep":"6144:1YD4wFsYiSGfKnIKPP6Xm9Gm3MCrn1OSgpozfEe5a:1YD4wFsYiSAKLJ3T25","tlshash":"e524e894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","first_seen":"2026-05-01T12:12:38.951273Z","last_seen":"2026-05-01T14:15:21.701134Z","times_seen":3,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/assets/logo/favicon.ico","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:29.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /assets/logo/favicon.ico HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33236\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: image/x-icon\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"685a5a9f-5c30\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 23600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23600,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"915b77b545b2f06d111b1668dec5b9ec","sha1":"5b64c1aa42b2a5c05a2b2a8e70bb2ea8f7938d9a","sha256":"b8ae08911816fb9ab6348d3ee9b27a7f772ec47e5b6c61440fba815b85779f94","sha512":"2bceabcac70d4394d91c893c872b01fb28136549fc7835d4c6410d63e8f1c97c40531890e67a1f0c0b1a10de7c7310cc6d826fb4cdc164c1649cc406a13d9082","ssdeep":"384:HMjmMW3zlq8Zgh6zLUNI4aqBfQ5EGzUQhkQp8YT6zzwfBGTWg66ekbqHlLSH:h3hq8dHUNxaqRCEFckQjigQj66MlLSH","tlshash":"a0b2e0ba02e92d41de3ebc4ad59c5811f7b15016a46f074e8d8cd94dcd23bac1160fbe","first_seen":"2024-01-06T03:51:32Z","last_seen":"2026-05-01T14:15:21.702023Z","times_seen":409,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/game02.4289a415.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/game02.4289a415.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-7d87\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":32135,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=81, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=271], progressive, precision 8, 270x81, components 3","md5":"3952e090ab928f5bc36747b275645f3c","sha1":"37d155d25da1ece2eaa2adc5de9bccb2a524985b","sha256":"dbddab3a290b16fc7b43e0a1093ffdec6a2ff91c104f9eff21df181a5336118c","sha512":"c7c2c6347376a82289f7ee2d43ad1b18a9284ec4c13ae744ca8be9c07fa67ee545941440fb21ae75f58040e05700bee1ecd1bff02667ffc4a3ad3c3f57cea921","ssdeep":"384:5KYfVPiNKYf6nbhhmNDoOeUk8eGoTmTYxnA0MZdfPDNcSg7TgcV1vYNji3CLexS1:oYPlvbiNVeUHQAcA0WbcSg7Uc8N23w7","tlshash":"c6e2c0311bd3cd2af6e139746a86da5b27046fe4aae316953b0c7441bff23d25d2ca01","first_seen":"2023-05-01T09:33:58Z","last_seen":"2026-05-01T14:15:21.726081Z","times_seen":833,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/rdao-l-2.f6c6cbaf.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/rdao-l-2.f6c6cbaf.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-3323\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 57, 8-bit/color RGB, non-interlaced","md5":"75441b34f2b090890fb8271d36703609","sha1":"9e2ecd7b86efc2ec2dd1a899344d7bb2e0a733f3","sha256":"04fe7cf05d017591f89db653cd7b0326f1c4d81d578529c50791343d460169f1","sha512":"bde07a7d20804ec63358e8d74b22f67b960717a2ca6e2546101a8e4a9079fda080a91be789a8e6b4ffd272acaee87d26e855a2a26fc7cd2f29c4ba2231e948eb","ssdeep":"384:K2anaz0xZ5nPoI0lIQPP1kad9mLZlAmmZ:K2UpngIeD9mz6","tlshash":"3242d047c9d02a873bd89c88d7e7c016ad8208281dfc72105c8ed47f9d121fa9466fe7","first_seen":"2023-05-01T02:34:21Z","last_seen":"2026-05-01T14:15:21.784032Z","times_seen":991,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/rdao-r-3.3d28973d.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/rdao-r-3.3d28973d.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-304f\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 57, 8-bit/color RGB, non-interlaced","md5":"98567b2a6024c4e690574cc2f4d8a91f","sha1":"c75986b57ba3fd98791a1cee632184a2c5a99d0b","sha256":"2eaddbbc263065a1ab9a7f46309cb8a2f39875a06aef11da4409203216c83834","sha512":"2f3e11858c5d9e2bf63fc13c5252afbb20de6c72d87678f95f0575d4a104bb0c95145ace728866afdecae2ab3f804681ead6fe2f30e2306e842cc2ea18e9f0e3","ssdeep":"384:v1f0t2zwaw/ziwfQOk4nI6/jynmn03I/Ynp:v6t2zwv/ziqT1I6rynK03IAp","tlshash":"7242cf49ed343da7d1fdcacc4ca658b092529760c6c2b2b09b8601711cb97fdb284446","first_seen":"2023-05-01T02:34:21Z","last_seen":"2026-05-01T14:15:21.739216Z","times_seen":1012,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202505/_webp_size560x272_fe611308-7a08-4173-aca5-b3a625d7e892.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202505/_webp_size560x272_fe611308-7a08-4173-aca5-b3a625d7e892.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895ffc450eb8-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"418a78c3ab6c31412451ed0df2862291\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SmMn13ydKf3IWrFZG%2FmWngPNp4QeArBs4nmlO2NUkfc7Dtg3krCGTNkJR0MaocnNlMPq1q8YXIAOdCk8yP0FRFyOPBaCXkcYOgSgXbAHHssUBUvP8l1nF6OTl6cZlAo5USL%2F7Moy5w8WO16BDDYdqqo%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 10186\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":10186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"418a78c3ab6c31412451ed0df2862291","sha1":"c2eb2f22032516330743d9d8ce804822cdb2a5f3","sha256":"23542f50007e73c13de2ed02aa4f1e73f6c3f684a3322dc42bc341474404074e","sha512":"5db0ef35d5ff6d4f86d986b8dc37f4326582ab5f71f05130f94e88cdd7ce8b6900f1b8c28d0561fe4450cd47f8619cbcbe9ad02c9cc8b3f46ed70e00f5076f98","ssdeep":"192:Zc89O6xqSEDFU+jBVcPzOwVbaSFV4sAU1MX842kkvXfi4+f1UZDZ8R:trkf3SzOwZl3W89fBi1uqR","tlshash":"1e22c0af5201292f42d3100e363eedfcb9b89724c46ed64c4e54ae75789cabd4572108","first_seen":"2026-05-01T12:12:38.900308Z","last_seen":"2026-05-01T14:15:21.719927Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/home.1777364763194.5393ab06.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:29.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/home.1777364763194.5393ab06.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:31 GMT\r\netag: W/\"69f07064-86a8\"\r\nlast-modified: Fri, 01 May 2026 03:00:30 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34472,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33744), with no line terminators","md5":"bf6ee8ad595cabea1ac4ecc6104dc84e","sha1":"8c22ac39d91ad5259f4ee236839744d12f8e396c","sha256":"07f0480d826757b11832f6a3cf7b67ecfc1575be7548f07ce5d107efcf77cb7a","sha512":"8c5bcedfa11baa4ec20fd69ed3402c9b849487dc473a1ce8e6071bf3cabeee043e1e9268b789425e2ef011a74a0562e60b78faee4ccc697c2220b52cbab7e5d4","ssdeep":"768:72tnjyU2gJVsP+wSCx46Bj8lJaptxfsDLVfuO2KSIMcK1jaJ7wBqBJJLhQXq9G+/:U7sNoLDSIMcrmSJtxJjdd","tlshash":"c3f2f884efb4e7f8239fca9b8e319070652527c1e0ccb8a461ed5f187d1a396b4745a8","first_seen":"2026-05-01T12:12:38.907512Z","last_seen":"2026-05-01T14:15:21.765147Z","times_seen":3,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/css/index.1777364763194.9144f5d4.css","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /css/index.1777364763194.9144f5d4.css HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-4484\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 3842\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17540,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17540), with no line terminators","md5":"4352376f25178ed5b73d118732e6eb5a","sha1":"172460475b6886483e8a795cf7131634a94bc05e","sha256":"34509b8d86f82abb501fc82cac18266b5e26d902112e8d1c28d509982597008b","sha512":"e8c95dfe0eb3a2aa2595e3d407415c1886e861d6f652420730956f36492a22d48fe409e4ab536621ba0bce64edeb032436453add473cfc4e028a91aead998f2c","ssdeep":"192:zx2+xETM2gbXIJSse7U0SNWqsCnyTKhri6XU0+OZ7gFyOyUTf:zx2+tXkSse7U0SNWqQM40+O6+I","tlshash":"6072a6f6d1ac2b1b1037a6e6e4a0be6fb004fa15c35b9629fb50331f948e1653776e04","first_seen":"2026-05-01T12:12:38.937924Z","last_seen":"2026-05-01T14:15:21.764323Z","times_seen":3,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/config/telegram.js?t=1777637668078","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /config/telegram.js?t=1777637668078 HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 12:14:28 GMT\r\netag: W/\"69f07064-1c896\"\r\nlast-modified: Tue, 28 Apr 2026 08:31:32 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":116886,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (483)","md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-05-01T14:24:54.820072Z","times_seen":739,"resource_available":true,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/game03.212a12ef.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/game03.212a12ef.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-2e92\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11922,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 270x81, components 3","md5":"ed93aae29ca896964a86103b00f80f99","sha1":"1880c553dc77b4effbb5d28ad72f93de1e550ec5","sha256":"496f6b90ab41e0578054f60089032a0483247165dce969a83d70f4842496608a","sha512":"56022639c38cbbc845532acac2823030a6cce2a695bd71e02a5837606f17d57ae8d46115685ee58d6bbc3bf6a43f135ae070ff5a52a2f987841e71cf51a9bca8","ssdeep":"192:T7Ndn0K94kf1t4CtyzwAShdHq7+dLbibguo/iD3pbKNRdpM2+MnGXVOClqll6alI:Tr1Nt4+yEA2Hqu8oKVbKNRd5Gltr","tlshash":"9a32b0f9ee434950f986d1f243789257a1fd648d86d7cc8b2502119bcce9b73ac1eb28","first_seen":"2023-05-01T09:33:58Z","last_seen":"2026-05-01T14:15:21.671903Z","times_seen":845,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/headBg.651b289c.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/headBg.651b289c.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://love20268.com/css/index.1777364763194.9144f5d4.css\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-41e\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 735\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 71, 8-bit/color RGB, non-interlaced","md5":"13883708bec58e1254852538c6810346","sha1":"def9734e406983cb308ef8d7d9d9a1ffc46f7842","sha256":"b95a9884cd835eef433ae2e391587f9c7237e4b5658acafa8d07fc482a82a945","sha512":"27832f79f72ea519d441c1465c2c7ee3a410c933cef0410b538bda0c70a490706d057175aeacc814cb30ff9f9a1b32e7c8fe16f7135f08f6d232e9eb73edcc6d","ssdeep":"","tlshash":"3f11358dee112c00d74decd210ef41238e160590c790ed25b9cbd86759616fe8c6d5e7","first_seen":"2025-07-02T09:37:46.18828Z","last_seen":"2026-05-01T14:15:21.727031Z","times_seen":48,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_345449e0-879b-400c-80b1-d69e8404edbb.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_345449e0-879b-400c-80b1-d69e8404edbb.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895fee3f9b41-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"e1300bf5b1ab3923f9731cb52081dfa5\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yYsCklhHPBAeBuZJIZ6hTL8O02hURMoLHZZZt00Ev7c8PQJKtg%2FbNWR4FAWo6e4LBgvr7mbv3QyMd%2F7%2BmbtTyb0VVm%2F4g4Hrd8eg%2F95gOkIeSv2hQA3VPFPx37qv70tzHuxjoTdKxNZYT1ts6Db0qDc%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 5696\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":5696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1300bf5b1ab3923f9731cb52081dfa5","sha1":"c48ec99589271e60954063514c6910c45984a88e","sha256":"4bdf056be6f1520b23902d5c4ce75f84c76570738166ea5898916f9012797654","sha512":"bf1f763914cc063d132082f1443274af7f2f02b9df561a91ec63fcd84a1710ba50c8c930210a98e93e35988244469d2ce74bec4fbf05572920ef4f2e9d49c76a","ssdeep":"96:W+1IcjHAqzsy9xTis6G6OT7iPIi+mNm8ZywYsho3jbEgmEfzTd:3Fzxx6JC7iPION7Z9YbbCEfl","tlshash":"dcc18e94a41b233ab1cf02a1b5c92289c4acc70cc573cf1195bfecc5710e8a8a2e4b96","first_seen":"2026-05-01T12:12:38.928471Z","last_seen":"2026-05-01T14:15:21.707387Z","times_seen":3,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_456e995d-4bd1-4391-a03b-9f19800bf019.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_456e995d-4bd1-4391-a03b-9f19800bf019.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89600c5b08dd-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"fd403071fafb0d14a4b3923d38a89c59\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUa3UEKN8CMqDHytl2toMtSC1GqK8RgYvESG4yZWs05zkEdNym1YPyAR%2F8dAd9BVWD4s57UyLoQYHKE9chJV%2FC1TDkN%2B1QUYCsQMvMgs66XsreB%2FtNxPLy3eNTfvlW1Xz2vgyW2E%2FWngqitThafLoE0%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 6640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6640,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fd403071fafb0d14a4b3923d38a89c59","sha1":"cf80518b61109d41705db6f699fb1e7aa5961894","sha256":"7729b3959548a60970148d723010259d5775237ca723d3c237f153855499c7e7","sha512":"4d0849f47497e23b8051da4eaf664fad1202edd1b624c21fc3788dc6ca462b8b43803ea8eadbe3b5e452a7d6d2ea209ba03f249be1abcea020f0315874c79bd1","ssdeep":"192:cqV23rVntDm4kc3yJSuqbJTeQHmR6JkxEV:cFHD3kc3ysRTeYm0JkOV","tlshash":"7fd1adc7c74299ffeaaa70bca756a3c6ebcc458b0d4b1c74d60b080bc40fa5c425a09d","first_seen":"2026-05-01T12:12:38.875789Z","last_seen":"2026-05-01T14:15:21.688772Z","times_seen":3,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_bf3720f5-c0e2-4a93-9934-48f531410de4.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_bf3720f5-c0e2-4a93-9934-48f531410de4.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89600a11856a-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"abe18df3152fbd4c23babb2ff407d033\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kKwDPrtiYLdA82X%2FR4o3xmY%2BKblXyKZwaKWmK1DnnLUultOcE82suc58KHMVce%2F36JbVyMe34KO%2F75cje%2Fxt3tR6KHrrwx5c6gV4vhhcHzoImNAVB5TyafSuOd3eDayiPAgIpKj1ejJcQvkUYwSoziU%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 8722\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":8722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"abe18df3152fbd4c23babb2ff407d033","sha1":"5e80f0a815c5eda8d3718ff92e5411ad45d16f70","sha256":"bb7f366f458aaf7a97e6025c5262463928fcb24f708e9bf687f994240ec0667e","sha512":"8b93a124aed086d6d989d27312cd30137bfc9e6a5078a671ad22c9707086e84f4ed11c50c41590ca006539e380fdfd30be7d4b05eebac786b6bde9da85137632","ssdeep":"192:zunPerua/F5AZgJ3I+G+UTxkPU0eoXBg+JiypjQSPYf+br:iPerr52+UTFqBjiypjQgG+br","tlshash":"7602cf57e61ab6c0c1c62307b593a21d34e7f707d6202c92274a8da9a84cf9952fb8c3","first_seen":"2026-05-01T12:12:38.970526Z","last_seen":"2026-05-01T14:15:21.698425Z","times_seen":3,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/css/home.1777364763194.75c0cb4c.css","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:29.