{"report_id":"d0112bce-53cd-4ec7-af55-04b62959e48b","version":6,"status":"done","tags":[],"date":"2026-01-18T21:54:33Z","url":{"schema":"http","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"172.67.139.17","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"title":"乱伦被敲诈玩偶少年高考完母子宾馆乱伦❤️被有心人威胁了~-播放-不能说的秘密","dom":{"size":464,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (464), with no line terminators","md5":"06a3edabc5fa92a681d75d422994b32b","sha1":"5b9eac906988b5948a10cebfc86fe0d8f248f031","sha256":"dfe43d313158bc5d8a2f7882d38a4a58e401e59d520dbe5b1066535012c3cda8","sha512":"f3a1c5ee5272000fce92648d23b626ce815f5b8775692d5bab4423d98d087d7d9ec747f29fd4888c13580a4c33b035d8587d29ab3f1fe39a64451ca55be86980","ssdeep":"","tlshash":"c8f0dc3441613449ce63f096acb04a0e1517c62bc2656c488f9933b9e1dd0271e315dd","dom_hash":"domhashb0f30a90be2efee965fa7b4a05913ad9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"172.67.139.17","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-22T21:54:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-18T21:54:11Z","timestamp":1768773251,"ip_dst":{"addr":"108.181.20.35","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":52706,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed File Sharing Service Download Domain (files .catbox .moe in TLS SNI)","source":"{\"timestamp\":\"2026-01-18T21:54:11.282635+0000\",\"flow_id\":514828443750501,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":52706,\"dest_ip\":\"108.181.20.35\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038639,\"rev\":1,\"signature\":\"ET INFO Observed File Sharing Service Download Domain (files .catbox .moe in TLS SNI)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_29\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_29\"]}},\"tls\":{\"sni\":\"files.catbox.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":918,\"bytes_toclient\":305,\"start\":\"2026-01-18T21:54:10.954469+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-18T21:54:11Z","timestamp":1768773251,"ip_dst":{"addr":"108.181.20.35","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":52706,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO .moe Domain in TLS SNI","source":"{\"timestamp\":\"2026-01-18T21:54:11.282635+0000\",\"flow_id\":514828443750501,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":52706,\"dest_ip\":\"108.181.20.35\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2827579,\"rev\":7,\"signature\":\"ETPRO INFO .moe Domain in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_08_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"files.catbox.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":918,\"bytes_toclient\":305,\"start\":\"2026-01-18T21:54:10.954469+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"3pkf5m0gd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"boxypluckunrelated.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"www.boxypluckunrelated.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"files.catbox.moe","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"3pkf5m0gd.com","ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2024-05-10","domain_rank":58956,"first_seen":"2024-05-10T15:33:17Z","last_seen":"2026-01-17T13:50:31.143467Z","alert_count":3,"request_count":3,"received_data":74659,"sent_data":2449,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"thumbs4.imagebam.com","ip":{"addr":"212.63.223.225","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"domain_registered":"2006-09-22","domain_rank":1507442,"first_seen":"2021-05-23T15:28:49Z","last_seen":"2026-01-14T15:04:55.745388Z","alert_count":0,"request_count":2,"received_data":2869039,"sent_data":894,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"boxypluckunrelated.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":153226,"first_seen":"2025-03-23T06:21:46.576508Z","last_seen":"2026-01-17T05:13:17.002918Z","alert_count":4,"request_count":4,"received_data":91226,"sent_data":2634,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"lsbbf2.com","ip":{"addr":"142.248.99.101","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-04-09","domain_rank":558487,"first_seen":"2023-08-31T14:02:08Z","last_seen":"2026-01-18T15:23:20.475136Z","alert_count":0,"request_count":4,"received_data":713792,"sent_data":1819,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"playhubconnect.com","ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-25","domain_rank":18094,"first_seen":"2024-10-01T12:19:44Z","last_seen":"2026-01-14T22:00:49.150393Z","alert_count":1,"request_count":1,"received_data":20581,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.boxypluckunrelated.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":0,"first_seen":"2025-10-14T10:17:53.733472Z","last_seen":"2026-01-17T05:13:17.141384Z","alert_count":1,"request_count":1,"received_data":20350,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"files.catbox.moe","ip":{"addr":"108.181.20.35","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"domain_registered":"2015-04-06","domain_rank":519029,"first_seen":"2015-06-29T23:27:11Z","last_seen":"2026-01-12T02:37:30.667183Z","alert_count":1,"request_count":1,"received_data":33451,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.wixstatic.com","ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-04-10","domain_rank":40290,"first_seen":"2013-06-07T16:55:33Z","last_seen":"2026-01-12T00:44:39.09783Z","alert_count":0,"request_count":4,"received_data":521781,"sent_data":1912,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"m1.cffpng.com","ip":{"addr":"172.67.149.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-23","domain_rank":6560888,"first_seen":"2025-07-24T04:18:42.68678Z","last_seen":"2026-01-14T15:04:55.09682Z","alert_count":0,"request_count":5,"received_data":1558687,"sent_data":2213,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"user-images.githubusercontent.com","ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":70744,"first_seen":"2017-06-06T20:44:17Z","last_seen":"2026-01-14T15:04:55.179644Z","alert_count":0,"request_count":1,"received_data":107654,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-11T22:20:23.507747Z","alert_count":0,"request_count":1,"received_data":434992,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"m1.cffpic.com","ip":{"addr":"104.21.69.