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /css/home.1777364763194.75c0cb4c.css HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 01 May 2026 03:00:31 GMT\r\netag: W/\"69f07064-3cb6\"\r\nlast-modified: Fri, 01 May 2026 03:00:30 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 3449\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":15542,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15542), with no line terminators","md5":"950a9c0dd58f219b29c50af62f943cce","sha1":"7332342b241e5a29d405c555fdf87ad05c2712b1","sha256":"7c7ee99cee2685020b024ae53fa0543a8a4908f458e5eca2cc190dfc788fbd40","sha512":"34c32b233bf152e30d7b398cdebf778b41cf1f68914afb0221f425352af56813c2f26df86e1732c706b77d77614a9b04bced23fe7bd7c4475e2f966f3074cc84","ssdeep":"192:VWwQ64cTdZ7gFy12OkZfhfDsedOJ9YE/V9Vu3/JU7MN3a:U9md6k2Owfhftl4V9VINq","tlshash":"1f62655893402417a6278e376ab06bf5f074d882c3a3ca7e65c0bd55c2b74eb177b368","first_seen":"2026-05-01T12:12:38.905697Z","last_seen":"2026-05-01T14:15:21.751453Z","times_seen":3,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_8ca27ab5-49c0-4b05-9a07-454e2ddbc879.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_8ca27ab5-49c0-4b05-9a07-454e2ddbc879.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895ff858219a-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"704fa952fd359187456689a356f7c1a4\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHUYlHxeaBhscSXGwvmcL10qDo8b8sZ2ipV%2BMXcI%2FiAZqoXJbtsGcRZcyvKlZIGSmIN52TTyP%2F%2FiHUr3f17YsEiNu0Ni3sEfaUmJs8bZDHqhDa5s%2B1%2BasFmoGTtiFFG8MpE3MBK0RcIQd8mfNE2NtYY%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 4056\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4056,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"704fa952fd359187456689a356f7c1a4","sha1":"e61c3239c29366f93ec0666fba1771c90a05a2f8","sha256":"8fca8c13e0f2cef1f4849baea6f23a5cb7227526e5dd573f650eaac9f85b5ad5","sha512":"d5d0ddc1144142b2e68a3a989ae603eb8b91479d48614beea2477f1125cdff05533daaeaf46be5b396409c75d62e864cd0b3bacc3e32960528c3054bcbf77fe3","ssdeep":"","tlshash":"12815c33f4dda53a6e19fc5a5a3f898ba5586bacb1256fcb1f5304028104160b8a0acf","first_seen":"2026-05-01T12:12:38.968049Z","last_seen":"2026-05-01T14:15:21.747858Z","times_seen":3,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_ddf5c6f9-cf40-4473-9593-419ff7d7de4c.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_ddf5c6f9-cf40-4473-9593-419ff7d7de4c.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89600fc1dda1-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"c843f3f040ec4aa077da4eeb9dfe6b63\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LHdFcKO3fGmffmgTYkU9mP84cbFXa%2B9TKSxxe99TGcvPP%2FrjuRGNprh55l4r%2Fo7TPcgqvuuB5wLqgSRZ5wx3WXHfrNuP3DWp9OrpTldb5XvlZ%2BAkP99SCEPQ6gbvUgHubR4%2FoNLvMOpPwjnZpPTTSL8%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 8582\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8582,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c843f3f040ec4aa077da4eeb9dfe6b63","sha1":"db6102662e6690a36c0ad217dbbf753f6bb1fcd5","sha256":"0d771f479200705618670f56298ee513d34a25f5e385227ccda33024f26504ce","sha512":"fc4518d077a7d0a92ae2c99fe6913b92043a1dad70dec4ddcbc768cb3e7232f6b410d0198f27cc603c34823a74410b9cb81b8c47ec3ca9a7b2527ff02510ddda","ssdeep":"192:37OoMMGSeg0Cy9CFlVhh3yU+6toUwe6+M87F2b6W06T9a3/K:37Oo4uQc/hnubwf7S","tlshash":"2902bf38506db16790692a7ed351be4b8c89a833291123810e4342fb116d2ddbf7b61c","first_seen":"2026-05-01T12:12:39.004448Z","last_seen":"2026-05-01T14:15:21.771828Z","times_seen":3,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_65acee64-6242-40cf-977e-560e3ac00224.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_65acee64-6242-40cf-977e-560e3ac00224.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601ac1109e-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"3b535c048c3d8444c18918047943eed0\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJ5%2BLF5MJ%2F1y%2BiuYg5AIFzpz6nX%2FF%2FG5aLn3O9PG3IE6hpsgLRl%2BxNLKecRNtjgJaK5xaPj%2Fg9zNkPa7%2F1qi3oAgd7eLDSMU%2F%2F56wN8aeB%2BXsZmOV3KigyZo1pJNn2dd6HFGTHzJhW5ZJ%2BWw9bRijJI%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 7156\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b535c048c3d8444c18918047943eed0","sha1":"66f4a097dc7b1b36f6b84b92fb2276dba70748b8","sha256":"9247c49afdb1ba1b45179e529a8366d3a757bf73786cb9752b870a86725309f0","sha512":"e087a348633ce179b7d5c8e990baeb9ba8dbd094c6c27a3429cac8fe56018d0eec61b95d3d4c875a42c98a96c7f6bb77f707eef1466cf9f2acaf09af8c7a208c","ssdeep":"192:cSWdU+S0oguns0Bmb7ehQFW3yrawXMcSNpedBmWW:XWO+S0W3BmmhGFrawXT8iBvW","tlshash":"7ee18ec11141b6fae2c75378c14c89900a7afcc8a5859ab7487f3dae16142a649dbd5c","first_seen":"2026-05-01T12:12:38.914936Z","last_seen":"2026-05-01T14:15:21.734031Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202501/_webp_size750x264_457f4394-73ab-47fa-9d93-7da9d90647fd.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202501/_webp_size750x264_457f4394-73ab-47fa-9d93-7da9d90647fd.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895f8ee3106d-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"076db3df7ea0838591c9e0bed5c02512\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zt2ucYuQlXRESUk5%2BjrNzbQotheorRtxX0mH5JoRJxsKu0fSneehLQXn6ocndpERh1TY38dd4Yu5ba6Y3BGijFV9XDtA4yS09DWhQSIIYDLBX0fY9fLBD%2BgfGyPwkeV4HxYkZ23Lk4jFwvm%2FzWN1siI%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 21542\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":21542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x264, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"076db3df7ea0838591c9e0bed5c02512","sha1":"19685b8f0dc122eade417900613dbc162fa3c6d5","sha256":"ba88a58bc9bcb11f02fcaebea3d205106237f4c0098fb074bdc3b0adb57f5ea1","sha512":"ae785bb919ccc8cd8ce703d1da1a0d60183e2b933a0338b7b437e64d2630f3de31a27d769365d1b0032fcdf5f24e4241cba96829ac2bde3be052fcace8265192","ssdeep":"384:4k0dL6/R+Bx1bnO9OfJFGJLLkOKnfbZVikqJDeMoR/eiineQ2c:B0F6/R+P5mCWQZV0JDLSnQ2c","tlshash":"09a2e067840687a36a971233f43262750dbdd12ede68c39b399bb2865c7101fc2bd483","first_seen":"2026-05-01T12:12:38.926969Z","last_seen":"2026-05-01T14:15:21.761765Z","times_seen":3,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gp180/_webp_size936x214_119e7061-da4f-4271-84cc-6386c342e54b.jpg","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gp180/_webp_size936x214_119e7061-da4f-4271-84cc-6386c342e54b.jpg HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895f89758b92-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"b36ff620e79e991a0cb158b25abd5456\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xzLkPM3udosTJ57bb2bPoUpCX2r12tbJDTbbCLtPoxlc3QnxNfl1%2FVsrqQlz2Omuh9ZL5M88K%2F5BqcuLJhbcm6ctM%2BjhY%2FdrVc4SqR7oV0vdRywddIq6WU6TNlup%2F%2BYcNd54wDlchN13WDliPqRHunU%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 19240\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":19240,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 936x214, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b36ff620e79e991a0cb158b25abd5456","sha1":"d55dea16122f6f8dbcf1271aafc8360f68b6e4f3","sha256":"346e49be19a7d4dcd52e5828e426a2910e680b628a381eb073114a243e2ac66d","sha512":"dfeeffd1ac53bd510fe86841af067fb3116e44111a6c59136cb63e70d9cad3a586b5905e289a879656829ca6359a4003de42e2e95bc391d24af0eeddcf886b36","ssdeep":"384:acG1wbQAJun+zT2rojNUSoL4x3BFJt/cgDNLusavDRtHzsFIsdFkso+Yxwo1:aOs1nyT2rojOPsxRFj/r6sI/HzsFdr+b","tlshash":"4e82d04f8be2f36ec895e58e616c14b11b8349ab29eda316f74c3457f14924483dd335","first_seen":"2026-05-01T12:12:38.878241Z","last_seen":"2026-05-01T14:15:21.734861Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/api/tenant/domain/list","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /api/tenant/domain/list HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nx-request-source: https://love20268.com\r\nXign: JjRiBMcWNBgFS+vx2CDpHBpYGUtju343owQUCjTNF/ayqWpGgQKwaFzB3Zq48hf6tP9ascvJHQSL591HkkYFlId3ZoZcLvTIOaLKuv0jVL2LiewcbnKDIf4qyB3X3OHmJJsLKSb0Yle52D4uMgrgf6T4LMgzpIQFwyB32KWLwaQ=\r\ntimestamp: 1777637671325\r\nsign: 3o6v3c2d6o346p47\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: 7Br3DAD4ejhmQPjmRtjmCw6QDyynszh6\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:14:31 GMT\r\nexpires: Fri, 01 May 2026 12:24:31 GMT\r\npragma: public\r\nserver: openresty\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1280\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"351a7d04f9cc89846ed392cc689bddfb","sha1":"bc1d1875e8d67ca4a6c7205277049c46b2e865d6","sha256":"024e850359f353bdb31020f1f0705fb29aa52c746c8684afe6656cfc5de46504","sha512":"5780a50371e4723ca3c0d022182cdc5625e6656d25d699fc5044638dec819ca293ff9c759fc9db44e5d11d857f636a66078eba67a96723515e284b9299056476","ssdeep":"","tlshash":"2d31c8640f607f99efa1734a7055a26f968b628a5b6862107c9d454fd7879d800e02b1","first_seen":"2025-10-02T21:55:10.473048Z","last_seen":"2026-05-01T14:15:21.75671Z","times_seen":19,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/chunk-init-c0d76f48.1777364763194.d07b4d73.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/chunk-init-c0d76f48.1777364763194.d07b4d73.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-275ae\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"ebe7bc5fe49f92ff5b7a91a5546a073a","sha1":"af883e8992b428664436b422435a625e2ddf0ff1","sha256":"2eca852f7358d3815246abcaf6d9bc4805e280dfadc510458b667b4ebddbc5b6","sha512":"5c72b4c2958f0fe87b2cf996aa30b31c26ce9350518aafd4490574dc5c0ac5cc40b1b80c92323ebffdda2b8539ff5b29187c34e380d0332b6822a97aa486c714","ssdeep":"1536:tG5pxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3Ns:Avz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"18f31b987392b1b847dba6e1523b1075b57e1dd73088e8f0c159a6803f31a9cd52afec","first_seen":"2026-04-08T23:29:41.652682Z","last_seen":"2026-05-01T14:15:21.781383Z","times_seen":9,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/12048.1777364763194.f8bef623.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/12048.1777364763194.f8bef623.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-417fb\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":268283,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"405515e348f88271ddab62bddb3181a1","sha1":"bd594f29b11e6012d55f3b43b9dce0309ee9c3c6","sha256":"caa8d19fc59d89f6d56d50abf191853357be63dfe60090c0b5b1a3ad79889ec2","sha512":"d7a316789a95aefaeec62a24cbef7244e0a91625a88c95ec37858cfdb7538a51d02ba2e5feca3bc2e5f523cb5c14da28ab629086e4bd87555083c7ee7f22fe16","ssdeep":"6144:n/zKTUAavC0Jjytg7DiQPkcsz1WHSouVHrqML:/WcjytgPJPcVHrxL","tlshash":"8e441b84b291f0b4879b42f7a22b4055b17e49a030ccacb4e265ed90be7555c927fbfc","first_seen":"2026-05-01T12:12:38.881207Z","last_seen":"2026-05-01T14:15:21.742602Z","times_seen":3,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":911,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/41269.1777364763194.4d438e50.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/41269.1777364763194.4d438e50.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-1d484\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":119940,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b1ad141cde778293623f6fd66005f3a2","sha1":"1c0f04924c9d60598de5795f2f8862eeb837745a","sha256":"4c7821310dce05e151e2fd43e2db22b62e6fa80d592151d2fcdf8112ab8ffb8b","sha512":"0c9a6f0cb2a84f7ba3ff021c311e0318ff45506d88aa5e77d896c92c8ecfa3be6f25e89a3a947809598f0bd36f87742e658f6d67ffa389f6bad394fe6af665c0","ssdeep":"3072:pF+7tB4Vgj5tNlxyUrwOWoYE6fDxCiuUlL5XE4roBlmomj24sp7pms:X+7tBwgttXxyUrwOWxEMDxCiuwL5XE4g","tlshash":"c2c339d4f290b1f547ab46f2b13744a5727e0c82314898b0f15aea557f3268cc6ebadc","first_seen":"2026-05-01T12:12:39.057703Z","last_seen":"2026-05-01T14:15:21.695645Z","times_seen":3,"resource_available":true,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/78817.1777364763194.41fe8f56.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/78817.1777364763194.41fe8f56.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-44516\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":279830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64598), with no line terminators","md5":"542c436aa2d050dc613ff09ba55fd451","sha1":"b6b6d1cbe39865e413804831b5a5b8c57b90b2dc","sha256":"b5acb30167e46214c3a66838d4eb0e7645aa08a235191e9b8a3b67fea5f07834","sha512":"889d3603853f8382966d77672d2c10f81327e88b2df82991e9141a0a02b5eaa880fe795b0d98c9350e2ff9fc9e9bfa85740c577ab3ec8814d1c709fd4102f5c1","ssdeep":"3072:d9jvgdbhFOhg2i/VhDSaD8G2fWbcia8jhXoticVr9ZmKTW7z7VhwTl0sn:d9jvobhFOufhHMfW/S59cKTi5hwTl0sn","tlshash":"a6541b95f76ce2bd875e54fe79228094d02c6b41b4c89e49c39e2904fa7f784eab047c","first_seen":"2026-05-01T12:14:56.571201Z","last_seen":"2026-05-01T12:14:56.571201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8 HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://love20268.com\r\nXign: BCtrWBr7XvdDiI+A9njoYMsML6ShPRfRSefriSQogM/XBmuecUynuqyPVRdpVy5GEVfsBB8GgkQR1Qv0+jegwYnBnIEADZ31GRstEq19v8TYrRWNtHodMJwzFfbdTjyCBFJrrKFpciG2FBXW7UYeWZKaRPsS4a+N/TAWCf0rItE=\r\ntimestamp: 1777637670788\r\nsign: 0552o5e705o2p57o\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: YsyrwWdTAfFsRfE7wTrdmJiSA2yWJyXA\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=180, s-maxage=180, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:14:30 GMT\r\nexpires: Fri, 01 May 2026 12:17:30 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 83\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":60,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"aa1fe36cc499baa3fbdc7ab9bda7432f","sha1":"201b0fc1c4c699f3538c8e3992ec08ecd2f3acb3","sha256":"d509d9e26b3c3a371856286d14bcdd4f17125a10d8ee40e119fdecaf964fb478","sha512":"2dff3b34740cc9d3690f596673675516493472f5ad4bbd3536b5b1b18922543771be73e01051874bc7039aef9461cedb841f0cbe4945118bdea5773a4b3f7a55","ssdeep":"","tlshash":"03b012a2d5a309ed9644713104305c414be022ccc9bcf858c7bc4d2b45650210494105","first_seen":"2025-08-09T20:01:46.169117Z","last_seen":"2026-05-01T14:24:54.634521Z","times_seen":1437,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/rdaobg.93df9aaf.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/rdaobg.93df9aaf.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://love20268.com/css/index.1777364763194.9144f5d4.css\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-5a0c\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":23052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 369, 8-bit/color RGBA, interlaced","md5":"f27cb3aa610d5d073308ee4066a3a726","sha1":"62504a85e14b7ec505899645378a9abf9f3f6954","sha256":"0e2e11002eb67d3b6eec134eecfec90b787ed55a128b7e5adc159da22b2a252f","sha512":"4ccb5a2f86f6a3781cac1e95ce28ec81329252fa68bbce582f5e7271734105e661f8c7fc0907559dcac15d10b9e6f7be413f0df1592407b18db554513a790c4c","ssdeep":"384:SensccjIl2Dy3KgEX2JAMQA9hKF3DhJjdW3qtTHzumv//4wVuyx2/M8o8jhuJpp:viIl2DyagECAAhwTjjnVjvI22k89Ypp","tlshash":"e7a2d01ce8432a5e6c5b63291fbd04230e678161f829eb4769dfb0566cab8fe443d087","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-05-01T14:15:21.74008Z","times_seen":997,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117 HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://love20268.com\r\nXign: TelCoqzDEu8Jsl/5fN50gpHQi/NUUWy4SdsGeLwn804gBzcmmHI6mQSyGSwF9bwFGC2xVSOrMEBAr4lm/2LU3MtIE8IP4Qnnkb+jcH57fL7/77NWrI6tGtIMLz4Y/tQEhZB7kfL7uRN0m7NpamQ+bz53UIeJlHZt1ZVtkfoWe0Y=\r\ntimestamp: 1777637670788\r\nsign: 7m5b655p184i7b5a\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: NtMnrfzyGa28TCWPK57MT4p8CRm2ReCS\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:14:30 GMT\r\nexpires: Fri, 01 May 2026 12:24:30 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2227\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2204,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"b01fc7fda4a1e5628977d4e833f5de0b","sha1":"5b2a582610ccf9bcb573fe08de9eca376262338b","sha256":"9625945e7fcdae025aca4d9b58a15cfb73418d3b184621648f38dd12e8e4309c","sha512":"aa16ad96c677ba96a591350598a410b47f22788aee1f8a5fbbcd31d96c4265cfef4bcd40a14b175afcf467d316b5e7e6f691ce701153442f3addcccbecb3201b","ssdeep":"","tlshash":"1c614d559ec16fe52cd684b9d123261c19c47fe6ac3b6855d160ed213fcb84b117e282","first_seen":"2026-05-01T12:12:38.860099Z","last_seen":"2026-05-01T14:15:21.705672Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202410/_webp_size280x150_3a46df49-75f1-4a76-815d-8d122b35671a.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202410/_webp_size280x150_3a46df49-75f1-4a76-815d-8d122b35671a.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33237\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895feb2bb1bf-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"5f409fa170528933cf88b8003f39f2b4\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Y9B25FIK5EJoYuqEPBsoLR0UFTAfh8flzblhXikFRr3eMRVJzAFFl7QPEDAGfWANQ9SWz4PXNHK9nicXjEkY0b0%2Fj8pClTh6SDGf3FMaRJU4w%2BG32twM6SaYjffIBiBDiVJzphWyFP81KAbs5fXqH8%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 6840\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":6840,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f409fa170528933cf88b8003f39f2b4","sha1":"8d87a78d34ba2dbc4c95872b4534968d9db94c3e","sha256":"89346658f277a7207f64577e16ec60a4aec80ef4665bbcfd80a6987f3aa784c7","sha512":"b508439e48d1bfc59f217174e617827fb7d49ca1a81892697d08fba77ef558469d745cb56a3d1e9f1e88f0877c887ea9d3a28d563d88ca0e54b04ca1d622d691","ssdeep":"192:8+et+wfs5g4L5e+RowLorHv4A8CF09zFTSRmM:r5g4L57LorHgA8Tfom","tlshash":"15e1ae718dad9476e76221e112f138cfcf79b7ba310023918428e38d4e7441fe2b497a","first_seen":"2026-05-01T12:12:38.911793Z","last_seen":"2026-05-01T14:15:21.728809Z","times_seen":3,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/ecb/8f8306425eba6e0167bcdb25a31b67ec8f","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /ecb/8f8306425eba6e0167bcdb25a31b67ec8f HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://love20268.com\r\nXign: j8AJg3ZEyeei+g9ECkv+UL1f3QSgtwRaiLli8/lC2jKJcNgcSd+iYATKlLCVfM5+6DOkagns3+BETvUh018CJQtDT8z/2d5PijOMDbwS+Bmwu/HMODGDkA+wYgaJ1dXsZgnNx/daCGx4Azrzf3AnRhw3AvAgp99PsCr/vvpOrxs=\r\ntimestamp: 1777637670787\r\nsign: 5i4h6q7n635p245o\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: GJAtPPcy6fKkNZtCHYe4NdNMDKB7hpsJ\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=180, s-maxage=180, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:14:30 GMT\r\nexpires: Fri, 01 May 2026 12:17:30 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 3204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3181,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"2c062e160a876d2552450784ba0140ea","sha1":"094974d790ae44c17de67facb1383d44ec467f2a","sha256":"27c47a7470df18d32338b87c5282f4cb462f89e56a7b86cf6e37f940c3171865","sha512":"1ca53ef91086400e419899cff6b5460fb7874e273ca32ec4739f8a1b6f0f9ef9288ef1ef5ec0da3b72d17b1b528217580356b6e2b652abfd7f8ccab04b977edb","ssdeep":"96:eOGS7hqEAyTEuYFzYRmvqvkr1O3sQ80Lnl+GcFkyryS:VP75bdevzQTjE53","tlshash":"29a15d7931a7bf21e3a263c17d75efc457600b26e7c1aea5e7224f6618e009812bcc53","first_seen":"2026-05-01T12:12:39.065947Z","last_seen":"2026-05-01T14:15:21.746238Z","times_seen":3,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/theme.config.9d4c256e.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /theme.config.9d4c256e.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-19f98\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38284)","md5":"bc58af4902232ac7fbf48d96dbc0afb2","sha1":"d56e58af1478ec85a50d3e10d51287ea19ba50e0","sha256":"62652566eeb5adbe5a8fb2aae2403fb966297b2f3d8f54efd5ab8914bf7b400c","sha512":"6a172aff5219a2651c5013bc2da4588f261106fd5c1b0d45dd651c611a51d69a1379b9e40aac9371aa10fb2c6100dab5950db312bac6179557be1956ddb59249","ssdeep":"1536:Z2JREobSmtlIRM4Sb2mcTa2mnzyJog9CcHWhM:cHtlGu1Jnz45Hl","tlshash":"b7a3cd7ee24c963a6177a8bfb46de101c12e9c0c9b1d5fdef13e20a25710669c831de9","first_seen":"2026-05-01T12:12:38.890894Z","last_seen":"2026-05-01T14:15:21.691666Z","times_seen":3,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/float_left_contact.5e628ff1.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/float_left_contact.5e628ff1.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-36c1\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 247, 8-bit/color RGBA, non-interlaced","md5":"a9bc5bbecc55ef7980fc3cfd6c338657","sha1":"7bddde2e742e74809dd2462c9e12f5748f4f22e6","sha256":"968753c19b6dcbfd000fdfc85ab7a54aea63164a51f993583683e7eb6ec7a82b","sha512":"5324d145a2752472d573a19c8cd782c7d244960d9518487529d4dcdeff529c116119b16a157619068db7dc58161ef1b241eaf807a86096ff90ac4b21b5c27b0d","ssdeep":"384:PyWmtgcnRztiuKECOBRA6P+0dY4D0YS6eNE06PX0nIvq:PyNgcn7K1iRrdHveNMEIi","tlshash":"d252e18defc1f54ac2e8ceaf5ef330114181309562f6b66098e2114bc098acb46ed5cb","first_seen":"2023-05-01T02:34:21Z","last_seen":"2026-05-01T14:15:21.677192Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/mainBg.3b0d4da5.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/mainBg.3b0d4da5.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://love20268.com/css/home.1777364763194.75c0cb4c.css\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-7d5\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 1599\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 483, 8-bit/color RGB, non-interlaced","md5":"bde4515d6390dcce798f416e612f8b47","sha1":"2fa1b948927eb9b33a10d7e51b7c225ba8a85527","sha256":"b0b0a4ce240c9b223827c52070600a30b5f56cb8360f7bf94210169a5e1fbe78","sha512":"09aaedfb478a46aaf46c420e224b44c0faae7d74603f199cd993440212041aaad2a6bb4796bc91bae5c1967b7f1bf2ff12d865eaa8b51d43296772d8ac4b58a3","ssdeep":"","tlshash":"1941e86ffe1e79248b4bd88a0cc9642bf2235d4098e2e224e4c5e41a353429283288e7","first_seen":"2025-07-02T09:37:46.183128Z","last_seen":"2026-05-01T14:15:21.72796Z","times_seen":48,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/bg-products.e4ddcae4.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/bg-products.e4ddcae4.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://love20268.com/css/home.1777364763194.75c0cb4c.css\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-6bcb\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 307 x 342, 8-bit/color RGBA, non-interlaced","md5":"e61aff410bd41a8256ee4de7d1e25db0","sha1":"4debbd11000bd5796036eee1550f59d98ef1d3f0","sha256":"7c3578ebab0ef95c73226e6e6089174946df4ac8cb33b01dc7a59501139bbd70","sha512":"acd8dd2c1a79eabadcfe003e52ec6b7e1bea822314f4fc50a13be639e443fb8669dac75b7a0473aa357dd071f37914d03b97a7567cedcb1848cafc6cc3c23c46","ssdeep":"768:mgFEwxfk8FrBI0w77m3oySk3QiDVElRHAH:VXxcylI0wHm3oUuLg","tlshash":"8ec2e0e75be28c2c9629802312c6f873defdb3681094f056dc9ba53556d2d13c19ee2a","first_seen":"2023-05-01T09:33:58Z","last_seen":"2026-05-01T14:15:21.772731Z","times_seen":636,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://love20268.com\r\nXign: oPTuo4XIhWOW75gnWS21eqpxfDjxkZF0glNP2hYY76zfmc1yC6MwVr1zf9RKJu6jUkxxB5Ie908soNzNi0qGbrn8P9OiF4lHLSW8I84WZd/Ua8cSW80Wf3Apin5nWEeFESjrbz6Nh5P82zkKagQEuHvQac/NzEUbqD4ufNsf+E8=\r\ntimestamp: 1777637670787\r\nsign: 7d1p2g5p4v3k694h\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: TiyzWnXJcX88Q6sPschx3Y67rRWMNPi7\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, s-maxage=300, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:14:30 GMT\r\nexpires: Fri, 01 May 2026 12:19:30 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37209,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"d129a612708ab87f2b7df575cd7da7f0","sha1":"c086974c0f4a66cf10c9c039bd2f32a7e65885b0","sha256":"ebce5eb1f64ac1d0e2ce8d1774d2677d4879860af92213de072a1f4a28039e50","sha512":"6070e436468c842ed688305ed1501d0360a78cec8b017323e5d0e8e81c4e762c96428f01d92bbbdbeb3a1a55301e99c530371d506451d3d37552e23b7ce7164d","ssdeep":"1536:ObSWip1+cwWgFcpAMwNF5TzAHY93tG1ERG3+5I/nyfYqnTSD:LN1+5WzpA5z53A4RI1IZfLnC","tlshash":"7443e1031205f355e2da9af9680756e075cccde0fb97ba51ca30c662ad0916d73ef8d2","first_seen":"2026-05-01T12:12:38.997119Z","last_seen":"2026-05-01T14:15:21.704714Z","times_seen":3,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_85f2c16e-1b03-4950-9c3e-e5543e558c4f.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_85f2c16e-1b03-4950-9c3e-e5543e558c4f.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895feefad007-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"2134b0906469984062c9d1d385a6e68c\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NzoXwZIqzekwNmNWaJWrAT5oWly9tqGUT2o%2BsmrMl6rFQiguOuImPeXazsvlDYUKNPWqIH7eNXwL8awzmiJpC1EJS4npvaSlv2beOzePZdZMLAf0%2BBtHtAjFN18By1sAYYU94lDS1I1y57TJbcKyIaA%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 7196\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2134b0906469984062c9d1d385a6e68c","sha1":"64bf72c3fbeda23cee64732eb5f8582259766ca9","sha256":"6fbdd9122d43635174dd61851c4ec9913906ca95103e0fd121e0f1b8fdfd1bdd","sha512":"fb2f6958b21435f4d75be202be32f0fba88b25802531061b4f8af3b63ccdf23a70c70dc7e86035bd34bd21a5c845512f9d7826f7f5be1fe7a7773e5e3b059c9e","ssdeep":"192:2OlXhNCski5bxsOpYlgkbkpGBo+Ta64b/a:1XLyCqEYmewgoivea","tlshash":"3ce18d034479311ec1d2679863ed0e34b165cb868b97ec02898db5c7447cae3eaaa93c","first_seen":"2026-05-01T12:12:39.050519Z","last_seen":"2026-05-01T14:15:21.729659Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_861c22f3-cf0f-4132-b681-f14d58c4a0f2.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_861c22f3-cf0f-4132-b681-f14d58c4a0f2.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895ffe620ebe-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"9ea11fb0c17a1f1a36522ae108827a65\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5ZbEJlooaIbaI%2FMiMcO4tsMEl1tFogNUw3XQm0%2FVVQY%2FdH54xfe2%2FqPGZLZHNM8dAS7Dhj%2BeYlFBF5AfQX3k7l8MFFFT%2FZJJB9pX6lLOWERXuSBTQRjZlUyeQWJRXLEx%2BNI%2BqProni3dxZdystJPwI%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 4832\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ea11fb0c17a1f1a36522ae108827a65","sha1":"b1d6a5e491ea935c68cfe8eb3ad4f939ecd32c78","sha256":"c60f5fc23cc38e3fb03e8c2bb9abb29c7491b428d29447bac59764f3dc684020","sha512":"87abaab621a024da8d1b8679dd1e925c432eecb121099152a94f18868d3d36b1a7c4bfbdc12c23e01bab19e7806aaba01789496a1fb030de7b4e5bb325b07717","ssdeep":"96:JDPRrbyBnpxppoNW6ELZzCcx7rvHIFFbW/M:JtrbMnpxnkWTF5BvHIFBwM","tlshash":"81a18ef69b7908c41a8eca8d5e1c5be6b1499a5c458f8c4e128cced6240dcea33473c0","first_seen":"2026-05-01T12:12:38.873476Z","last_seen":"2026-05-01T14:15:21.713863Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/21954.1777364763194.57c97863.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:29.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/21954.1777364763194.57c97863.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:31 GMT\r\netag: W/\"69f07064-a3f0\"\r\nlast-modified: Fri, 01 May 2026 03:00:30 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41968,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41968), with no line terminators","md5":"3625ce676273a0a70a815bac91290b96","sha1":"d6228513247625005a157d90f69c76d8bc7e6117","sha256":"896205d739c30b1f7db4cedb32cc6e2a5bd400b8110242413f9b3aa4a38bc2d8","sha512":"ddb917ba3f43d4c69a85f9577dfde3dd511e31fcf2e14d1e08ad4b13f98ed17d02891440f9e45c1e3932a65785071f6aa004b766d1336eae7f8326270bdc495a","ssdeep":"768:7PeaSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:n81R6Ipyk6o","tlshash":"b5132088fac2b06dd3eb733085bf505ae66a1dc0668c5438e260d6917e7198dc1fb5f8","first_seen":"2025-12-29T19:25:02.029727Z","last_seen":"2026-05-01T14:15:21.775393Z","times_seen":772,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/75351.1777364763194.6e695611.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/75351.1777364763194.6e695611.