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-27","domain_rank":6062132,"first_seen":"2025-06-28T23:47:04.338018Z","last_seen":"2026-01-16T00:09:30.671105Z","alert_count":0,"request_count":1,"received_data":294284,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images2.imgbox.com","ip":{"addr":"212.63.223.227","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"domain_registered":"2009-02-09","domain_rank":384284,"first_seen":"2017-10-24T18:55:51Z","last_seen":"2026-01-18T14:31:22.751936Z","alert_count":0,"request_count":1,"received_data":33068,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.erpweb.eu.org","ip":{"addr":"104.21.92.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3860157,"first_seen":"2023-10-23T12:11:36Z","last_seen":"2026-01-14T15:00:01.857924Z","alert_count":0,"request_count":3,"received_data":904872,"sent_data":1365,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"poweredby.jads.co","ip":{"addr":"92.222.100.140","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2012-05-17","domain_rank":172301,"first_seen":"2019-12-04T10:34:12Z","last_seen":"2026-01-15T19:55:47.56143Z","alert_count":0,"request_count":3,"received_data":12027,"sent_data":1233,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"gangus.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-22","domain_rank":0,"first_seen":"2026-01-17T23:40:18.232952Z","last_seen":"2026-01-17T23:40:18.232952Z","alert_count":0,"request_count":5,"received_data":156885,"sent_data":3223,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-11T22:24:29.090978Z","alert_count":0,"request_count":8,"received_data":1034792,"sent_data":3725,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5cfca8cc32ff91e6676334b62017b2e5","sha1":"57dbe19c70463f16e24af579712b2cb0c778d30a","sha256":"9fa56aa2ff5bde602a6613886114bc8ffc629dbd949c82892108bb82bd850943","sha512":"62e6294471cbd76aa7d8c4ad45dc061e9420f90800042ee508d85544eb092ce1ad8aeb2a4333e1d3bba26093b58cf34dde2c0e7572d7efdb44b99f26627acdae","ssdeep":"","tlshash":"e261634c7080da2990f27561996f700c259b7e89370ac805b00d74e69fe99f87967fbe","size":3404,"data":"","first_seen":"2024-12-03T11:45:46.346417Z","last_seen":"2026-04-01T20:56:36.842983Z","times_seen":224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6144aba5211048ad27c8e4f58648879","sha1":"50dd5659264d3c2074c3aa20c9b3f60b57eba306","sha256":"618d4dd3fd216bbfeeda1cc59973986c101494a70fb288082f12e4cbf9e3ff4b","sha512":"b55c84098a594f2024ac2672ea109b57b1be5475439bdcb595a80e114cbec3b104f0bfd5559dc1c2fd3c3f9d5c80d2db788ebfc67ee4a27f10ae2d315818dce6","ssdeep":"","tlshash":"0b2100ac358a9d2d81322f72699b039d7c756e14b262a085904cd5b12960e366c17efb","size":1128,"data":"","first_seen":"2023-11-05T11:28:18Z","last_seen":"2026-04-01T20:56:36.846789Z","times_seen":233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.140","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-04-05T12:57:46.247963Z","times_seen":2180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/layer/3.1.1/layer.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"060444af631570264c5b3f957e26f5e3","sha1":"8278c4d47ac985481da0e5efb922457eaaf1dc0c","sha256":"7ed41c1149adf244bf700213886bfe8648d164942eb68527a7476bb7955c5af9","sha512":"d18a2c4bc192c90219776b9658d1c6f7942037c90f37a5819a38f36a4a1345f742b74602989b361c78a217ab661b09e037f7d9f891fddf3152916d9cbf9b865b","ssdeep":"384:qefWYREmwZAxlh2K1mM+8leJLCgO7TKVJO7:ffBuF0lh2smMNeP4","tlshash":"1da2b46a314035a7621390a9d14fbe0f71b21d24e7174128f12af4bc1dbdda9a2b7f4b","size":21713,"data":"","first_seen":"2023-03-07T15:24:24Z","last_seen":"2026-04-04T23:48:32.037502Z","times_seen":379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/dplayer/1.27.1/DPlayer.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cd381ba72be1f7bf86e97fe4698a542","sha1":"290283e41ac69bfd570c90800680097f998e4e0c","sha256":"930aa94317d71f1459823cda409da8453078af00fe405027c67932445ec997e8","sha512":"c397f2eae103d9a2bfc57f3f45d8776d4dde8d113babb3c67d02bfd8a970eb6412a1950b5402884d8c28d8f0d0bfe90d109f8d99ed2a1d049427d5135e785eb8","ssdeep":"1536:nFri4r9aKySaa3rzg7hSwaKySaa3ref7j3MEwOMEa8vTDadMcBjOsCSwixK1LzVj:vNDyMgjKbixKVhjLIR2INivkS","tlshash":"ae54b20b364131340262afe8c6db534a36347311e9728729f65ef9de8f9d84c6427b7a","size":304629,"data":"","first_seen":"2023-04-02T21:26:50Z","last_seen":"2026-04-04T17:42:14.964574Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-05T13:24:26.834109Z","times_seen":75472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boxypluckunrelated.com/bn.js","fqdn":"boxypluckunrelated.com","domain":"boxypluckunrelated.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c265053f898d944dbe5ee80b1491152","sha1":"a507629369c768719baf97c27f96f83685372242","sha256":"a006dd04e0ee6e35b0616299ac1f821e421caef2e2967f185d9cf19fc2494db3","sha512":"635a4867524da99b4d3eadb4dccc93f0646deccec1de721182fbda6753b4b521b69917031715270a87c3d1611f556d333c07c03a268411916d6b6458bafd0b81","ssdeep":"1536:Ra6OOon58/jgntqD0YWisgNeVysDCPudeA9A2ECKntPdd:o6OOoi4tqnsgyM920nh","tlshash":"bb83d755f691b422425791f842bf401da23b3d78a4bd5138b0d2e8ea2cbdd8d6223f7d","size":81522,"data":"","first_seen":"2026-01-13T16:50:36.80312Z","last_seen":"2026-01-19T07:32:01.888687Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"21eb46c4a470071875f2f5ce4cd736c7","sha1":"53b4826474c2810a38477901546146c7e5b164a2","sha256":"18a94ada8c1fcb452435b878ea281662cdc4fbf91492407affadbd95f25b7d02","sha512":"3692105334b2cdde5a7266bb2be01450700af29a95fc90045eabe599ae01597451f66d910112985e5ed30ac4553af8a73b99810b5bf54292ad163be2ae79117a","ssdeep":"","tlshash":"a6e068e52843dd214fdaa4c6b9faf3dcb832af2836002d42f08c6501428cea93032f4c","size":381,"data":"","first_seen":"2025-12-22T08:57:38.248526Z","last_seen":"2026-03-13T07:33:43.960293Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-05T13:45:46.309922Z","times_seen":78462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3pkf5m0gd.com/aas/r45d/vki/1997409/3ac833c7.js","fqdn":"3pkf5m0gd.com","domain":"3pkf5m0gd.