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-2fac2\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"8235b8f85a5d635b40d5fd318878904b","sha1":"ff21578abcb9d16cccd72693f94c57daf09b4fd0","sha256":"bf229f1179d95d34e9df661a2fb42a10b32718e4102cc6d492648a680fbe8dd1","sha512":"11cde1f9fa451a9f6a07e0937978498c4e86b8c1fd37d91c332bda056e76b0c449983b195734a380a7997f8df9385c3d92a8eb3e8943a519d960e2c3f8eead78","ssdeep":"1536:517BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4z:vjHoKRKphCnDgJoec+IDWIzls+xXr0X7","tlshash":"9c141a84764170b8c396a165322f601ae22f789650dd9c24f3789ba47f7470df26fabc","first_seen":"2026-05-01T12:12:38.980505Z","last_seen":"2026-05-01T14:15:21.72515Z","times_seen":3,"resource_available":true,"data":null}},"time_used":947,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":947,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T12:14:27.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 21\r\ncache-control: public, s-maxage=600, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Fri, 01 May 2026 12:14:06 GMT\r\netag: \"1777637645\"\r\nlast-modified: Fri, 01 May 2026 12:14:05 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GeeTest","description":"GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.","website":"https://www.geetest.com","common_platform_enumeration":"","icon":"GeeTest.svg","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24451,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777)","md5":"0f48abc71856905aa4cebd7bd4e64ca7","sha1":"0ff4e1553532a3fe74fb0a51485a90ae9c9fe611","sha256":"925da4c3c0d63d66a124518455b497556ddfb80703c253ea766ab2788798214e","sha512":"64271816cb1bb70a988c5795a8c0526cacc439a04e9aa74b72d27acbf606a7df25a2e05daeec5515c7ebf5603b2f9c576d3ae0354dff4efaaf0192f75bba0e37","ssdeep":"384:4o3ERrxqNBPJYgNy2VwiYwJvSoVXsp+pa/iZcVk97g6nMusplIiz:4pRVqrJ/NyiNYiKop/E6wkpcu2llz","tlshash":"31b2175a9df34a662423303a1f7fb2087ab1c0134309ed403e4de7594fd59aa52e7bd6","first_seen":"2026-05-01T12:12:39.002835Z","last_seen":"2026-05-01T14:15:21.709063Z","times_seen":3,"resource_available":true,"data":null}},"time_used":918,"timings":{"blocked":371,"dns":1,"connect":176,"send":0,"wait":176,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/g5/gd.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.6.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Fri, 19 Dec 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CA:8B:31:34:03:03:4F:25:DE:AF:F1:76:9E:25:19:08:18:0C:04:EA","sha256":"F3:25:0F:0B:68:0B:B5:E2:F6:2A:F2:FE:E9:AA:10:6C:61:1C:7D:A6:FA:3F:D9:45:0F:E6:58:6D:71:F9:2E:2E"}}},"request":{"raw":"GET /g5/gd.js HTTP/1.1\r\nHost: static.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:14:28 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9f4eb4c21ec449c5-OSL\r\ncf-cache-status: HIT\r\nage: 1300042\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: \"7D7AF3F3975E0FB657B71508B79515F9\"\r\nexpires: Sat, 02 May 2026 12:14:28 GMT\r\nlast-modified: Mon, 30 Mar 2026 13:35:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-md5: fXrz85deD7ZXtxUIt5UV+Q==\r\nx-oss-hash-crc64ecma: 275051795077788302\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69CA7DA1318BA43434E50547\r\nx-oss-server-time: 8\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21040,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7d7af3f3975e0fb657b71508b79515f9","sha1":"b36988028196a947b1d67af0856a79e6cf054283","sha256":"41cadd609d64b1958d25afc39e73148bf669fd94f48e848dd47494e7de5762b7","sha512":"ed69806d7f263fec8f66cccf0de8757df3b17cad5629c242e1da0d668830870d42951b8a05cb6780ecf8034800313d02531393745209a5aa3e00ac5d936e1bed","ssdeep":"384:oGm+XLBnDztmdGnnsQn4DgIzHilQVdlsGxCnXdPVcVf:dm+7B6gUKMrxCtCd","tlshash":"5d92204e6cf5a0934a43b078c9af6114b538da53041c9d597d8ce3a4ef684389bbafdc","first_seen":"2026-04-05T08:11:55.721652Z","last_seen":"2026-05-01T14:24:54.745951Z","times_seen":77,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":36,"dns":40,"connect":1,"send":0,"wait":19,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/css/78817.1777364763194.ac0dd2e4.css","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /css/78817.1777364763194.ac0dd2e4.css HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-5b1a7\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":373159,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7845a329a99719eabc1f296e9a160e58","sha1":"aaa6e0d20e301ec1bb20f964876533565df9f65e","sha256":"a58c5919678c875ade9eba54c1b2d125b5e970581c5c3d70ccc2ffffac659033","sha512":"61c6d0a6aa8a725348c872ef31a6a7f184c1bb0df5c9171b33751afb02d3690404e9424c2383365c9c58cd233551a4bfaa09af6094f7febd5d2247b7067302c7","ssdeep":"6144:z4+4r0H8Tu4+4r5cRlGuEQUQ929spenpTP4VHrjZ:z4+4ZTu4+4SZVHrjZ","tlshash":"7d840a6caf10307e15a7cb27b6a0f5589c36a443f9bfde9af3a53d580789a510623c13","first_seen":"2026-05-01T12:12:38.88776Z","last_seen":"2026-05-01T14:15:21.757589Z","times_seen":3,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/css/83749.1777364763194.9dfe84a9.css","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /css/83749.1777364763194.9dfe84a9.css HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-2f5c\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 2426\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12124,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12124), with no line terminators","md5":"92e078501b8170232239de02c722b2c0","sha1":"2714c7976b523923d70e8892289f79605603701d","sha256":"6c3f2343ff6f328b8763413c728e7281ec1e787c139a5118043e96646b4b53cb","sha512":"4a39de7383a0b3160d0199487bdb39146cd2972c9af798a3872e5f242dc42d4281ee6c7a9d99ba63e4743e62dad9d83a762f68d04e8958b53f431ad3d47d2978","ssdeep":"192:kBXkGHcFtcIdKx7xN1XM3G00kQpI0S/ubbmd27KH9w0PziUXVHiW7BHd9dlxSHT/:gdqdK","tlshash":"0e423099f599b13e6c17fb35efd5c1cc62269851db230e69f60035a206c7ef081266bc","first_seen":"2026-02-15T23:20:06.520382Z","last_seen":"2026-05-01T14:15:21.752288Z","times_seen":116,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_c3a9900e-04f2-4263-b6e5-82392d906614.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_c3a9900e-04f2-4263-b6e5-82392d906614.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895ffef384cc-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"b1225b7ba0f93dcd3b4eba7503d62e6b\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNgCkn8w2ETKO5LuX7J9zfuJN5xCTlHhp2nlu9Zo%2BK7hXFgDX5NnxYbHMfsBGaioxfx%2FoEgRUlPJPGa0PtRR0MdoMMHgUQjP3hkSFPvVRIHEEPTy1CFsT%2BBArHe2dJnLyoKexGJbday8kJnYYFWa3pE%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 4402\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b1225b7ba0f93dcd3b4eba7503d62e6b","sha1":"b7039e96ab874e511751d14134ed83c04c36fe94","sha256":"1b3b076a35c463f95611f3cc749e952aa4bd66e00140ee958287f996546163b8","sha512":"df9ea88909565585f11ca2178e74aafc872a2a6bb25408da137b05b841a81e17aca723c5061a3b0888058a69a1d0c1c667c87e7e4abb304d3a18a5a10f74eec7","ssdeep":"96:J4HKA9YSGeRduEl1rxeXKljgQjrL4qThq06uYR+CcVh8tXwYKyO:BAOXLEl10XKlJTE06u4Y","tlshash":"ab918e6b7531036d2f5179396240643b9e138b686a442b45df44ed6f40206d3577c8e8","first_seen":"2026-05-01T12:12:39.04269Z","last_seen":"2026-05-01T14:15:21.767227Z","times_seen":3,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/chunk-common.1777364763194.97ace344.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/chunk-common.1777364763194.97ace344.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-27b43\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e5ed4fc554993c1064f69eb3ffff4a20","sha1":"b552ce3d775d875fe7c9303aaf155d9de22905fd","sha256":"8262db62cc0bf95b3a176206165dae360d6811127fbac7aa04422790974112c2","sha512":"67f9898585d971c0b5e4867cc54daeafb9dc676e01f8c54bf9eb88fce3a53abf1c6ec7e3f3f2a66a96119f958bd13d9f8fa4e5764b211cc2f0dd948556cacb27","ssdeep":"1536:3BBzbgGcdWWa2UTf6oryXHuLmbErF/G7D1dMI5NHnCY7LJkq/voaGAClVbGD3tFZ:3BBfvTf6yjFe9HnCY79Z/voaGAcgD3t","tlshash":"0cf3f8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","first_seen":"2026-05-01T12:12:39.044379Z","last_seen":"2026-05-01T14:15:21.692615Z","times_seen":3,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/83749.1777364763194.356278f5.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/83749.1777364763194.356278f5.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-b038\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45112,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44412), with no line terminators","md5":"91406d50af87226a9a4a3f2bfa559328","sha1":"550eb6cefef030f64a1fe7d28a67d9286c80938b","sha256":"271ed98f1b72d5ba8e7bfad8ab9dd4edf4824811ebf43806718f4311fcbbe80f","sha512":"f0224614d9f259a71b464b33d757a0c49d24075e4f2bb7f105cff9df0e1e4ac151659eec1e36ae71f8a5201a9e729af9c49b53c51b4168b4a2e867ac492fc499","ssdeep":"768:zEYSEh/janJVLi+wRfx46uj5lJaptSXZDHPBnF4lc+hI+HXrJlFFSv0F+SCKJQEE:Rz7xYpHpn/+t0E2zXDNFGl6V","tlshash":"3413f880e6f4f9fc265ec9f797364474a02526c6a0c8ece0d1a96e587d44ba7b4348fc","first_seen":"2026-05-01T12:12:38.944416Z","last_seen":"2026-05-01T14:15:21.783194Z","times_seen":3,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/rdao-r-4.5d6173a4.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/rdao-r-4.5d6173a4.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-3922\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14626,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 53, 8-bit/color RGB, non-interlaced","md5":"113d3f2af50abaadad7df566c6c82d22","sha1":"9ac7ddf5cd311e88709d29b3a69bf209c5ca1e51","sha256":"a1a9bff1875165cafe5c41941486db0a6b12028b63e6738d1f79980cb2408caf","sha512":"a9f8174ee1300bbbe90a2d5358758e7d83932b64191374fae2960d48c6860c30268de649e1108e6b1e5402b1c17b84abb1267b3d2d1e0e3915ba29d45392cdae","ssdeep":"384:OEesk78FGrdSgJTFYaLxOJGltTrtYrqdcdr3l5sqiu:ORskkgAglNtOJitV2JXV","tlshash":"7762c05dae5330039e8eaba5cf3fe0710d5a1729e055c4eb1117e8b754980e4c34a5be","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-05-01T14:15:21.697496Z","times_seen":1012,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/enable.9ef47d58.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/enable.9ef47d58.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: W/\"69f07064-792\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 1961\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b1d702ead4d924bae52a64441d6e36cf","sha1":"ba96b2b9b8925e6d3ced19ab50d41ec0b3def2a9","sha256":"9bf083510f61bd1b3fb1bd661842c2d5061c32bbab6054ac4d869871546bab4c","sha512":"b3c279be02b8da61ce59e1ca86695f3d4d45870d8ed3aa3d3deb76063a14ec481d7a1517ded054fbb105ee9d5802463bdf1a9ab18d39b4f48bbd154117277bc2","ssdeep":"","tlshash":"c44119c362d49d39911bd54497977a42aaab5c4ba23bf63478e30c7e67444d0dc00ece","first_seen":"2025-07-04T09:17:37.860529Z","last_seen":"2026-05-01T14:15:21.784865Z","times_seen":58,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_08163b48-4f04-4584-bc28-a719e521107c.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_08163b48-4f04-4584-bc28-a719e521107c.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895fef902100-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"e1cf427e0dd9da84b15cb5d4a79a6d99\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWLGjMuqcE5TSTIgHG%2FKor9dscPue4KupmogY5ujuZrvh6y3HCUYSE%2BJsnwo33u191QdUuy%2FPQ9dcbuCXMFgloq582uB9CYLOqBtmly8oh1jnz5QJJdnU0o95gPcixLbPUsldNFEgdCCXXQbTCreRp0%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 4750\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4750,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1cf427e0dd9da84b15cb5d4a79a6d99","sha1":"3d797cef2a94366df529385796057e577e6bfabb","sha256":"850ac73dd43d4d0879883d8d25a1e800a15df8b1eac5457d8ee3df1e7cbae5c1","sha512":"500f5667fdd6e5a5bb4cb8e58ebc048d67a842bb087e7a7eca337d0abd2c4cb844b2b46111cc0120ff7f2195fbf747a8bfc0087b70141fb9b2ddb339a8d7afc1","ssdeep":"96:nA5FbIOYQtKW0B+Htm+dnbPHTtvXPEV98mqpFKfwdG+4:CFH5nsWZDHT9/6MkS4","tlshash":"6da18ea82dd6b66406e524bc1cc3b77694cb7791340f348856f0676dfb75b10eca3460","first_seen":"2026-05-01T12:12:38.929708Z","last_seen":"2026-05-01T14:15:21.747061Z","times_seen":3,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/navbar-sub-num1.1cc834ac.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/navbar-sub-num1.1cc834ac.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: W/\"69f07064-1293\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 97, 8-bit/color RGB, non-interlaced","md5":"2c0f14ba2132098bd3592be1a94e85c7","sha1":"0dfadad8c9406dc68b40721ca0676ab21124dcbf","sha256":"1449f858cc06199eecbb41d78724e91a290f5ad2572fa063699eada6a32bd5f4","sha512":"b09507d30b0644a140bd4e6bc91bde19a24cb93196222bbf275093d8cec50d668790c16d82394624c1ead731961a7b499d5457845b8342fa0fbac4997aaa3609","ssdeep":"96:yY2d6IoQqjIPfh/jIE8t6wIST6Tv7cP6yzk9/0+x6cMAWrK:yFHfh/jvwxmz7cP6yW57","tlshash":"c0a16e9ec8c4fc815ddd8531fbd24211d616841b1518aa89e99f93328eb42f3d57c4cf","first_seen":"2025-07-02T09:37:46.19394Z","last_seen":"2026-05-01T14:15:21.722466Z","times_seen":48,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_b405c689-4c6e-444d-a07d-f0112bb59346.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_b405c689-4c6e-444d-a07d-f0112bb59346.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89600a2c859d-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"913ccbe75e93fdfceb3e1e3fbbc06171\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98%2Bbr3xeaHwMM6LKvG9u%2Ftlc30%2BEThSh7tqNlV2%2BV1PkKWkeCRwN4in7e5fdgM%2BPJI%2BmDPbHbtlYbVI2b8mVHBLAhzKiWHlpV2rDKTECJilxnvRlmNzClJFpNzaZbsXLl6e%2F8uTOD2vWDv7hAkVX1do%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 13396\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":13396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"913ccbe75e93fdfceb3e1e3fbbc06171","sha1":"2298a9ff7c281aa9aedfce4f10e4fffa3f1983d2","sha256":"382e23d34d3729fdfd3bda74bb7ce117a7bab5bca359a456d1f6c3b4c830dd12","sha512":"3dc0a3bafcfcf4acae22316c60d16b4e28e819ed7be9f0cb50460538b6ffe97d1c03427f07ccc66b246fbaf525ed1800b8e2d1c44782091855f92c1a62d1719a","ssdeep":"192:XwTrNkuHEJ4fc3ly8QvnBEH6YEOuLC/MG29+8CtfyK7hHKa42LNsugCySaBxSIjx:ATriSUNQPBEH6diunEGeNsrRePr+","tlshash":"2752b0d2bb2985310b3c427ce1d8a0f5e8ceeaeb400d8f8698a3d731749d4944e5989d","first_seen":"2026-05-01T12:12:39.035834Z","last_seen":"2026-05-01T14:15:21.731386Z","times_seen":3,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_553cdff1-95ee-46bb-8237-54da1e6a3abd.