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fed5c7321c74e77d020e13d4e59a944c","sha1":"686fbd8a740280666674657743caf2337d1b4a28","sha256":"6e6549eaa82d242007e7710ce67b1b670c27d58e39770dc06a31148e9a0c9fb6","sha512":"a1c85614fffa9dd3418d679e4e8bd47ffbad4a949c224ba7a687a9c66a31caca1a8c015e54304f7a46b03adf4cc20047cd3a63da3b47d375d636d0eed2c69554","ssdeep":"1536:mfN2pG0T+C2Zngud46O4e7Ya7fFbdiSl7l:m6Ank61e7FFp","tlshash":"9163a89afa95b865035390f852bf001da33b3d6ca4fc1128b191e8d92c7cd4d9663f7a","size":71919,"data":"","first_seen":"2026-01-17T23:40:24.318753Z","last_seen":"2026-01-18T21:54:39.22123Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6414ce546e4a4a4c7c0ab76925749fe","sha1":"c9097d4e26968060cedfde84f25ed06a1f1205a5","sha256":"93fa875b21816a6d86b99d14414718121717fe85f51b35ae97dcb707fecdfb36","sha512":"01f0fbfb83ed0cb7b9f72f98968be712bd8e889879c59f7678b80ba6e433b44665763ac426a6783afe8bba62ff0158d778fe72f003412d4febadff5e2916e091","ssdeep":"","tlshash":"61c02b9c22030c7017f73b440bafb300b011321094941c31081133845531c03a705810","size":144,"data":"","first_seen":"2024-10-23T23:24:44.624106Z","last_seen":"2026-04-02T05:54:53.049138Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fd8d9643874b535493b3f63912875b96","sha1":"1a42e1a72a3f80fe37fe50a8bb80e4906a58f210","sha256":"ec7056cdf12af38329d4849654384dd6dfd53e9b08b2b83ea9cb679b8e21c9ff","sha512":"ed370e95692a9c912252fe96fee83c8d163b14b724200934168fec86e5573adbd7a381dcf23b4631105118318be9dc0a57f7165321edb696b491241d3e8f3046","ssdeep":"","tlshash":"cf5000030c0030000c000c0c00030033030cc00000000000000000c000c00000cf0000","size":10,"data":"","first_seen":"2025-09-06T11:29:55.809314Z","last_seen":"2026-03-18T10:25:33.014149Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-05T13:27:26.187795Z","times_seen":67431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a0d0a8342e8d70708caa9fc6e39b411","sha1":"e09882b9324c4988fdbbb928434e3c34e6976497","sha256":"f5dbc7582b5d890e38233911ce5de71440922669b69e62af1c75d2122468fd78","sha512":"bd38016f6a1b6c03296b560f8aac17731eaeaccfea30c2e1f78d4c53d9a2c6e32f61940c5802e8780f69f15a09179dc5250372f662c989bce44cf74af650f505","ssdeep":"","tlshash":"40d0c25ca896e38e407a703498bf9a089a3a307637570090610cc8f96f685b4aa81af9","size":285,"data":"","first_seen":"2024-12-22T12:24:20.166585Z","last_seen":"2026-03-13T07:33:43.962728Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/hls.js/1.5.7/hls.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed6568e5e9d245faf12e250d874ff998","sha1":"be07dbbb96597252ee53459215895650b9f25024","sha256":"a78b3603d762428caba2ef21674e4d47fbc4e7496292b28f845ba7372849360b","sha512":"7762c95e66f57fdaf18a96aa5cbd9387dfeeca9140d2171556028beccff6925c5a40186663249a67f9e858a2e40248ee052c37e45d27a22891d7e40ccff41e2b","ssdeep":"6144:COiJGtlIxXJdEDGd5ytZnJwMsIIBjMcqJxduktY69r/qMHG:CZxIGd5ytv5IrqJxdu+HG","tlshash":"0d943bed7695a02642c2b1a5903f4607633a7d0a3409c1acfa2be9d75db8d4db03bf74","size":412351,"data":"","first_seen":"2024-03-04T09:36:07Z","last_seen":"2026-03-28T19:23:41.250446Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3pkf5m0gd.com/get/1997409?zoneid=1997409\u0026jp=_cluwmmjuxwnwzgpaxptzom\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.2\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=fsc8L78aHR0cHM6Ly9nYW5ndXMubmV0L3ZvZHBsYXkvNTI2NjE1LnNodG1s\u0026afid=2649193114248704\u0026caifrq=ADQJWwAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=0\u0026pkw=0\u0026pload=2408\u0026rlp=%5B0%2C456%2C984%2C873%2C28844%2C12081%2C1246%2C11641%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"3pkf5m0gd.com","domain":"3pkf5m0gd.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9be76abc5c6e9855b1acadf08dc8c2a8","sha1":"6b0c3f2dac18bc0eefbdb50a4d0a88e5b7589bf0","sha256":"3552477db90e7eac15010b989a60c566ff299c3b848e20a7015a874c7d12e899","sha512":"14023655ef1728771d2142a47da3a6ce56945f155a86bb09480d66b62ba10a1d76834e2c8255340f070409b23596687d8c6a6d18fd4a4596ab4dfb7b5fc9ef7e","ssdeep":"","tlshash":"1f8004d41017d01071d571c0715753003000100550004d113543005cdc54153d070157","size":35,"data":"","first_seen":"2025-02-08T20:50:52.735637Z","last_seen":"2026-04-05T02:37:19.556436Z","times_seen":734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.140","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-04-05T12:57:46.247963Z","times_seen":2180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"273be68466f39f2144c9ef5261015be8","sha1":"0360dce33978e7ec062a10679eb33bee97c2eb12","sha256":"cd3f9f0f5b2c5f99c2e2900fce5262057ff7c7c6991e647097161331e0e820fd","sha512":"5b91582c2ea3e53533a760103d65f683912dffb21744f703a500f54c8772ee7fbb51ef5f61749c06cb71d70c27b9f8ab70f4175f3eab322919501579692c75ca","ssdeep":"","tlshash":"08e026bb35863a314e26a09496877b89af7ac2002d82d162a49c484888c659664b69c9","size":325,"data":"","first_seen":"2026-01-18T21:54:39.232718Z","last_seen":"2026-01-18T21:54:39.232718Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-05T13:45:46.309922Z","times_seen":78462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-05T13:48:07.070752Z","times_seen":293044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4d901f7b1da1baa5bd507a3c8d98241","sha1":"a5082065cdb4081bc4358577ab76c6bf8aedfb45","sha256":"f11914d890ad52d01affe06a569d85e9b1574efec0b2f751f3df9a13c31c7c96","sha512":"b71649a6ee68ad3428618ceba828925ff159021b2c803288b3daedc96d54f9744eb195bceb9326b6bca235123d161eaf8b2251c14ad0b2d9511db21bcd8b6798","ssdeep":"","tlshash":"2de0f134dc628263823fa2c4a3770129727c4d6032f8df72cc0b1b011f48b14dc54481","size":410,"data":"","first_seen":"2026-01-18T21:54:39.234718Z","last_seen":"2026-01-18T21:54:39.234718Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boxypluckunrelated.com/get/1997345?id=1997345\u0026pid=__clb-spot_1997345_ogo_1\u0026jp=_clgotqvbhhrtfbwbcwuqss\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.2-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=w7xSOyBaHR0cHM6Ly9nYW5ndXMubmV0L3ZvZHBsYXkvNTI2NjE1LnNodG1s\u0026afid=4619517951111168\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1133\u0026rlp=%5B0%2C49%2C99%2C73%2C863%2C1795%2C586%2C1355%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=2\u0026uf=0\u0026freq=0","fqdn":"boxypluckunrelated.com","domain":"boxypluckunrelated.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"67263cc27bd5216a47f92359141b187e","sha1":"7fc53fc5c47e8d4fa992ac507755afb432b22fb2","sha256":"d6d698f4d742ef1f50e9a9a41a7f03e0753fe097e2034ec53ba6a865202d3178","sha512":"762b47fed6baeeb89a2676eab23d8c7db59a79d1df5f60facddda8d7b39cfe8217df5c92084b5777c587ad5d3e29e0620f1666efeeba589b3657d33bc7d72e28","ssdeep":"96:4zr4b50T1aNrEU6dQjGqbn0T1aNrEU6dQjGnbZ0T1aNrEU6dQjGyYbu0T1aNrEUw:8EekGTyGmekGTyGVekGTyGyPekGTyGMO","tlshash":"cfc1d7c46c816c04082d6afb152efe924195fe7074ebccc8a996da7e6d96f3a5b30443","size":6059,"data":"","first_seen":"2026-01-18T21:54:39.212203Z","last_seen":"2026-01-18T21:54:39.212203Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.140","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-04-05T12:57:46.247963Z","times_seen":2180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-05T13:45:46.309922Z","times_seen":78462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LFDMM5L089","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ede68f54376f7926a563bb6e66b4c1df","sha1":"00b5412290ac3400208788785f0eb95c52fcaa2f","sha256":"144142ad0e7d8045e318682619f6de5f2a92a159dd3b442dc263c7c3701153ee","sha512":"fde2b255a3efd7a72f72cfa8266d470447b4a277ab16a657e3d56f3e523af3a17701fdb7bc46b2ec32069df9cf6a70c3d4a27b9c13824ec184f05b09de4b7d0e","ssdeep":"6144:3oRnbh1DGvjHjUG2tonsYDfc1YgdxBX83ospS2VK7GO:abTDwjFBns3X83Vu","tlshash":"88941a8e73c674265396f078503f018ba57b29a2b45cc896f189cce42e74a9a4277f7c","size":434388,"data":"","first_seen":"2026-01-18T08:31:18.276775Z","last_seen":"2026-01-18T21:54:39.209062Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"3pkf5m0gd.com/get/1997409?zoneid=1997409\u0026jp=_cluwmmjuxwnwzgpaxptzom\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.2\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=fsc8L78aHR0cHM6Ly9nYW5ndXMubmV0L3ZvZHBsYXkvNTI2NjE1LnNodG1s\u0026afid=2649193114248704\u0026caifrq=ADQJWwAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=0\u0026pkw=0\u0026pload=2408\u0026rlp=%5B0%2C456%2C984%2C873%2C28844%2C12081%2C1246%2C11641%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"3pkf5m0gd.com","domain":"3pkf5m0gd.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:12.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3pkf5m0gd.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 15:09:09 GMT","end":"Sun, 15 Mar 2026 15:09:08 GMT"},"fingerprint":{"sha1":"0C:3F:1C:FD:1B:88:04:19:08:0E:2E:19:7F:00:04:21:BB:2C:1A:81","sha256":"E2:9C:E5:C4:38:5D:95:FD:95:17:C2:FD:82:E2:02:C9:D4:54:93:26:6D:C4:BE:39:4C:AD:D2:17:AE:D7:E3:AB"}}},"request":{"raw":"GET /get/1997409?zoneid=1997409\u0026jp=_cluwmmjuxwnwzgpaxptzom\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.2\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=fsc8L78aHR0cHM6Ly9nYW5ndXMubmV0L3ZvZHBsYXkvNTI2NjE1LnNodG1s\u0026afid=2649193114248704\u0026caifrq=ADQJWwAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=0\u0026pkw=0\u0026pload=2408\u0026rlp=%5B0%2C456%2C984%2C873%2C28844%2C12081%2C1246%2C11641%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: 3pkf5m0gd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 18 Jan 2026 21:54:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 21 Feb 2027 21:54:12 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 21 Feb 2027 21:54:12 GMT; Secure; SameSite=None\nUID=2601181654b2c7616ec29d4e7ba1515b951b; Path=/; Expires=Sun, 21 Feb 2027 21:54:12 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"9be76abc5c6e9855b1acadf08dc8c2a8","sha1":"6b0c3f2dac18bc0eefbdb50a4d0a88e5b7589bf0","sha256":"3552477db90e7eac15010b989a60c566ff299c3b848e20a7015a874c7d12e899","sha512":"14023655ef1728771d2142a47da3a6ce56945f155a86bb09480d66b62ba10a1d76834e2c8255340f070409b23596687d8c6a6d18fd4a4596ab4dfb7b5fc9ef7e","ssdeep":"","tlshash":"1f8004d41017d01071d571c0715753003000100550004d113543005cdc54153d070157","first_seen":"2025-02-08T20:50:52.735637Z","last_seen":"2026-04-05T02:37:19.556436Z","times_seen":734,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"3pkf5m0gd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 30360\r\ncf-ray: 9c01544f1af2569d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-17b8b\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 407083\r\nexpires: Fri, 08 Jan 2027 21:54:10 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=94f0ovMXyOGQggMGr0PGxk%2F234HjLwD0dXOcnzxnXcYKztfX4SXvlU5ctz9iKuwmqXU5reb8wBSzjXswBDlOsNbOWksD6LTLQYAft3rx9f%2FyeEge40dkItPFya8qBmu9NBgjx7o3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97163,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-05T13:27:26.187795Z","times_seen":67431,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs4.imagebam.com/e9/38/e7/MEXPKC0_t.gif","fqdn":"thumbs4.imagebam.com","domain":"imagebam.com","tld":"com"},"ip":{"addr":"212.63.223.225","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imagebam.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:54:E8:10:23:71:91:D2:C6:56:EB:9E:84:9B:C5:7C:D9:F4:1D:D5","sha256":"EC:44:EC:3A:D8:9F:93:67:8B:1C:12:24:90:18:30:92:79:14:4D:82:5C:17:2B:ED:0C:F9:B6:03:84:2F:4C:1A"}}},"request":{"raw":"GET /e9/38/e7/MEXPKC0_t.gif HTTP/1.1\r\nHost: thumbs4.imagebam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 18 Jan 2026 21:54:11 GMT\r\nContent-Type: image/gif\r\nContent-Length: 2862307\r\nvary: x-s-token\r\nlast-modified: Tue, 26 Nov 2024 18:40:22 GMT\r\netag: \"2bace3-627d52e8f80d8\"\r\nX-Cache: HIT\r\nX-Whom: srv1535\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2862307,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 180","md5":"a76d3ae0a8da9dbd902f6336bb854898","sha1":"7218b0508eac4e50951c2683335584c3567cf0d8","sha256":"479daa5a148cefade349391d8e1667f1d2e1a05375305ef9f0603d4b02542e7c","sha512":"c0e0a81db20b9eed177e45fc0374824e7c73fe0aafee57c10efb4dfcc75f5af2d1d62c3c21c2b1c1242c8643b1489a7715cc4e6467b362ad3df5bcdc23f68fa4","ssdeep":"24576:sYKNTRhF2VsQlnnThsZ7xxmX68HsgOQqnGzuV5InsL:+58VRnNsXxgRHnaKA","tlshash":"db253336c6ab5649c3f3413ac89e852c8ff2fc5dee2054562a07caa4f1f35af14851e6","first_seen":"2025-07-29T23:56:11.981284Z","last_seen":"2026-03-01T23:39:50.094147Z","times_seen":172,"resource_available":false,"data":null}},"time_used":3122,"timings":{"blocked":366,"dns":8,"connect":25,"send":0,"wait":39,"receive":2342,"ssl":338},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m1.cffpng.com/20250604_200445438_sxL.gif","fqdn":"m1.cffpng.com","domain":"cffpng.com","tld":"com"},"ip":{"addr":"172.67.149.