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_553cdff1-95ee-46bb-8237-54da1e6a3abd.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89600d14e2ee-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"e1b8ae08570f727f89c5d9506e6298e8\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FOgSoDtAxMuMqFB%2F0Mh0TVHrqKGIEwk9fuGMP7UVbTTfXlkz6w9Q7KprNwgEqy6AdpTJhHF22C5FJXvFzN%2BbiyPEsWAJfa4N3dfzEGq2tcu7NO5hhRsARjbxayl56ZB%2FcDmPEfWw1l6vtNgvTMS8mr8%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 10224\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":10224,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1b8ae08570f727f89c5d9506e6298e8","sha1":"8893ffad64ee0d759ad559357f0a675aaa98aa31","sha256":"cc747786d804110340cd8a8a6d53fe1ceee9dce7dfbbe581ba25acb0d77e880e","sha512":"36a41cb9effde82b5e2e90410b3520134ed3c726c73e26ff29a4d41968ed6ed30f4c797092a59a17f03519fa39b7aa3810e1d0e5e2062835697e7628a5dec635","ssdeep":"192:r0lmQQkKPeyxc03KJtTiCHIxych8UwFCJ3WG3xma3olsk5PX9zR/pv1Vss:rXpFC03yEYDUBEJFv9jB","tlshash":"1b22d06a6672d524efcc74b030050c6ebb2b759c79e9266cff0be24b8b4e140c4644ad","first_seen":"2026-05-01T12:12:38.946719Z","last_seen":"2026-05-01T14:15:21.748648Z","times_seen":3,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/assets/logo/favicon.ico","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:29.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /assets/logo/favicon.ico HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33236\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: image/x-icon\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"685a5a9f-5c30\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 23600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":23600,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"915b77b545b2f06d111b1668dec5b9ec","sha1":"5b64c1aa42b2a5c05a2b2a8e70bb2ea8f7938d9a","sha256":"b8ae08911816fb9ab6348d3ee9b27a7f772ec47e5b6c61440fba815b85779f94","sha512":"2bceabcac70d4394d91c893c872b01fb28136549fc7835d4c6410d63e8f1c97c40531890e67a1f0c0b1a10de7c7310cc6d826fb4cdc164c1649cc406a13d9082","ssdeep":"384:HMjmMW3zlq8Zgh6zLUNI4aqBfQ5EGzUQhkQp8YT6zzwfBGTWg66ekbqHlLSH:h3hq8dHUNxaqRCEFckQjigQj66MlLSH","tlshash":"a0b2e0ba02e92d41de3ebc4ad59c5811f7b15016a46f074e8d8cd94dcd23bac1160fbe","first_seen":"2024-01-06T03:51:32Z","last_seen":"2026-05-01T14:15:21.702023Z","times_seen":409,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/35142.1777364763194.2458367c.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:29.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/35142.1777364763194.2458367c.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-538d0\"\r\nlast-modified: Fri, 01 May 2026 03:00:30 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":342224,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64890), with no line terminators","md5":"2335dddb2acc2d4395505c34d24e7fee","sha1":"06cc51400bcd2b5a200e5b330bf41de6102c8995","sha256":"88d74a619edb5f951f6435fdc637bbd8aec0d0dfe0ec0a4a5e8a522203528dbb","sha512":"4e4b4dc18587ba936391d88edd54693a50c859970c217af560590afab6afa562fb40ce7bbec79f35850b1cab66d885c4a12f268e2aa43e6e449b80dac24eb5ab","ssdeep":"6144:RYhhkpltRf4iyveBHlBfb0wvge7Ancbt82i2UfIL5EoSltLFe/fwwutUcAct37/m:RYhhkplTf4iyv0HlBfb0wvgaAncbt82p","tlshash":"d1743c84b690b17483af86fb721a9194d25e0e9460ccace4f27d6e40bf11746f87b5ec","first_seen":"2026-05-01T12:12:38.941946Z","last_seen":"2026-05-01T14:15:21.782291Z","times_seen":3,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_0d6516f9-6fad-421d-b651-24d11f25eabd.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_0d6516f9-6fad-421d-b651-24d11f25eabd.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601c2a7a89-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"46a9dc17b497c8f5c31d59fb892accec\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nRR2dhM1WrCg30IvBopyGLgZsEOvqc0dK4GnqjAynCk%2FITgpUwenYUONbU7dtRKzljDlIhoSaApsK1nqgoN7AjEHETckQapHMqyJv7rWmD7q3mEJmOI5if1ZOzGn1x0w28MchqZWsoJvWZpm592vTW0%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 4258\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46a9dc17b497c8f5c31d59fb892accec","sha1":"80ccb7ba11c4df497de6118beb4c964a8526878b","sha256":"0203d5570d3e7e7dd9c8ec7262d927b9e8213b7e8f5e2b9f2e0ef8fbc393d49c","sha512":"157f6fecb230203d18a9cc9eca54c30b9d267a6275a1f9a9e78012dc2d744331db63d592a9018e13e5e394dd7942780d54d6be450c40d304d9f9bb1b269d135a","ssdeep":"96:xvJfofcP2CE6YpzqtDNk2zqRVlxxLBaZ8fOSGnL9vstQB1YkFa:x9IYJYQtmxq8Va9vVXFa","tlshash":"d6917f00f98193beedcfdd1cb879e650e5a12799730a45f9d308bc28874aa750533e5d","first_seen":"2026-05-01T12:12:38.985333Z","last_seen":"2026-05-01T14:15:21.72079Z","times_seen":3,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202504/_webp_size280x136_3137a7ed-4183-46ab-a90b-87878312c7fb.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202504/_webp_size280x136_3137a7ed-4183-46ab-a90b-87878312c7fb.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601ea9ddc1-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"d146d377872839e8b96dd4079cdda0ec\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B4q6lj6X68gghAmaZl%2F1lnxUuyPYWSEtyHXQGrEq5LjXaLVAHZOiju%2FxFlhHNhFcZm7aAzkM%2FmicgWPigfb6IWNjpJnRmfgf1XMX1PT014U7wiWyRuFqckHX8hoyXcKB9rbjS58Z8JLSAz2QVvXBxaU%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 4426\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d146d377872839e8b96dd4079cdda0ec","sha1":"478e63d219788e85da6675fb384345221211ca71","sha256":"2fd934a1012c6349ecb4fb99ae94d65000c08a282dc73af68072754449e2aa5f","sha512":"9e0ec95e445dda39e99ffaa450c540897e020adbcfad7b8b1b3f995fd3593186dcbd009d019885f8d619ede7c1564a7df039686ce4f5bcfc5306f1dd69abc14b","ssdeep":"96:oV4ztT4gYKZ8LVfYY4l7n/BbzcW8PMCnmf0uhYcLQhk5:OitsgYKLrzbyPM4aYBhs","tlshash":"12917c9d942215acdc1af8f1354ac81d2c9a143a22c4ae894ff45b70a1dee09ef6110f","first_seen":"2026-05-01T12:12:39.054584Z","last_seen":"2026-05-01T14:15:21.687492Z","times_seen":3,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_2a07d033-da63-40a7-abfa-bf0b1a1f094d.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_2a07d033-da63-40a7-abfa-bf0b1a1f094d.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601c080437-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"aac84ca7e098365b110195a3c5e8638a\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Kngv5%2BgIL4wk8M5LVJEU%2Bfhpz%2BM0P67GBTleF3nTuFbXkJCn6h5Cq9PYGLGWwoc4%2FOdoE6SPQcYz1zGwXHPvpRWX5kuRa%2BYqCKju3sz%2BEZWNv2eGexevo2Y7qJDL6TkAoJjQR6OuaO%2Fjdvuv4UFV7w%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 7126\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":7126,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aac84ca7e098365b110195a3c5e8638a","sha1":"a8dd31c9b9396775de47cbc0a648a7b3931695f2","sha256":"5f2b4b7898919f4cfe3412bc47480eedb7e00156638db06d6be660136013d858","sha512":"5a0c9b97f00a1ca9bad9937ade65fedb80ca10cb78844edc90ea5afdc8b9a8a13ec85f374a6688add4cec2e1e7413cb043994a35d17a5b55c8f430a957b7c59c","ssdeep":"192:JUPQwFeYkJfRsS19LlW6sC8Ku0mAmZ0EG3ROS7B:JutEqclPszLKEZC","tlshash":"b0e19eedab18e220540af79f30a9299dd7e34898610837407f8a23a67e94f6149807d7","first_seen":"2026-05-01T12:12:39.02908Z","last_seen":"2026-05-01T14:15:21.721577Z","times_seen":3,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_795b2a75-2d5f-413b-8d2a-af436052f286.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_795b2a75-2d5f-413b-8d2a-af436052f286.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b896019290892-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"fee65433c168f67ea5a0b490cbc7b5bf\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XVAe9YNpZ5Hzk5svabPCso%2Fz63ZGc5DjC02Mp%2FqpstB4wtGV1s7PXRUJvT%2BnEyfufAp07poSXkCZAzrwZFf4VqoUD1qIvs2CT1l3DJe%2BFFkDxnVdCX%2BFrRwN5gJjA4KDtMYIqonkGVeKOQlFOMo50L8%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 6478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6478,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fee65433c168f67ea5a0b490cbc7b5bf","sha1":"264d96223992bf492a2c3ba72f1a8f9b62bc51c3","sha256":"18a1e78f74d066f8423e4acb6a8f4c1d10fc87e200ae1eed9c839e466885c60e","sha512":"fb623ea0fd635e589034ef813d2bbd1f276c91711af09567ef47c765502a49603ff269e3e36297dee00cc981576019b9494641ed6c5af84c295170cf98e13e6c","ssdeep":"96:77OO/2pTlQbajwdEaf0U2cxoRkygc2ehwXprtII1t1/1M/cVmToV8eyhkfeI:73CHaj2cxoRuwip5II1f4xee7I","tlshash":"e0d1af03a1b9069cd710d9a18979d9c036c99c43a920be71b09676797949cfd39fd0f1","first_seen":"2026-05-01T12:12:39.006079Z","last_seen":"2026-05-01T14:15:21.779608Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/configPage.js?v=4/28/2026,%2016:31:32","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /configPage.js?v=4/28/2026,%2016:31:32 HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f0706d-606\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 853\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1542,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1514), with no line terminators","md5":"a9a1da2795b6ac069691e02b6934b110","sha1":"3b31f29574988e3f8253cac52a29500e246be6e1","sha256":"288bd90db96659b95b35830382e465d3b48ab13b5aee95b36fbc3a004bc91d95","sha512":"d760cddf6e74524c7ae79dfb7748ad3841aa07fa97ff0c7683123f29f2dc0e5be8d4cd8e611e54271dcd2facf8da72963dec0c28bf16e610fe4e53a164803f9e","ssdeep":"","tlshash":"ad31428e22594cfb874b7f95736b060c68a631419445ad91bcddcf1c530994111249bc","first_seen":"2025-06-09T14:55:55.160162Z","last_seen":"2026-05-01T14:15:21.76349Z","times_seen":31,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/index.1777364763194.e9764755.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/index.1777364763194.e9764755.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-1bec7\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114375,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64467), with no line terminators","md5":"c47a7637fe18f7f4238275fbbccf76cd","sha1":"dcd634f895662c19c387dc9667e2e1cd4464390f","sha256":"f7d056978d1c22de4f8649f0faedc0d7ab568b7e4b2e13ed8f6691c1d9dea378","sha512":"26c96dba3b23124bb83d57e4688d156f36559d2f870058dc6dd5781834e0481e9eceb080c7654ab217c2d2215d9184f0eaa32c3f8d2e6029b79bd214fad1e19b","ssdeep":"1536:sVeemPvh/nLa3gWp5ocsySUP73qKlp2TCRnm30PBeZGzRmEYU0oMbP6QZKmlJKDd:Dnh/Lafp5FsyL64M2fB6D8Y8i5HE","tlshash":"09b31bd0b2b4f1f8535f86b7b73220a8512d1a81b0cedca8d6ad2e94be41785fd315d8","first_seen":"2026-05-01T12:12:39.038556Z","last_seen":"2026-05-01T14:15:21.716284Z","times_seen":3,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/kc180-1/logo/logo.png.png?1777364703555","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /kc180-1/logo/logo.png.png?1777364703555 HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"685a5a9f-47d2\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 318 x 144, 8-bit/color RGBA, non-interlaced","md5":"e7cb5ee9f30672a53b2f7495d4e42630","sha1":"a8203b11ccc37efcf91857b79be90ef8cbba66ba","sha256":"288f049894425abb4adcf32e8a08fce507ce91f76a41ed8a80ea118712814bc3","sha512":"5b79cb59e359271a411c7bd20f520b6ac44e2b4392abb28aa9019e7834ae0f8952c4058f62ae96927b24deec47a91c728fc14e37e2b251e4a1be38229bc67131","ssdeep":"384:RrAR6oyuxEJxqQow3Q9ouRZH6RPLSSoP3QrNAqe8ULWVJYkSI8:JE6W2JxJPFJAmJYkq","tlshash":"0082d016f62c56f73ca83045a9952c7225fac3dd9247c8d74d93854862fea94f78fe00","first_seen":"2023-06-14T01:45:00Z","last_seen":"2026-05-01T14:15:21.758407Z","times_seen":594,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://love20268.com\r\nXign: aFvHPySrK89d7hb5CwI097OhlZMMVTMGJ1HVl+JkHji6gyvT/UPZgrt8Kx0K28VQp1/4ubQFPTLXG3bUa1kguILpMqklAAj8BgnBd8dxfbqL09bnYvc5F4IEQLo+3pOu3dIIx2ZFCGwnCanM24FrKu2Uy9jDea1lOWCbjS0TzC0=\r\ntimestamp: 1777637670788\r\nsign: v76i3721737b766l\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: 2jRpwBxiZbfbDCjEHzCcCSwdrGHbhNFz\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:14:30 GMT\r\nexpires: Fri, 01 May 2026 12:24:30 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2531\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2508,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"c8547f225dd8f8bfe046b0acc4a5a005","sha1":"85c870378d9fb3942df26922d4016bc8a5203007","sha256":"f56eb3fc7adba4b9b127baac64590c8d44df0e4fee9f9f9839dac95d6286a979","sha512":"c4a56dc0a9e5ecf45156e35a72bfc2b4942d93917c7c89e77eb98eb855a39dfbd40d1cda38bcf120f61b993e0017b17e2606bce811b70dcc124d178ef18f66a7","ssdeep":"","tlshash":"79715ea91564c74cb47e48b9d529608043ecf1d4dbdf6610d3b1187a219982877fedf8","first_seen":"2026-05-01T12:12:38.999181Z","last_seen":"2026-05-01T14:15:21.733092Z","times_seen":3,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gp180/c8c033bb-2199-4c32-9c88-4bbcbc9fcd96.gif","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gp180/c8c033bb-2199-4c32-9c88-4bbcbc9fcd96.gif HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33237\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895f8dbd0980-HKG\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: W/\"c2779bd16fdaf0596783964aff7999c8\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67kj8lzkrT5cQHFH1MgI14C%2F56Pdp49LIleEh1Vw%2BRD8rDPaWg0ESS3%2BTowQLynFBSWuV9616%2F43piYk7KYCxUEuhOD6hrLVjD0GvhqxQLiQdfqaKA8lCTE19lGXCoGbwHzzgcOhyU1rXVA6bDrOgJU%3D\"}]}\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":88077,"size_decoded":0,"mime_type":"image/png","magic":"GIF image data, version 89a, 200 x 200","md5":"c2779bd16fdaf0596783964aff7999c8","sha1":"c36ae9ec6fac85eb3c860cc7f809767c600ef642","sha256":"5453befd8c4ff91b2556e3e2751d5ef628c6fb305cdfb23d8dd8e06f04aca2d2","sha512":"d7abd67831a95dbabc5ec8c6157dca22fe456847a711a9a53a74c745f89e41d90c51386d1fdcc8c0a96465e1b0b75bb663b85b8caf7fcbe882a62478e1fd771e","ssdeep":"1536:v5mw44bWc8FWR6ApoJeXIaVvhK0KJxIfsdYRVU7LCvWH7cE8DjeMrhBOFAsoVbnd:fNsWR/GQHlhux8jU72vWH7cE8D1hBO4d","tlshash":"dd8302b9d5f02c644d5f38b83c8b83201633c9b85c89b427d025fe1fb72ab7490696b6","first_seen":"2023-04-26T20:18:12Z","last_seen":"2026-05-01T14:15:21.762626Z","times_seen":176,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_1fb5a7d0-4c52-45f5-9ee7-16fbf384d812.