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f9742aa1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 15:21:28 GMT","end":"Thu, 16 Apr 2026 16:21:21 GMT"},"fingerprint":{"sha1":"AE:EE:76:74:CA:7D:56:EF:DA:0F:8C:05:9A:09:65:58:A4:A7:E9:08","sha256":"E7:5D:E9:00:A5:C7:CF:86:B9:4C:17:B7:F3:BB:C8:64:34:7D:93:9C:AF:F5:64:A5:E9:A3:9E:53:63:76:A9:51"}}},"request":{"raw":"GET /20250604_200445438_sxL.gif HTTP/1.1\r\nHost: m1.cffpng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 78972\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hH2JvdjHp2eUm0bNdVabNoG6GCbxc8LXuZeBXitRtWVr6hEQr8fUDIJNSkda2oO%2BRCCeZwERJYIEKDHWlLWQcjDqs1%2BBBgZT5NZS\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"1026b75f8e66c1d0646775831f9ad0b1\"\r\nlast-modified: Wed, 04 Jun 2025 12:04:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 5696\r\ncache-control: max-age=14400\r\ncf-ray: 9c015453a9b556a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78972,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"1026b75f8e66c1d0646775831f9ad0b1","sha1":"36cd55d7b20cabb2ea072fd686b544a006dcdab7","sha256":"fdbce3d2dab489d85ba4efa6efb206f78df802f8a9cd83e4b5ddb05dfc571c2f","sha512":"bf7522b6f6925c00a46076cc13f30ec61bfabc4cd8ac433e3afc7a08b65afd904c543ba2dc011fc06a4145726121879fd0a5138e668ece38499872ee940434ae","ssdeep":"1536:w8zUaFD42xLOWztfOhaPkPZFsZSdctq91M3atk2lq76dX4i9G:1LCWho5PTsZSdqqKatrlq76dIi9G","tlshash":"d973120149e8d387f40f9d986e01bab2b1e106928e12747b954759d0b20e44adefbfdd","first_seen":"2025-06-04T21:56:59.338113Z","last_seen":"2026-04-02T06:37:28.079808Z","times_seen":255,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":33,"connect":1,"send":0,"wait":36,"receive":8,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m1.cffpng.com/20251106_131731395_WMV.gif","fqdn":"m1.cffpng.com","domain":"cffpng.com","tld":"com"},"ip":{"addr":"172.67.149.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f9742aa1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 15:21:28 GMT","end":"Thu, 16 Apr 2026 16:21:21 GMT"},"fingerprint":{"sha1":"AE:EE:76:74:CA:7D:56:EF:DA:0F:8C:05:9A:09:65:58:A4:A7:E9:08","sha256":"E7:5D:E9:00:A5:C7:CF:86:B9:4C:17:B7:F3:BB:C8:64:34:7D:93:9C:AF:F5:64:A5:E9:A3:9E:53:63:76:A9:51"}}},"request":{"raw":"GET /20251106_131731395_WMV.gif HTTP/1.1\r\nHost: m1.cffpng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 439683\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fthsEt3%2B6oceQkBv4iGnTgjyoaOfolsCc5vevjFDvmU2ltQ7CIJ34r2Rt8xNc4ZqDDrtgy3aFsJhAvs7YOSWCQh26%2FFrOinlWjZi\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"19d982c6fb2c906ea92723f07a712c8b\"\r\nlast-modified: Thu, 06 Nov 2025 05:17:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 4246\r\ncache-control: max-age=14400\r\ncf-ray: 9c015453b9c856a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439683,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 350 x 350","md5":"19d982c6fb2c906ea92723f07a712c8b","sha1":"1bc6ca791dd35662834d37ddf1c0e5011e1bd9f0","sha256":"94f32101e41a21a5f52c9a70379273fd3562f3606c26064899b6f1f0f4bde6a1","sha512":"0d5eac6602622022fa3da7b27f4dd030dd91d1ba598c4f9588806d57698f5148d7b87ade633fb1810fe6f8aadebb551a4ba8a137212860d754a36e86609e5201","ssdeep":"12288:N7Lt81YtI9ssDatwBhe9/u6QZL+sSUG+pK1M8BBh:JB81YtIMIhR6QZG1MCz","tlshash":"ab9423361f49f54b7d7197bae29f8a0c19b56b0af01dd3441e62e0349c3245e8c6abbc","first_seen":"2025-12-19T09:12:06.862512Z","last_seen":"2026-01-18T21:54:39.180616Z","times_seen":32,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":2,"connect":4,"send":0,"wait":44,"receive":30,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user-images.githubusercontent.com/138796159/281945527-621174f1-22c7-4f94-bdc8-6b86d3b7866c.gif","fqdn":"user-images.githubusercontent.com","domain":"user-images.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /138796159/281945527-621174f1-22c7-4f94-bdc8-6b86d3b7866c.gif HTTP/1.1\r\nHost: user-images.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 10 Nov 2023 03:27:50 GMT\r\netag: \"1b49814513dc1ad889d7edb8f0fe3783\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncontent-type: image/gif\r\ncache-control: max-age=3600\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\nvia: 1.1 varnish\r\nage: 413731\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1156\r\nx-timer: S1768773251.371851,VS0,VE0\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; sandbox;\r\nx-fastly-request-id: a2776a74284f58e08cfcde1d30965b7a1959cbcf\r\nserver: GitHub Cloud\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: https://github.com\r\ncontent-length: 106825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106825,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"1b49814513dc1ad889d7edb8f0fe3783","sha1":"4bf8be06d4a92994d7406e4b8ee11575bf241ef9","sha256":"9646a6506f777102a0873a76e28dff82b3752e97306fa50d6a51e83ad1018119","sha512":"282831bbfe4de414ef8a157c3834ec8dfff51f1a4f294a2c2322a8d1e601453b7746a7bfc0e51461a00f96fb504a6dd5677c658d729cab0f2413fcedd8b5fc5b","ssdeep":"3072:Ufc6uHVwwDoOkapJy26fPJJRAqoNGebBsnmt4OJx:51wwcReJ96fPJObBnt4yx","tlshash":"cfa312dec21feb29941c5b78bffe64069d2b910b75906f780ea0e102ce2b5cf6995d10","first_seen":"2023-11-22T08:42:29Z","last_seen":"2026-04-02T06:37:28.084392Z","times_seen":358,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":18,"connect":43,"send":0,"wait":33,"receive":54,"ssl":211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3pkf5m0gd.com/solid.gif?z=1997409\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.2\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=fsc8L78aHR0cHM6Ly9nYW5ndXMubmV0L3ZvZHBsYXkvNTI2NjE1LnNodG1s\u0026afid=2649193114248704\u0026caifrq=ADQJWwAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=0\u0026pkw=0\u0026pload=2408\u0026rlp=%5B0%2C456%2C984%2C873%2C28844%2C12081%2C1246%2C11641%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"3pkf5m0gd.com","domain":"3pkf5m0gd.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:12.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3pkf5m0gd.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 15:09:09 GMT","end":"Sun, 15 Mar 2026 15:09:08 GMT"},"fingerprint":{"sha1":"0C:3F:1C:FD:1B:88:04:19:08:0E:2E:19:7F:00:04:21:BB:2C:1A:81","sha256":"E2:9C:E5:C4:38:5D:95:FD:95:17:C2:FD:82:E2:02:C9:D4:54:93:26:6D:C4:BE:39:4C:AD:D2:17:AE:D7:E3:AB"}}},"request":{"raw":"POST /solid.gif?z=1997409\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.2\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=fsc8L78aHR0cHM6Ly9nYW5ndXMubmV0L3ZvZHBsYXkvNTI2NjE1LnNodG1s\u0026afid=2649193114248704\u0026caifrq=ADQJWwAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=0\u0026pkw=0\u0026pload=2408\u0026rlp=%5B0%2C456%2C984%2C873%2C28844%2C12081%2C1246%2C11641%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: 3pkf5m0gd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gangus.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 18 Jan 2026 21:54:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 21 Feb 2027 21:54:12 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 21 Feb 2027 21:54:12 GMT; Secure; SameSite=None\nUID=2601181654066e18c86a6549b5ad6ff4cb1d; Path=/; Expires=Sun, 21 Feb 2027 21:54:12 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-05T13:42:34.90902Z","times_seen":20488,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"3pkf5m0gd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 16149\r\ncf-ray: 9c01544e794756a5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04010-1d970\"\r\nlast-modified: Mon, 04 May 2020 16:17:20 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 407939\r\nexpires: Fri, 08 Jan 2027 21:54:10 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=61IcXGKY1mpLgpp8s9%2B0%2BWI1Cm2KPuvxChss7FQXOoAamb9QFlry4QH8J0dhtk3BVpum%2BjEtNE8B%2B94bfbKFrSOr65HnkWgmujThz%2F2kKR5%2ByfjQZJp%2FKWcfP7mFllYPR9EdfKH4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121200,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"ec3bb52a00e176a7181d454dffaea219","sha1":"6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68","sha256":"f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c","sha512":"e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"2cc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-05T13:24:26.817531Z","times_seen":56352,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":13,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.erpweb.eu.org/imgs/2026/01/06351208f536cc15.png","fqdn":"img.erpweb.eu.org","domain":"erpweb.eu.org","tld":"eu.org"},"ip":{"addr":"104.21.92.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erpweb.eu.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 04:30:51 GMT","end":"Sun, 05 Apr 2026 05:29:33 GMT"},"fingerprint":{"sha1":"2B:26:83:7E:AB:CA:8E:AA:75:84:35:46:42:F7:78:75:64:C4:0B:EF","sha256":"FC:1A:95:58:26:24:46:04:43:13:8E:AC:DB:52:9E:8D:61:33:34:61:C0:74:E6:BE:C3:70:CD:B1:3C:FD:C1:6E"}}},"request":{"raw":"GET /imgs/2026/01/06351208f536cc15.png HTTP/1.1\r\nHost: img.erpweb.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 39971\r\nlast-modified: Wed, 07 Jan 2026 09:54:33 GMT\r\netag: \"9c23-647c9477b3770\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 992727\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lWqChiSsQkwEDRPVNrC0rWr%2FgipLL%2BOq%2FjMMfOLx8mxN%2BqXTwJ8eq2Oqs2Uk2%2B7Q08ltnjOfvG8sWyqwizDGnzQy3RjAhS2L7BEwWcOAdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET,HEAD,POST,OPTIONS\r\naccess-control-allow-origin: *\r\ncf-ray: 9c01545439117127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"8552940c06351208f536cc153e734cdc","sha1":"3c4b026a643c962f953d3e5605bf160fa73edf5c","sha256":"bc8abd30f91ab1d54fe2c6fa5e3c78fc800f5c80118e73da6a6fcf0d94e95c2e","sha512":"2c47a9bc3ef01d97d644451fc329cf9d924c90c412120171259b25688b0bf9b00fb263491aeedfc26935dcd94c017871c5fac16c3abe415d3ddf7c10c5522511","ssdeep":"768:GjshBzlQS8X+6Wd1pawsVUJwkod25Y27yo4d8JOXVqW9TH2z:GjshBz6XLWFAGjc2L2/uUVq6TH2z","tlshash":"ed03f1fad0c56005e1861e1e2a97dbe6c121e27a5701ae9e9b38f3758136cf0751ce78","first_seen":"2026-01-07T10:13:42.275427Z","last_seen":"2026-02-07T06:56:44.749397Z","times_seen":24,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":11,"connect":18,"send":0,"wait":24,"receive":2,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boxypluckunrelated.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.1.2\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fgangus.net%2Fvodplay%2F526615.shtml","fqdn":"boxypluckunrelated.com","domain":"boxypluckunrelated.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:12.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boxypluckunrelated.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:13:21 GMT","end":"Mon, 06 Apr 2026 16:13:20 GMT"},"fingerprint":{"sha1":"F4:38:25:C5:47:D7:FE:94:17:A1:F7:AD:DC:71:48:7B:7D:8D:DF:F5","sha256":"68:55:B0:94:16:DC:4A:D4:12:0F:0A:58:10:9D:1B:91:BE:24:06:82:56:63:FB:98:B1:87:C7:66:3A:6B:AE:20"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.1.2\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fgangus.net%2Fvodplay%2F526615.shtml HTTP/1.1\r\nHost: boxypluckunrelated.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2601181654dd3fa53b1c754353bb74871c91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 18 Jan 2026 21:54:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"boxypluckunrelated.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.140","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 21:54:10 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Wed, 26 Nov 2025 01:16:23 GMT\r\nConnection: close\r\nETag: \"692654e7-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-04-05T12:57:46.247963Z","times_seen":2180,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":102,"dns":31,"connect":34,"send":0,"wait":34,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boxypluckunrelated.com/check.html","fqdn":"boxypluckunrelated.com","domain":"boxypluckunrelated.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boxypluckunrelated.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:13:21 GMT","end":"Mon, 06 Apr 2026 16:13:20 GMT"},"fingerprint":{"sha1":"F4:38:25:C5:47:D7:FE:94:17:A1:F7:AD:DC:71:48:7B:7D:8D:DF:F5","sha256":"68:55:B0:94:16:DC:4A:D4:12:0F:0A:58:10:9D:1B:91:BE:24:06:82:56:63:FB:98:B1:87:C7:66:3A:6B:AE:20"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: boxypluckunrelated.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 25 Dec 2025 09:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694cfe32-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"boxypluckunrelated.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lsbbf2.com/20240821/dy13ohGl/1000kb/hls/index.m3u8","fqdn":"lsbbf2.com","domain":"lsbbf2.com","tld":"com"},"ip":{"addr":"142.248.99.101","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbbf1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 06:49:29 GMT","end":"Tue, 07 Apr 2026 06:49:28 GMT"},"fingerprint":{"sha1":"30:C9:F6:C9:51:76:10:59:60:B8:F7:2C:64:E2:FB:AC:EA:AD:A0:D6","sha256":"2D:07:B0:7C:E8:3F:E2:36:F7:27:5B:5A:BD:52:29:43:81:2B:04:EC:C7:CE:D3:87:CB:55:C0:CC:19:A7:04:52"}}},"request":{"raw":"GET /20240821/dy13ohGl/1000kb/hls/index.m3u8 HTTP/1.1\r\nHost: lsbbf2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gangus.