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_1fb5a7d0-4c52-45f5-9ee7-16fbf384d812.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b896018f18623-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"7530813d8a41bff08d239c61f9625f20\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2BLTHNKXqFpAUyiekTBE%2BJj7IP9maH2CHkT220Y6czFDx0%2FhPXZU6QjlM8Ju7OEMFDQBlCex%2FbP5U9d22gLuVh70CZ%2FLl6JPcmzrGSFBJC5SZMS%2BB5CU30tOwHLz%2BFOLKzxX%2BY1vwFNKvhDZr4oH4LM%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 5214\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7530813d8a41bff08d239c61f9625f20","sha1":"af426dbad5012f63cb3359dfd7da6f89ac6eaee9","sha256":"88a150c3dd85bb98579539cd46d4b0584f12afa7801fb6d9c8b6a4b2f06ac598","sha512":"5cd115b6c6625dcb1e186df2b81c965e0e8ca6f73bd32bc181845727b51e4a810cd81b1732e445e4670e1c0ec8f90592471691ddc17f86962a7af3685535d536","ssdeep":"96:+zkp78u4tjbPgYZpOsksZVeNaf6nzAugZshBfsbKv1v8K:+zigjnbO1hNY6nzTgoabe1v8K","tlshash":"00b1af0dfc874aa38927e9353e94e182a2f1ecdbca1c1b4106c4171bfc5e192226e3b5","first_seen":"2026-05-01T12:12:38.987799Z","last_seen":"2026-05-01T14:15:21.785729Z","times_seen":3,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_489423c0-c5c6-4dce-acce-63c91cc14eff.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_489423c0-c5c6-4dce-acce-63c91cc14eff.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601e099fe0-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"670e397e96c76fe6dca3a3913b3d01c3\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALZ60T2Dn2Gmv2ewrf3Al7pp9FRxywMhFXacLboe6QSQI3%2FkEIlh6t37g%2BAfcLuDZ33I5hkSzcocLFmMelIr%2BSWcNFZx%2FOlwiApI0sEMRU46f9damr0TNVcghGMVUdOF3wkKoIXb5buqEwKax6VH33U%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 11552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"670e397e96c76fe6dca3a3913b3d01c3","sha1":"be3871558cb8188085c0eb32a906b7ce35e34ada","sha256":"f8dd9a808a53440a119ebb511903ebfa743b1acc26030335571e762d43f21b03","sha512":"161c93aef5a15fb14024d816df023d0050679f8f18e9c847c652b3b0642f1c5b9883765659d967fc8f384aabd992a2b1375c381bcbaaf8dc84ce438a4bd9305d","ssdeep":"192:45K6oxyGKOwv0emIJjoBVIupuIA0+vf4O/CE4Hk50Suxwi69yNoBy/KbXLaEg01z:ExRJUBVxpl+J/CEkkiJwi1EyCU0NPh2e","tlshash":"0032bf3acfac19de8b874c99b55cd0dca6f825134e429cf06480f833ba562c269971dd","first_seen":"2026-05-01T12:12:38.916283Z","last_seen":"2026-05-01T14:15:21.69079Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202604/_webp_size936x214_29eb2914-9612-48d5-b4c7-f49a4a67358d.jpg","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202604/_webp_size936x214_29eb2914-9612-48d5-b4c7-f49a4a67358d.jpg HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895f88cd6d08-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"b1c2f12099845e021de64f9f35a6d5ea\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9PqbGdzE%2FrAMG1EchdAMge%2B%2Fo4h3O0BY6itGKDMsc%2BvqapFDExEhMFFhooY7g321Vh%2B6FLW0wXBm%2FsHmF%2BiqN%2BYtVgBrBrbV3pTglXAwGh00k5T8mrGwRBWAkMkY%2FLDeUwW0%2BTCbAve2rs%2FzHGekIk%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 31046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31046,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 936x214, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b1c2f12099845e021de64f9f35a6d5ea","sha1":"7fb958196a5e21483933eef9d009cd02aa2c7148","sha256":"ebd80b34737835c518a3e9427cb4a52f119cef16d4e8af3200b9d895fda3c88a","sha512":"b2c2c76b3b64f0b03c1ad82af0b718b47915aef456939288f8355df472b52ef4aa4f37c8aa09a2d7a8b6476bb1244650dc27c132d7a85ce064afe85ec8f189af","ssdeep":"768:IQHacBV28hqYeVuFCewYMBSUtUvyx2KdciqE0o:nHacBV28wVBewYMBSUt0+dww","tlshash":"ddd2e198e1da0e3cbb93477234a3b94bde47046a6154bfcd0fc8a4c8b5c6db5ba00d25","first_seen":"2026-05-01T12:12:38.932507Z","last_seen":"2026-05-01T14:15:21.735692Z","times_seen":3,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KVN8M54JBZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:29.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:28 GMT","end":"Wed, 01 Jul 2026 05:17:27 GMT"},"fingerprint":{"sha1":"86:DB:E7:5B:3B:53:79:79:2B:F6:8C:0E:44:38:92:EA:58:EE:AE:1D","sha256":"D6:A4:00:9F:FD:A7:F7:D1:FD:94:29:2C:41:01:10:FF:91:46:C8:9F:31:75:0E:46:2F:61:CB:02:48:24:A8:1C"}}},"request":{"raw":"GET /gtag/js?id=G-KVN8M54JBZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 01 May 2026 12:14:29 GMT\r\nexpires: Fri, 01 May 2026 12:14:29 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159667\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":490129,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9559)","md5":"767c9117d6b8934f8de45b89102813ef","sha1":"a056d1938cf06259e8354ff3cd61e255060c8a1a","sha256":"2541030352a8ce1f69c1730c45746d30ddce0f1795aac43e8f6d0dc752fe040e","sha512":"ff5ef75944cba987fb8ca95888fda568efbd4db4943eef7b4e2e3cf95d0f04a6718293ddc0b8bc9f42e6743b28a5693881713e97a61079dfeac70598fc67f927","ssdeep":"6144:8k9QF9EIHcSxkQDPAFB8OOpMcNAcKdE/khrINVDHQdliP54:tQbHcSyQDKB8OSArZd7","tlshash":"b8a4f8ceb3d674625296f478903f01cba57b28a2b45cc896f189cce02d34a5a5277f7c","first_seen":"2026-05-01T12:12:38.939875Z","last_seen":"2026-05-01T14:15:21.736497Z","times_seen":3,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":113,"dns":3,"connect":15,"send":0,"wait":56,"receive":52,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/rdao-l-1.d6e3a425.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/rdao-l-1.d6e3a425.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-24d3\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 51, 8-bit/color RGB, non-interlaced","md5":"f3427cdef3e73f6a410bb3caaa15e5bf","sha1":"87aee39268e60a3f9bef90e3629213e00c4ca3b1","sha256":"9c8946d53d9bd3e9057491cc4e9ec38d1e0c06a15a8d350f9ee15738afc45b19","sha512":"fe65baf0e11f284911ffe2ef4115e53648c7e8150635a5125dcf0218f690822dba567ecfbcac482d98ef3aee17e81c6d6aa32b52484e0b8e919d0fbf5061e205","ssdeep":"192:KGMKZeO9C+EyysKTQDTplPAdby4hAPBTyunHmfhJFqIrZulv28gsz4J:1194JsKUBUbylZy0G3FpZuE0z+","tlshash":"f712bf9aee98008117c0a13478f2180629d0c1d9da6bd5337ecfd9d92e137f646d4edb","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-05-01T14:15:21.703781Z","times_seen":982,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/rdao-l-3.5d2e2162.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/rdao-l-3.5d2e2162.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-3120\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 57, 8-bit/color RGB, non-interlaced","md5":"2d59ff3b03c35665687729fb98ed5478","sha1":"c4c4b17fbfb5849c5c95f063b87b6bf322a1b5ea","sha256":"32f2a358d3f2a798ddf394ac652c3998349c366dd467df5234071c0548398770","sha512":"9671895b14f189107793741e2336585cc66f70275f2d406de2a442f2918f911ae79fce57a74b1b8645b2831053f7f5782ba1f1cdd7e891961ffcc738b257d84d","ssdeep":"384:usnRa8PIA5FpuffMcx26k9VI4rl6+IXQw4QDfunlK:uIRa8gkFpuHMohsVIUkklMIo","tlshash":"5242cfb806b9fb2b33840d8475b0780b46622edcd5d4d8f4d6dc157ab2ae0794924cdf","first_seen":"2023-05-01T02:34:21Z","last_seen":"2026-05-01T14:15:21.737328Z","times_seen":996,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_73572716-0d7e-471d-bb14-6b2fee4b7fe8.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_73572716-0d7e-471d-bb14-6b2fee4b7fe8.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895fe9cfe2f1-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"b404a33df4e0606c02efd2a0be86c1cc\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVj5tzjx%2BJRumlK4QNlKaH27dqXGeaDedUVVuodRh3tysfNDfAXPQLyOW5jefMOkF7KN5%2Bof2sQwj5lx%2FfzAHo7ZYNoOkCzzNvYgIPuDGjjgMnDKxNJiA80H9Go%2BiAmC7z6s5myefY%2FfbI8O3LuTKhM%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 7024\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7024,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b404a33df4e0606c02efd2a0be86c1cc","sha1":"7b094edeb90cafc7dc0e0dbcc7d3cd18107a9812","sha256":"3a6c2e7ad7e1be893da9520dbab04c4e350aabc956c50fe1310a0d2f4056f053","sha512":"22df9ec9c0118ceffe16fdf095b5d71653ee6a92e0707268d12b896aadf03d08cbcb377178eccb66405cdac34a041f1d22fb16a56f8e48f4d0a785e4613d1da9","ssdeep":"192:y/YZtJOsppiHwb/1oTx4Q9M5kmjRH14xIS:yqtJsQj1SxZMJZJS","tlshash":"34e1be70719882a895881c7a7d93eff21871400d3fc4fdac221102790f115bf79bd2b2","first_seen":"2026-05-01T12:12:38.853249Z","last_seen":"2026-05-01T14:15:21.684812Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_f4e36c47-5a9e-46d6-ba10-c20d26e16cd5.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_f4e36c47-5a9e-46d6-ba10-c20d26e16cd5.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601d83b42d-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"e533f078caf5f29e2e79adde698485ba\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKBh8Uf4zuA%2F04DYoP07tG0C7I%2BliOhPShbC7O%2F5m18Zvm2R3oZ%2BVvPIc7hT9O7whAV%2BdUNhx4uMwGvqu09IV%2BHqsASfROW3moxE11y6DSe5vRZcr8qxJLMclMj2g31SF%2FYGbtXokenscjDrgPCksuY%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 3882\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3882,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e533f078caf5f29e2e79adde698485ba","sha1":"59a5b12c3aa86e2908d29434ada8292cf8d78526","sha256":"65287454e7107592f1c24351e0d37b55649debdc0ce332c6d7f40a8771486d91","sha512":"cbfba19ad1344cf0d3e7a1f0708cc9f88b70f97522f26aeae1e45bf47274c36b7892dc05e54178861d4aab05d51750a498cd97e3854e31b250ae0d90a8aead62","ssdeep":"","tlshash":"a1814cd90478406ac0ba55de63f9bf9b3089f51f83147faa30916a5b400cdd16dcb6a6","first_seen":"2026-05-01T12:12:39.05318Z","last_seen":"2026-05-01T14:15:21.768132Z","times_seen":3,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_535e7d31-da35-4566-859f-92703c01eda7.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_535e7d31-da35-4566-859f-92703c01eda7.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b896018d602ca-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"588de9cf72eb5ff791341824f165f5e3\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4W7ukcOgBFvwTEMnq8D481hTiEyWXe2oLTCbczM9g9Pl5eomKI4vkSy9dVh30sVOXbOp8i0aAwYLL8CcWeFEOTI4O66tk6g3KEYTZzVWtRBxJ5eW%2BAemKz%2FYiyY8u2y2h7geMAEXCkkg3IeFWQtnHw%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 9716\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9716,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"588de9cf72eb5ff791341824f165f5e3","sha1":"3ae9e0936dc752b5173fc7e96f13ca106cc6ea91","sha256":"a223afc8b3427f81cf42d62d5d30aea5630578a7249cffaa1e7e452e25513ea1","sha512":"41987cf05b182e265c09ee1e1175d82588a3630e0ccc86ab90b60155cb2bb8ec194800afe8cfb5805a7179b84d4ef58241477846eaa767978583f561231f1f72","ssdeep":"192:xOfUMvptjymlXpkAY8WY/4FEKF5iKB6iz/02gik47B+Go1rH9s:xOMIpZymppgYAWkMKIiDWiNvZ","tlshash":"4712bfbcbd1c74e941dc98cd160079543faaf9e722c9a943c347eb9a28255231dc36de","first_seen":"2026-05-01T12:12:39.031626Z","last_seen":"2026-05-01T14:15:21.714885Z","times_seen":3,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_b99dd8f5-da2b-4178-a180-e25e02850723.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_b99dd8f5-da2b-4178-a180-e25e02850723.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601a312b12-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"09c3ef4baf8922686561ed9e0ef5de91\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYV4xtCRYS1DWthaAoC27Ol260lc6TSNY0NLc%2BHBxvh8xF8iRbxfqdEWM2l%2Bd7gSMBlyI5yEqAfqCqwbtw2IPrcupp4KeaM29vUOLaFzpu6p3o4BgSr4%2FnXJfrx%2BUsNw%2Fe2wGG6ZPGLFC7ERXw6cNJI%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 7454\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09c3ef4baf8922686561ed9e0ef5de91","sha1":"10e26a0fa78ebf8c1943dd7bb8f423d7306348d5","sha256":"a177083e564c7842c72cca4182c3836b8db34fe21ecdf6a8e36c5cb9ecf52bd1","sha512":"b6c5663e13526f2ba128737c52dd803658d75b4a75fed0d9008256e8c92ba139d9c9e93d21a7983cbc30859ee095e1fa0b785dd1a7f21464e91aa2aafadc161e","ssdeep":"192:+rjXQBbnHjMGuotz1RQ74lDXoRNLb1L9KQ/UdC6pHPh5y9fQPML:+vg5nDMakAborFwQ/UdN1P3ylH","tlshash":"f5f1bf87d2cb536851c639a283b1461770f4f51330016eaa77acd132466939bef9c63c","first_seen":"2026-05-01T12:12:38.913542Z","last_seen":"2026-05-01T14:15:21.699283Z","times_seen":3,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gp180/_webp_size936x214_b208fdd4-7d5f-4bb8-83b6-32535b5bcbb1.jpg","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gp180/_webp_size936x214_b208fdd4-7d5f-4bb8-83b6-32535b5bcbb1.jpg HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895f7dfb06e8-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"adf16b268346de64c0189274c64553c2\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7PlWWo36oX4LZJduw8CjbmQ%2B3Fz3mbpkCovVAQUTrTXqrZhV%2F1eUW7bWjSgo6SwBq2Qhe58iRAnrinITCYq4CPK1ey5XL6sKhcl9C7PlqTuR9L0ljyyryyed1H%2B9AlmuJJtTWN5O4zI0U31d8pHUOA%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 20840\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20840,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 936x214, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"adf16b268346de64c0189274c64553c2","sha1":"106a40c9d05b58e5533bdcce3480ce154b493e13","sha256":"b6813baf8c0ba08d7a891a0d0f43bdf8a36528b09b30e9db1dfc26d11608e6ed","sha512":"ab4aef869ea56328547c6f7c843ba949e2500e1cc715d0141dace1696bf19eb54f19f819f93c72effa63a1f7357029db1cd746e381aebf06c9a674bb12511fa8","ssdeep":"384:N1/+jY5/n5IXhxbqpwqJgx5TRefzvQZQnYNlxysgOOf6w/vaXLT6QFag8io:LyYKqpLgfWYKWxysgbx/vaXLT637v","tlshash":"5e92e1e38294274e9526689203c39eee3335a97af8b35b9ed3090424c9879749c5f88d","first_seen":"2026-05-01T12:12:39.022975Z","last_seen":"2026-05-01T14:15:21.70022Z","times_seen":3,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/chunk-init-1656f0b4.1777364763194.d896ffeb.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/chunk-init-1656f0b4.1777364763194.d896ffeb.