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: application/vnd.apple.mpegURL\r\ncontent-length: 69599\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nage: 132464\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":69599,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"cc759ff10dc9ec52fd6364047375c812","sha1":"c3d590b2e586a373a75ab66253ebb94f8639316d","sha256":"121db10ed5efaeeddaf93d39f87bc310c7bc15493f9b1d1071c5cc81f4f854ba","sha512":"6b202310472d953539737229e94635366bc72d6e5e6c7d1ed6447ece1e61b1782f5da0e98549c4a365cea28eb0796aa1c6e5788149184d70e4f2b71387373cac","ssdeep":"768:wvqAmEtMTRFx1Zz+r6C+wgsGIH5Fw4at8YNfDDrntgqy4WXhDHA6OLZsQYuX:wvATNyZLHsTtfAhQG0","tlshash":"0d630d997441a2254e394bfdc9cb64f53e58ff54cc42a3816461caf72eb6343ee9089c","first_seen":"2026-01-18T21:54:39.187714Z","last_seen":"2026-01-18T21:54:39.187714Z","times_seen":1,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/hls.js/1.5.7/hls.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/hls.js/1.5.7/hls.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 102761\r\ncf-ray: 9c01544f1afa569d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65dd3b52-19169\"\r\nlast-modified: Tue, 27 Feb 2024 01:30:58 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 531573\r\nexpires: Fri, 08 Jan 2027 21:54:10 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WB%2B%2FKSSP%2Fed2FxQc3aKIW%2FTWd07hJx5QIKSiaSLYNzwvO1PjR1dYoQHja0odygGoF%2FMtgDH3qzeb5azEf2SgCj3m%2FBBce55jH2Zp18qJPvryyCUY6kd3qowc0wO%2FSD0LVs2nVqHK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":412351,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ed6568e5e9d245faf12e250d874ff998","sha1":"be07dbbb96597252ee53459215895650b9f25024","sha256":"a78b3603d762428caba2ef21674e4d47fbc4e7496292b28f845ba7372849360b","sha512":"7762c95e66f57fdaf18a96aa5cbd9387dfeeca9140d2171556028beccff6925c5a40186663249a67f9e858a2e40248ee052c37e45d27a22891d7e40ccff41e2b","ssdeep":"6144:COiJGtlIxXJdEDGd5ytZnJwMsIIBjMcqJxduktY69r/qMHG:CZxIGd5ytv5IrqJxdu+HG","tlshash":"0d943bed7695a02642c2b1a5903f4607633a7d0a3409c1acfa2be9d75db8d4db03bf74","first_seen":"2024-03-04T09:36:07Z","last_seen":"2026-03-28T19:23:41.250446Z","times_seen":197,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.erpweb.eu.org/imgs/2025/11/b3f3e7ab65a0ab29.gif","fqdn":"img.erpweb.eu.org","domain":"erpweb.eu.org","tld":"eu.org"},"ip":{"addr":"104.21.92.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erpweb.eu.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 04:30:51 GMT","end":"Sun, 05 Apr 2026 05:29:33 GMT"},"fingerprint":{"sha1":"2B:26:83:7E:AB:CA:8E:AA:75:84:35:46:42:F7:78:75:64:C4:0B:EF","sha256":"FC:1A:95:58:26:24:46:04:43:13:8E:AC:DB:52:9E:8D:61:33:34:61:C0:74:E6:BE:C3:70:CD:B1:3C:FD:C1:6E"}}},"request":{"raw":"GET /imgs/2025/11/b3f3e7ab65a0ab29.gif HTTP/1.1\r\nHost: img.erpweb.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 557566\r\nlast-modified: Mon, 17 Nov 2025 09:53:33 GMT\r\netag: \"881fe-643c751ff881d\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 306545\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=15WT1we0Dft4h6IXo0itMkNVespcbSzB%2FbJ5mnCt9s2l9j5egvSLHV%2Fx%2BqqqSBVa56ZUdhJD6%2F27S0nCjH4PMHY8y8ZyiSnZBcrga0qr%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET,HEAD,POST,OPTIONS\r\naccess-control-allow-origin: *\r\ncf-ray: 9c01545479477127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":557566,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"08981705b3f3e7ab65a0ab29d4ae36b4","sha1":"e2471798756bb33438743f5f675ac3991b53aae0","sha256":"983e76151091387c558e5b0a32893295e332c4184aebe0a0987d96c9776fbe32","sha512":"7f8196eafd17fb6cc3a0e7bffb0e6a7d7d6a7120e26bb36932e2bfb58b219aab1c1a169ee88ab9955cbc583340a9ed362deffb561fbdc084de97303b2917fffd","ssdeep":"12288:yfowKmrvAjqID00HKc9SZf8tQC+smCFNemDPTgAUgUrBEOW:yfoQrIQlcaf83+smy8mrTXUgUri","tlshash":"05c4234bcc9ca8b4de18bf1664cecd4be202f0ca05759097dd4e91f593bb62ec4a944a","first_seen":"2025-02-12T11:40:48.696541Z","last_seen":"2026-04-02T06:37:28.104689Z","times_seen":353,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":22,"connect":18,"send":0,"wait":19,"receive":28,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/709/557/01d/70955701d2cb9942742e85402b1cc08a9aba7c9b.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 06:24:57 GMT","end":"Sat, 11 Apr 2026 07:24:53 GMT"},"fingerprint":{"sha1":"85:31:6D:37:59:CC:E4:1E:9E:25:D3:EC:50:FB:F3:0B:2D:9F:C3:0E","sha256":"31:A7:9F:AB:94:EA:14:50:1C:73:E7:70:8B:27:3B:54:9F:6C:AA:B6:BB:22:CC:68:78:D9:19:1B:BD:13:04:FA"}}},"request":{"raw":"GET /bn/709/557/01d/70955701d2cb9942742e85402b1cc08a9aba7c9b.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 19875\r\ncf-ray: 9c0154581a295696-OSL\r\nx-amz-id-2: 7QtuLWgLQKls4w49wKnvL/LYosU9ob7UFCgPyLf+iKLMLpinQpHSFMs0KghN97pz91HJL1tVh3EwXhj60I7w1RLZz1rmMM7TWg8bxNYShwQ=\r\nx-amz-request-id: 4EKQXZY4VQX1BJ7B\r\nlast-modified: Tue, 16 Sep 2025 11:09:40 GMT\r\netag: \"fbffbdc165e1d772c196b62d9e6f1605\"\r\nx-amz-server-side-encryption: AES256\r\nage: 1526818\r\ncontent-range: bytes 0-19874/19875\r\nexpires: Wed, 18 Feb 2026 21:54:11 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19875,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"fbffbdc165e1d772c196b62d9e6f1605","sha1":"70955701d2cb9942742e85402b1cc08a9aba7c9b","sha256":"a85a47b45ed68de6721bca293dd9e9d7ae4860ba870c1d159ab63e4b18b403c9","sha512":"43f1d4f190b07c31ce0edea3681f1bc4570a03c3ee2ba211152eb84a736b959caed59967c9d03af9010ad32cdbfde245bf6d069f9e532683ea7e3b9b9867c274","ssdeep":"384:tk8/0cbcl7yhNOayf+7m4HEZaY4cIiZ74udStlqCA5RC3/JZgG+6S1mtkVYcYlZC:FTGib/JWpghi","tlshash":"0e92a216ab3781c7f24963bd9cf3e316332ae2196743b71b47a07168fcb5285cd61886","first_seen":"2025-03-28T22:16:25.930444Z","last_seen":"2026-04-01T02:45:56.92965Z","times_seen":579,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":59,"dns":42,"connect":1,"send":0,"wait":14,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.boxypluckunrelated.com/static/video/bn/709/557/01d/70955701d2cb9942742e85402b1cc08a9aba7c9b.mp4","fqdn":"www.boxypluckunrelated.com","domain":"boxypluckunrelated.