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-21366\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136038,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44088)","md5":"e5ffdf7d068fb54e5b2bc029157c97a3","sha1":"e6b169899f11d90c9243f5626b1fdaeb3b336b71","sha256":"cd0ad3095337a01660496864466c49b01390ede138b39dcf9c0593fc8238c571","sha512":"a5191d183f4063447b6f7860825e413366897e7d8be6626ea81e4079fb5b666dc95a55ec6d98499011e63d03535b08a810725205b27be52cf8252b3558276daa","ssdeep":"1536:atwqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCifM+:atwqhOIK2nCLdyACifMur06/D","tlshash":"17d3ec54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","first_seen":"2026-05-01T12:12:38.921317Z","last_seen":"2026-05-01T14:15:21.681108Z","times_seen":3,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://love20268.com\r\nXign: QE+RxSm3bHErEtSDgfgTUI+Zpz9ugF3UHczYvTl3UdeDg5vjnkYWMDzY3euUabB/MrgdkzRoWNkBNp10eH7+8tmmEoGVtbdB0uANaKoVf58wSwtryMcFqcFi77m58szj1uCnUlPMMconl900vfOqY3bB/ODt4t3HkH3Qp2qzVIM=\r\ntimestamp: 1777637670788\r\nsign: 4g226s5m6t347470\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: 7Br3DAD4ejhmQPjmRtjmCw6QDyynszh6\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 01 May 2026 12:14:30 GMT\r\nexpires: Fri, 01 May 2026 12:24:30 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: BYPASS, the cache file is updating (006)\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2531\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2508,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"c8547f225dd8f8bfe046b0acc4a5a005","sha1":"85c870378d9fb3942df26922d4016bc8a5203007","sha256":"f56eb3fc7adba4b9b127baac64590c8d44df0e4fee9f9f9839dac95d6286a979","sha512":"c4a56dc0a9e5ecf45156e35a72bfc2b4942d93917c7c89e77eb98eb855a39dfbd40d1cda38bcf120f61b993e0017b17e2606bce811b70dcc124d178ef18f66a7","ssdeep":"","tlshash":"79715ea91564c74cb47e48b9d529608043ecf1d4dbdf6610d3b1187a219982877fedf8","first_seen":"2026-05-01T12:12:38.999181Z","last_seen":"2026-05-01T14:15:21.733092Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_e4736ea9-86b5-409d-a4fd-037cac3df39c.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_e4736ea9-86b5-409d-a4fd-037cac3df39c.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33237\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895ffa400574-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"8a4d8592faf821d7484a3a38199c2133\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZNmjI6apGJ7Cn43BRUX3zvocmVwAKXMQEYQLk32nhgtrInKPRocHv%2FPNUPumGTRyLmoc6mSvk84XuqgS86LuptKYfZDh%2FsczhctzA1Z7OIqwi3Fi%2BDoY1kRq7OKuyo%2FJRmuecisvTgOqd6DCqPFPVc%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 6814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a4d8592faf821d7484a3a38199c2133","sha1":"2029e565585fb2fba90f52499e224bd0f29caba4","sha256":"5b61f2464bfbe5ccbded191635a7af71ee4a158daab5408ccda76d4af2784863","sha512":"b76145884d3222236aa06f93df0c5fe966313acfe16637fa444aeef7f428982b25e874578f9c8ebb070e1eca91a9343a0e38ea89d7e638823cc8bc467e094de5","ssdeep":"96:4rm5MoaPTm0rOFBf7X83rP0j+NFBksMgRXUmFYrEQf4A99SJnfZbsLxcjBL9ZN+3:4ruarm0kBf2P0MVErbgI8RflsL4LLU3","tlshash":"2ce19fcb4b828395e9694ca2990df88d6a4138f70b7a83d129e44df3f9690d1834a54a","first_seen":"2026-05-01T12:12:38.909867Z","last_seen":"2026-05-01T14:15:21.706526Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_214c3d1b-067a-4638-a169-cad6388ef03c.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_214c3d1b-067a-4638-a169-cad6388ef03c.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895fee72d173-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"a46ad6a40ea59465ca3f27b087f70200\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPoyXq52uz5goixmti1GTkwtV151pSicY5fYBnfYXc5B6DOrRUOflozhOQMhZO%2FJbECln0A%2FbPhMIUCzg%2BcXPx1pNZ1qZ8Y%2F%2FlqPh7URfoiRs9KMmdqBq4UVODnOAc6LZ%2F2VdVdqCneO9R7mYh6FIl0%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 6252\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a46ad6a40ea59465ca3f27b087f70200","sha1":"f3c3904661f04294d9a4a5d6830f6f4f5fa8554b","sha256":"3fe4061ae65694f41242037ba3dca6ea48bbbeb4679ae124cc4e9c2e4f45eea3","sha512":"6ec625e54b67fc719b19ab39c2cff4c026250ad1f52f197940984fd0b13901bbe46330089de8a4975cef424a722276e95cb8e04f5367e1b3507f75a17ca2719e","ssdeep":"192:YQZjH6Vlhdku6tWZ9okxrjWYaAn3/jWZs3NbG:YQZT0lzku6tWZ9hxZam3/jWZslG","tlshash":"13d19eb9aaa678e4bb3b35488f9964c5d3f45f4454923618b3235c0dce823721f6507c","first_seen":"2026-05-01T12:12:39.048299Z","last_seen":"2026-05-01T14:15:21.760984Z","times_seen":3,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_4ff28f55-d465-4f6e-8312-39fd059d5918.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_4ff28f55-d465-4f6e-8312-39fd059d5918.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895fe974e2e7-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"c8cca57370caa7b231c464c067f4df12\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVLV%2BPQ4YCBFDaN8ia88k2J5tOAhEf8NvcQe%2BZDhjOCo%2FygQtwn5nZCMt2jByn87ImwVPkmZ0mpIkZFPb9TM33gDeSM6lDYd4XWgBS%2Brg9dfY63r2yd%2BR76gADzXVxSPwLDhRTyFkoUTzcZMrQo8Nzo%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 6182\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":6182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c8cca57370caa7b231c464c067f4df12","sha1":"0b58777a1eb97b37b3ca2d94996e341cb69b9297","sha256":"161e4d382ecebf9f554fcc17f1a36ecbd4c7bc4025bb686ddccd1dc41c61c859","sha512":"9e4e8f757de1e23917a9a1e68007158c02e3a27487cc16200aab43ce47152ece81e467166c49094a865377934e73fb17c95b03a6fd47a05cc5f166821358a6c5","ssdeep":"192:w0lsjF+9rjJIbbSvTazcSvWMolbnv5C1aOD:PSjF+9nuH5nVEbnv5CAM","tlshash":"95d18e4b81f137d84ee923fab8986f188f880bd05cda90bf5883f5b11565e1d0871dac","first_seen":"2026-05-01T12:12:38.8705Z","last_seen":"2026-05-01T14:15:21.777613Z","times_seen":3,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_c4ee6b83-6ee2-47b7-824b-8e7dff12f459.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_c4ee6b83-6ee2-47b7-824b-8e7dff12f459.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b8960092086b1-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"73ff18c1f315017d715f2adc4806cd9a\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3JB0UBEEBjaasQ30ECuvcjbIvDlfTfgVj7stBDoSrn5nb0S7W4X4PpfjNh51yR3jQX%2BMG8%2FAO0TQGyh5vmvf43isYfW7ueQt8c0x8GIbwa0wAC%2BzCbLOPHSzHy9WKAiOM%2BAyrwr2ryA7outiQPd1%2FKk%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 10888\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":10888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73ff18c1f315017d715f2adc4806cd9a","sha1":"7e3b661adfde2699efeecc0a266b0197f358ddd8","sha256":"3e59a897cf32061085d20d8da6f4520fff5be413b4cfdfa4e27e3423c69ab617","sha512":"f413e4a5e13e536064b381dbd300e0b0a65252c9a0ed94331d53df84d6e47e77c31a830f575d8478a32c41fe40d5cd95eea5d300b7ac848e122d6ad0e97cc84a","ssdeep":"192:pZO15Ds/C+y8FyRohZCf9BVG81kG56rHrvtOPPfjbUhcR980+28tmr6oGZPTVeEV:rs5DA/y8URCIfZZ35+HJgnjQ0m2WOGx3","tlshash":"2a22d0a034e7a05042f4a857c72bd59d2b0f43189e2cf8fec9f4f821e50c9daaf59208","first_seen":"2026-05-01T12:12:38.972764Z","last_seen":"2026-05-01T14:15:21.774497Z","times_seen":3,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gp180/_webp_size1920x700_fe5960b2-c6f8-4333-a9c7-362c953f873c.jpg","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gp180/_webp_size1920x700_fe5960b2-c6f8-4333-a9c7-362c953f873c.jpg HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895f8da4d173-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"055d62642c53ac185ed7e097b884c37c\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4M9roX7zo4veDF%2BeS2XNjTTgwcCMrz489Xd4q2%2Fy8KsLjwXjU9TrPnRBNYxMDwGuvjilyl18t3j4e3IqWsNO%2FkrKDLMNWrhwtakM8Bcv1i7Nmy081CBpvbPucBedv5m%2FCQ02BjyUYdj%2BWRUJKFRc0dk%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 92506\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92506,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x700, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"055d62642c53ac185ed7e097b884c37c","sha1":"a798cad5470146724aa6688c1c8642afdee24c3e","sha256":"d5a8f48547e87fa7eb07753b097e5930770c4afe035c94460bf1b2c4c2d1c9ef","sha512":"1ee347fb56a85af7576106d389bea1b149d67439b0455f9fd01950924c30d62320e5ebe0dcdcc97ff05a8d821a8a7d5c9c7b1181417ab5487c6ae7d73f0c186f","ssdeep":"1536:YVlAAlUfjrw4DQVe7fwEdxgHeH6DEm/q4TFFdxlpYd8f9KFQug8aCierzI+m:YVlFUfjU4DQVYfrdxlaDOAxhl53eBm","tlshash":"de9302f64fa725c94c2a7265c396c423f7f2f84621f20a8e8b5eb5cbd5834e14d02b04","first_seen":"2026-05-01T12:12:38.948997Z","last_seen":"2026-05-01T14:15:21.780476Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/css/chunk-common.1777364763194.fb4405c9.css","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /css/chunk-common.1777364763194.fb4405c9.css HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-3555\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 4045\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13653,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13653), with no line terminators","md5":"3d45f60882309279af27fceeee8f3293","sha1":"1485732a3af0b67a675a545637a3557f99b0366d","sha256":"91377645671e8af9611eaddaab97e5e43f8b7873b15df2b203315ecfb7389364","sha512":"a5b82d67b3ecbb6e22b57468d11ab44fdc5e7aa6cd6a7ff603b86864d33684631c2b13c4d9ff94075589df1f17ae34ba0d63dbf8770387306d424775741eef3c","ssdeep":"192:4dQK/X4cBY4mZGX1lsUTLA7gYEC/i//L/R4FHSQZA2VxM2XwujvXMY:M8oTGEC/i//L/+FHBrxb8Y","tlshash":"8652b631d634b53ce53be126f9d0aadc6024e417d6730baeea653b3ac5ca4d215332c8","first_seen":"2026-05-01T12:12:38.977641Z","last_seen":"2026-05-01T14:15:21.679097Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_f494170f-e86d-494c-97a0-c11c408da431.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_f494170f-e86d-494c-97a0-c11c408da431.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601a82099b-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"559b322a19ff3d33f88a6e71c50fcb4d\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFNm0XxxOUmUgdrAq%2BmHyqYWptxBH4AS%2FFDKTof023DU4A6Fyh7cF04wAx0zbWoA4a1L9wTMUbH9eO51WsKvcWOmxUA2i7F2x%2FVeNcaUcB2Y%2Bn%2F6%2FQosx6BgmGpmgBFgk7tZ%2FOIzbAQwKVkX3M8Qbmg%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 6812\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":6812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"559b322a19ff3d33f88a6e71c50fcb4d","sha1":"1ab2e9ab2aca78a13600f6377bff9feed0a68788","sha256":"ae1e8d7e85a7f32c7922599661de9d355aef39e3fbb3897cf861b34e0d80bfa3","sha512":"ef569325d1d8f30325959d349b11e0d580bf7976e4f7b9442606a6290bacc16ded6c5150a405c14a8338dd0a7db739a15ae40fbb7f699f7cd76713c1207abfa4","ssdeep":"192:F6Eem/Wb/r53dvBohISGK20ScL0XGl1ihQ8O:Dh/WDzBbSs02HRO","tlshash":"ace19f6107fde9a758c00920b5e3e3617b463d8e5054c90bb8af530f27b5e8d65e90a4","first_seen":"2026-05-01T12:12:38.885702Z","last_seen":"2026-05-01T14:15:21.72331Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size280x150_abac0779-1028-4a4a-81d8-38a55748aa1f.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size280x150_abac0779-1028-4a4a-81d8-38a55748aa1f.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601ea50aa5-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"e08f764a558564e14b5bf613dae6e632\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24JEJm65nyhYctwZ8SFHa4a5I%2BoRc%2F6QMUhLYw2lImVsHaRhU9hM%2FZRtfn1ZWxjBCJWoTqKxQ9aaEOvYycQvEtUgBUSz1iJ3u3Rsa%2BHt44wwoQq6TH0EYuooYIuME3TvXGUMU3d4%2BEGNlV3F1Tze%2BjU%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 11928\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":11928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e08f764a558564e14b5bf613dae6e632","sha1":"b8eedb09b84ac2cc8899ecb4ff88d833c702101c","sha256":"2e75b4ff154931d017a3338bc7bf157e9b5f61765540bd0c1f0409fb1f1a2138","sha512":"a7f3526c3c408b94e9750615c5490ffd78c9ade117e5e9c4a3bada53ae61845438229496c0afed60a2a5f0d2022a696f5974de3252e4ab408afaf97a735e085f","ssdeep":"192:vhmRxXbfZ/5WYZkzxpJwwsAEYU/D+xwxUAuK9ztkSHiIAqMTEAyMXBcoxf5+U7Z0:J+xF/5WF9T9E9cRAzvAq+EAJqoxR1V3k","tlshash":"7c32af9d366371504dcf6627aca8120d3d10ce343c5b12f24e9a68aed538376f68867b","first_seen":"2026-05-01T12:12:39.020739Z","last_seen":"2026-05-01T14:15:21.749408Z","times_seen":3,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/css/60992.1777364763194.0ab0fca2.css","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:29.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /css/60992.1777364763194.0ab0fca2.css HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-1439\"\r\nlast-modified: Fri, 01 May 2026 03:00:30 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 1267\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5177,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5177), with no line terminators","md5":"a0ef4268641ef0b005737ce8cc0c4b44","sha1":"9bb50b9000a419e7a701392b0d7d6c992cf585bb","sha256":"f64c7a7e6ecd620d1c7f8cc67e1eda83a0a115a8d86f3954efdaba3c09d62e66","sha512":"07605ebd7e16aef28f0ad5ed406f29ea9b77e8ba6b2079c810aacf8faf0b4a8d18d4f7775c62860cbf6d4379729a60076103a4daa833c860ddebeee3793ccbe2","ssdeep":"48:ZSPkOO2s2L5Pukasq+nArLkrL4QuQKhUjUkM5P6CdRDRWURcWaTHR/:iOvyP2r4rEDFP61LR/","tlshash":"d1b1412f01703349641bad6807dc67098325d8b399eb37da259d2a0dcbc3f861eb718b","first_seen":"2025-06-26T16:31:28.933081Z","last_seen":"2026-05-01T14:24:54.599441Z","times_seen":2087,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/rdao-l-4.d79bc746.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/rdao-l-4.d79bc746.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-374d\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14157,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 70, 8-bit/color RGB, non-interlaced","md5":"408a47dbec9333221ee9937cf6513a0c","sha1":"b87f2425f70c7d0f8af2c41a0d3db5b4ef96a146","sha256":"a359740e674cfee1c6697c6cf4b6e1cc86de89d856d5601652aa5ce7c4b48203","sha512":"b1101ee62131000f76d0ea1fae026acff61c70d937ae7bdc887077dfdf6bca68bae1e495a3e587d5d433150e7932ebd1a2f111b5163a85c503386e56a837ca3b","ssdeep":"384:oXTlCu/v1oAmkBA0qLcScR8vmGzk1O/mex2t:UsEtogBA0qoHmk1O/jkt","tlshash":"2652bf0a5d284c3fc8f56e0258a300a3ec602d986951d86ff15f99ced63e6dec55a0d1","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-05-01T14:15:21.696567Z","times_seen":1001,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/65246.1777364763194.8333614a.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/65246.1777364763194.8333614a.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-11f2c\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73516,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48688)","md5":"c1abf0e2775d0125d8307853800ea7ae","sha1":"57b7d1d09c2346bbbcdbc4f9e7ed10fe473bfce0","sha256":"0f903d31be30688bdcce02288d688b23493e9c3fd56de17ad6fb123bedc2c745","sha512":"732c8829b8d95a686e57f06c62c22bc31faa7446c04e4823b7a77824b2f17dca62049f098294307dd1bef1df3f2a87dd93b8ca0bf90c3f113c82e46faea804ed","ssdeep":"1536:T2+iDvYvNjx4Uyao0L8oDNzAuMMsTAQ0mqt2pXYzA4dANVQ:a+iDYvPo0L8oZzAuMMsTA7mqt9zA4dAQ","tlshash":"ec73a501f78272385fa7e290220f2026e16d191505ac5bd8f179ffb93ef0954aa7d7b4","first_seen":"2025-12-24T05:36:48.556093Z","last_seen":"2026-05-01T14:15:21.753223Z","times_seen":29,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/navbar-sub-num3.c3ee8d59.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/navbar-sub-num3.c3ee8d59.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33237\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: W/\"69f07064-1758\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 100, 8-bit/color RGB, non-interlaced","md5":"d77401a746fcf27ba485f7798e41c1be","sha1":"7abc745194a51bc3feec585c3ea60a64db8d9042","sha256":"bc4df39390e525dab95d86cb66d856a6a71030e1624a72a35b2a2c252215980a","sha512":"e4cea5e8ca06779417710ba773d0f55a13267842eca5e04809354108ac3904e77a7cb4c15aa3a0a09cfb212248e90e1f0cb7b81c5660286f4710d9d39a8a1193","ssdeep":"96:0Y2cTxEzZs75jmgvBHRxea1Mj+NOE+tssIo4x1vci66jFUDzCRKUgUNHjN7:0UOz675yofea1Mqf+tZR4zU6jiPmNB7","tlshash":"32c17da87d220e00e89d5fc43ef4913701912544f8a2e6167fca84648f145b6da7d3cf","first_seen":"2025-07-02T09:37:46.206637Z","last_seen":"2026-05-01T14:15:21.776248Z","times_seen":48,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_d7806098-dd03-4485-8f26-9f1e8dc0ff34.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_d7806098-dd03-4485-8f26-9f1e8dc0ff34.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33237\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895ff89e1062-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"74578e1667159c76799dd3c335dd8bbf\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OcJxTUXm3nCzksce2bcx%2FXV7ZcpvCB0vcEjAju%2Byd%2FeqHsQw7XvFxrTty3CYjfdgXtQsNLeZGsn977OKnOWiB6287naJyvENu2Be6V38v6nR0P05OvgwdOX9LEPFuHmF4Ukq%2FhW9Ec8x5GAqnyxs3vs%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 6964\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74578e1667159c76799dd3c335dd8bbf","sha1":"c38bcb40eb2a7b8e1f7a5283f9e585d93d9cb8a6","sha256":"9f6fdda0b3d5ad0c11e010b0ca052874e4a97de3b03d60576c5826e84e86bbe4","sha512":"ed9f7b5fcbdc1b925301706eb303e440d18a9971cdd76719cc6b476f9a944b3112ca94476032c0f29ce11a5186435e02ac789d1e94bd9b52477dd0ad79c75c2d","ssdeep":"192:04B4oiywxqDCYTaNZ2mNygrl4d94wHT+TVuSR2Hc:IoiywYDrTR6l45z+ZuyT","tlshash":"c0e18e8f163176efbfd565b42e82c569cac7710074b0d696ea2f6ce280521022b309db","first_seen":"2026-05-01T12:12:38.86441Z","last_seen":"2026-05-01T14:15:21.77362Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_c8e67428-f1d2-4c5b-93f5-d534c7690cac.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x150_c8e67428-f1d2-4c5b-93f5-d534c7690cac.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b895fea1672ce-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"1de7ea66d2abd217b1b22d7deb3c5c2b\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ggdd1elYabLMUIUXsv9E2itALccs7XNxzpODrCTTWOLqAXSeIq9OMMOAYqqlPVApceWqFNUA68DsxLFP0J9fsdVjFB6vbX0zR3CuaQb2yJ0TXeuYYw0SyMn6EUngj51dseZ63fu65KsaHIzLFBueFJU%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 6532\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6532,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1de7ea66d2abd217b1b22d7deb3c5c2b","sha1":"d8e12823cc1940c1c604c8876ea203f0f44e3d7b","sha256":"c3b582aa6f6780e9b1794ca21f7827c472f8bf134f3c4a1f401f64fdd81d453a","sha512":"d1fefc5212618880ea909e529ae3fea39a750cf2a4df0c845400dd7cfc909e8af2d9c02daedadfae2ab20f0739b7a0befbfeab3d47c8020664f4990d07efaa9a","ssdeep":"96:+HIsEmkKsc9weMhl4+hXWIKSwHEmWzdPhhiE6mlqGTNTZb8Efip0P6qkhq:+osvTRMhltXWIKhHEmW7PRhRTp8EJyA","tlshash":"ddd1a0e194d5971cffe2a1726a3b2068fc31ec9b89663faad0b18c4944f461dbdd4c41","first_seen":"2026-05-01T12:12:38.86777Z","last_seen":"2026-05-01T14:15:21.740901Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_dd57d4ae-6987-4633-8cc8-1ea901171541.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_dd57d4ae-6987-4633-8cc8-1ea901171541.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601d40e2ee-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"b15d66fd74681ed397b47aa9e6f0b228\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXJzVsJ1RxY4nE30srcCeYXRPUNSBxxOuaYfNHnDtN%2FQFeU1ZohKr%2F5hrvs2HvvkWRgs%2F3lvDX%2BEC9n3P%2BAWKs9v0b4vCbJwv5oh9rCOYDh%2FE4jPL5o0SKUFSTlWICooSAua27k2XVKsNOPd1ii762g%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 6914\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6914,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b15d66fd74681ed397b47aa9e6f0b228","sha1":"acf8564366a25ec58fd90be9160d39e00a0c15e8","sha256":"a5942aee836f54704cbeb3b7a4eae86b517b2d0f86e4f328a08047592c7065cd","sha512":"7845d04e9cdd6eb8c7201264a9b3e09323313987ec2852ddf5c7ae046ea7b6ff04992824375fd221260a966a7a11dae7dd1098d365ca704b904fab9c2c0f6c6e","ssdeep":"192:lCKm4KINmTXZk8vtwDp+2Jk2irQF3IwTW:lnNKmmBMptIQVW","tlshash":"0ce18e1f764fb81cdf55b27ce3a222f90b327d996b05e14c91291a01d52f8e1a9f71c4","first_seen":"2026-05-01T12:12:38.975039Z","last_seen":"2026-05-01T14:15:21.724203Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/rdao-r-2.b22a9f38.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/rdao-r-2.b22a9f38.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-3071\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 57, 8-bit/color RGB, non-interlaced","md5":"b5c72992b0327b36f67ba1f1ddcc9709","sha1":"4260a70304e373ad0c9dc8945459d132b5ebe38d","sha256":"90fd92cbe288eeef841ebbb0760c2b041aee0196b4b9a1ad4d47cd3cb344a760","sha512":"cc234a0e7953edd49f77a37002eb6b7dc858da304da4c18698958b70b508bdde4d7b6ace5fefec893e62639f4b1037e221f4c70feb19e928a42305f4398fa8c9","ssdeep":"192:RFINM5IVkNpieBIFSBOlDb179kPFt1b7Xfsz/WU70WaBtw/BmPM/l6CX4213Il:HqMeaqEBOxb17KhZU7HEtomPM/ECo2i","tlshash":"cb42d056fe28b213eccfdb472cf462415082ef0201b5d75cdae40633b474fb58aa896a","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-05-01T14:15:21.745319Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/31098.1777364763194.4108b3dd.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/31098.1777364763194.4108b3dd.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-561e2\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":352738,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65338), with no line terminators","md5":"cc604f9ac5ff6a51dbcea58aeb97d8e1","sha1":"893989f1b28ff2f094d074699b8980b9b845ad22","sha256":"e4fed891ab2bf9e518a602dce8fc7192c8dfc635241278bfa315fc3240c6022d","sha512":"d35e20542487380f8bf8a261da0fb87acebad87bb8a723237664fe23c1d9e5fc02e83274329c6959d0712a3c810d6d3f64c561e2d314cd2877f3d8a4558955b9","ssdeep":"1536:N+0YvC9jlTKAUSseG1SY46DCdlBBo3AgXOG9AsqCfCXsvCfCXsLCfCXsyCfCXsfX:wKK5sY4brG7O3SnLJNpL","tlshash":"3674b6f4c248c6fdea04ce0a7e7d6f2d50723783f2ec56c446aaf8865e92857245c4da","first_seen":"2026-05-01T12:12:39.026876Z","last_seen":"2026-05-01T14:15:21.759273Z","times_seen":3,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/config/initGeetest4.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /config/initGeetest4.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-3a7f\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-05-01T14:24:54.755812Z","times_seen":285,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_bacc592f-11e6-4dc1-8714-580c51ca734d.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size280x130_bacc592f-11e6-4dc1-8714-580c51ca734d.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89600be0383f-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"cace7fd06eded95ab0c3e2acb29d0723\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iojjMBYCmlAMo7ME7BN2RymNUEq%2BiWLr%2FzWCkLy4PvmXm%2FXu%2BUi5pTbG4qwdG3ad78rmX0zUMT5gnEGOcMtvcG5FylTLCYf2zhGvumebIAc45Ubi%2F0QGmFAw27jGU7i1SbdR4bGHvgaxIMTmLW8QfVI%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 4530\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cace7fd06eded95ab0c3e2acb29d0723","sha1":"ef1141c5ce046b8b197bd5063f69605a24c90cf4","sha256":"082ad8cf16ffe786d761295da9fc646ad631931a5dcdd39cddfcd99b69047e8a","sha512":"6343ccec312153cdfdb005e34d1e7b1c25244922ec07c576ef4ef95e287ec9a444903778b18e72e76f467d55a08adc6723638b4539528d59b5939382887dee21","ssdeep":"96:62KcG1kjmlB2c6Pz4a6Sp4ZqTWwe4DZx4Y2SX2tsLCUw5q7X:6cqkjml0c6ERoRe4DZeSX2Qo58","tlshash":"b0916cc2e2e8e27a40db3c741b9d2003769cf6983950e60ac3526b0ecc4f47a54bc1cb","first_seen":"2026-05-01T12:12:39.001049Z","last_seen":"2026-05-01T14:15:21.754661Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202603/_webp_size280x150_31615f55-6fc0-44a2-92d3-1472585e0834.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:31.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202603/_webp_size280x150_31615f55-6fc0-44a2-92d3-1472585e0834.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g1$t1777637670$j59$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9f4b89601d3ab454-HKG\r\ncontent-type: image/webp\r\ndate: Fri, 01 May 2026 03:00:33 GMT\r\netag: \"2568d8f9b58ac5fcbc332db473119071\"\r\nlast-modified: Fri, 01 May 2026 03:00:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lS8AbEw19AFJvTWjDbC4A4wt5zpi43WrNHigumTHOGNOBgDJWdsxDIBw%2BbpBG1L6GJj%2BBxX8J%2FsbnBFb0ujC1J29ARGAIoXId3%2BBjWjOWwk6CrT%2FRx3VITXBDXOm9Q0%2BgEwXnnHDdcLsDGvMDXu2Y%2FY%3D\"}]}\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 10020\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2568d8f9b58ac5fcbc332db473119071","sha1":"706c372c09a615f33b54c7dc915bec89c165f561","sha256":"56b187eac470d5aecd705d63544d6957f07c8afddf841e6b82c3962bc61163a9","sha512":"1e392363ae64007b48786d371fc6131b9289f9644aa04f1f236a550d63ecec3a9e2b710855e585a5c4e316251775d08fdfa7f9b40341df45f513ce49dc13a8e1","ssdeep":"192:sCheBsJ+akq18L8/pU5YKIYI0CPPf6WvawYiOREieTQK0nmNQqli/hrtWFquAjfR:su+6KLgM1ia9iO+iekjUPEgcfOP/e","tlshash":"bb22af1a5f21c8897ab69e5c54eb6c64cfb86fa696c36c775d330215326837d0400bc9","first_seen":"2026-05-01T12:12:38.931148Z","last_seen":"2026-05-01T14:15:21.689808Z","times_seen":3,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/js/chunk-svg.1777364763194.1e4dfc16.js","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:28.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /js/chunk-svg.1777364763194.1e4dfc16.js HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33239\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 01 May 2026 03:00:29 GMT\r\netag: W/\"69f07064-714b4\"\r\nlast-modified: Fri, 01 May 2026 03:00:28 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":464052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"8cc71bde1db31cd84d523ba58295ddab","sha1":"8fb296daf15298f69bfe80d65d9acdb5ee8a129f","sha256":"c77709432d2568c80a60b827d95c7c5b1241653249900df056d9a572877dc5e3","sha512":"a121037c805fe682b6f22e5069dbc96d8d005fda71d4e14b5909b5c680954c438914c212c87e74b49f4f69c5fef39598925f53d6ad7483421740865827959d43","ssdeep":"3072:r8nz2uaLZSZvx6Q/sIPrekK+m36Ua94sRZI7gbpF/:r8nz2uasNxpXPrekK+m36UHsE4pF/","tlshash":"eba4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","first_seen":"2026-01-02T19:20:17.992466Z","last_seen":"2026-05-01T14:15:21.711517Z","times_seen":6,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"love20268.com/img/game01.85b388dd.png","fqdn":"love20268.com","domain":"love20268.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://love20268.com/","date":"2026-05-01T12:14:30.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"love20268.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 06:43:32 GMT","end":"Thu, 18 Jun 2026 06:43:31 GMT"},"fingerprint":{"sha1":"AA:EB:F2:13:1C:D6:88:DA:0D:D5:FB:26:7A:3F:0F:05:6F:F2:DB:E8","sha256":"80:1C:9D:50:D6:B0:30:C6:E3:6E:BA:B4:E7:BD:DD:D2:0B:8D:CB:1C:1A:D1:09:B1:4D:36:80:AA:55:83:05:46"}}},"request":{"raw":"GET /img/game01.85b388dd.png HTTP/1.1\r\nHost: love20268.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://love20268.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1777637669$o1$g0$t1777637669$j60$l0$h0; _ga=GA1.1.963840705.1777637670\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33238\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 01 May 2026 03:00:32 GMT\r\netag: W/\"69f07064-9967\"\r\nlast-modified: Fri, 01 May 2026 03:00:31 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39271,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=81, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=271], baseline, precision 8, 270x81, components 3","md5":"abf180088cd18dbb8b8a87e947aa4285","sha1":"b511424b6a88d4faf129e526340ac617caaeb11a","sha256":"b136864ffef1cf1bca9a4106031e7f247fb62bb717db1a495c96c7d8b5b77da3","sha512":"846fae11172592913f58d2945a3cb9824f3de2adaabc29f22de42e58db0009ab8d080407b60c0782e52fb2869385ff5ddd4f6877b8101ec0e1b3fcd9e03029bc","ssdeep":"768:7BEaOnPFBEaOFF0f/K+aOW6ceGs6gp30NsUbGGDeex1yX6DS:dJEJoKXK+jW6cegY0NsgGGv1xDS","tlshash":"7503cf2aaf53ef67f9e58eb5a4e5c28542402e5598772b63725c14037fb07e28f3d208","first_seen":"2023-05-01T09:33:58Z","last_seen":"2026-05-01T14:15:21.717234Z","times_seen":840,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"love20268.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}