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:12.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boxypluckunrelated.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:13:21 GMT","end":"Mon, 06 Apr 2026 16:13:20 GMT"},"fingerprint":{"sha1":"F4:38:25:C5:47:D7:FE:94:17:A1:F7:AD:DC:71:48:7B:7D:8D:DF:F5","sha256":"68:55:B0:94:16:DC:4A:D4:12:0F:0A:58:10:9D:1B:91:BE:24:06:82:56:63:FB:98:B1:87:C7:66:3A:6B:AE:20"}}},"request":{"raw":"GET /static/video/bn/709/557/01d/70955701d2cb9942742e85402b1cc08a9aba7c9b.mp4 HTTP/1.1\r\nHost: www.boxypluckunrelated.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sun, 18 Jan 2026 21:54:12 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 19875\r\nlast-modified: Thu, 15 Jan 2026 18:54:08 GMT\r\netag: \"696937d0-4da3\"\r\nexpires: Thu, 19 Mar 2026 21:54:12 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-19874/19875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19875,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"fbffbdc165e1d772c196b62d9e6f1605","sha1":"70955701d2cb9942742e85402b1cc08a9aba7c9b","sha256":"a85a47b45ed68de6721bca293dd9e9d7ae4860ba870c1d159ab63e4b18b403c9","sha512":"43f1d4f190b07c31ce0edea3681f1bc4570a03c3ee2ba211152eb84a736b959caed59967c9d03af9010ad32cdbfde245bf6d069f9e532683ea7e3b9b9867c274","ssdeep":"384:tk8/0cbcl7yhNOayf+7m4HEZaY4cIiZ74udStlqCA5RC3/JZgG+6S1mtkVYcYlZC:FTGib/JWpghi","tlshash":"0e92a216ab3781c7f24963bd9cf3e316332ae2196743b71b47a07168fcb5285cd61886","first_seen":"2025-03-28T22:16:25.930444Z","last_seen":"2026-04-01T02:45:56.92965Z","times_seen":579,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"www.boxypluckunrelated.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8722\r\ncf-ray: 9c01544f1af6569d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04010-90b5\"\r\nlast-modified: Mon, 04 May 2020 16:17:20 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 237583\r\nexpires: Fri, 08 Jan 2027 21:54:10 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lTTU7iey6Q7SczHuM3WlRzjpcqv%2F%2F7p6yDYizUrec8Z%2FaR2JbTuEYjrKTkImxUAAX8uhaU6ldgZ%2BlLHePHUXiYKvqBFEZsUEVseg%2B%2Fp28MH4L8%2BeYLCIe2hAHQBYUt8PCpMmEnvh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-05T13:24:26.834109Z","times_seen":75472,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.erpweb.eu.org/imgs/2025/11/f009d57dc73fc7fa.gif","fqdn":"img.erpweb.eu.org","domain":"erpweb.eu.org","tld":"eu.org"},"ip":{"addr":"104.21.92.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erpweb.eu.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 04:30:51 GMT","end":"Sun, 05 Apr 2026 05:29:33 GMT"},"fingerprint":{"sha1":"2B:26:83:7E:AB:CA:8E:AA:75:84:35:46:42:F7:78:75:64:C4:0B:EF","sha256":"FC:1A:95:58:26:24:46:04:43:13:8E:AC:DB:52:9E:8D:61:33:34:61:C0:74:E6:BE:C3:70:CD:B1:3C:FD:C1:6E"}}},"request":{"raw":"GET /imgs/2025/11/f009d57dc73fc7fa.gif HTTP/1.1\r\nHost: img.erpweb.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 304914\r\nlast-modified: Mon, 17 Nov 2025 09:54:48 GMT\r\netag: \"4a712-643c756744c9c\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 230939\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBm72bO1b8VABhig%2Fs7bLnWIyzf4nSZ%2FYY3BZZA40AiPfv1%2FrEDDrL0YOfyVpRIUPoscX8FY7DDq6D6IbZ7BlXhhG0q8dBnVo2jkO8b6IQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET,HEAD,POST,OPTIONS\r\naccess-control-allow-origin: *\r\ncf-ray: 9c015454d99b7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304914,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"b295c096f009d57dc73fc7fae8f837d0","sha1":"824f7b1ec1bc674dd2ac5b0a16f956a141ddaec1","sha256":"397ab0c0cf9fe4bd54e1dcbaf48f663e414122a41ed0435be0d6efbd3bfee457","sha512":"d56172abbff7ad202dd1d0427180df2e5c9ceacf759ffcd850656dabd011baf3cff5b2b50753aca215a25dfb91cf48a752cf80f93533ad97108abe9552da1ed8","ssdeep":"6144:2gKqwpq6pIMPmr4xMUS7apRgQz9G61avkHy/8KsOOU:GpIceUS0eQzd1aGvK1","tlshash":"2754232e8e143acb600e1d0e6c191a639e65e2fd76138acd781c9d86d37cc2de1f9711","first_seen":"2025-12-31T22:43:51.170647Z","last_seen":"2026-02-07T06:56:44.730244Z","times_seen":31,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":18,"connect":15,"send":0,"wait":13,"receive":7,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/favicon.ico","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gangus.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 01:19:29 GMT","end":"Sun, 22 Mar 2026 02:17:53 GMT"},"fingerprint":{"sha1":"AD:2E:CA:E9:64:B5:EB:53:94:55:66:9D:3C:3D:23:38:5E:80:A6:58","sha256":"E2:F9:18:E1:63:89:51:7D:E9:61:DC:77:62:1E:F2:CF:67:76:92:14:37:74:F2:8F:12:E8:E6:C6:F9:A3:D7:7E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gangus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gangus.net/vodplay/526615.shtml\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=vbIihVWuanLRNApVH9P3WAFbDbF4Gqy2bMjs3zWG; wxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5vukRetkWsslBKZle1Z6dMS4umD92mn5NcrQET6U-cvVWV-eHO-ZeIseI; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 31 Oct 2024 11:44:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Jan 2026 04:53:51 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=31536000\r\nage: 2394062\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IsdRyRdoUcbL%2Fm0%2BhLSkyOjzCGYX2rL3b0BJL8jmGskcAfdKkdSBYremsZoVDA8CZ1NcNT0VW4J2kxv8D4bWdz9gk5dHdlJx\"}]}\r\netag: W/\"67236d94-1083e\"\r\ncontent-encoding: br\r\ncf-ray: 9c0154525979b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"442f7210f6b618147c3e00e98274007e","sha1":"503266e86c13136efe81e761bc23348f5699bd88","sha256":"5b2a62fcea48c3d149b4ebf234643e6cb160144c726393b8a6308f168e648339","sha512":"e3a51aa8f7501743b5626e48c72dffb300b0108eed7a52cdd2db8bc0dbfc366fe0bd266be026167d1d2aa1f35f20ac372e8d7afb66a2ef26fd7a7ef86ea7f6be","ssdeep":"384:ypAhpNH6HGk1K2ylYliOd2C2ikd4OQSl2uVvFpHP0nKmTV:ZGHGb2WuiOd2S4V1lfVvvHPL2","tlshash":"4063ec81be90c88ee4251638c82dd6fc616e3c85ec4094037be7bfdfb872e92546a55d","first_seen":"2023-05-22T17:27:12Z","last_seen":"2026-03-19T08:16:17.946641Z","times_seen":373,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m1.cffpng.com/20250604_192227372_uMG.jpg","fqdn":"m1.cffpng.com","domain":"cffpng.com","tld":"com"},"ip":{"addr":"172.67.149.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f9742aa1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 15:21:28 GMT","end":"Thu, 16 Apr 2026 16:21:21 GMT"},"fingerprint":{"sha1":"AE:EE:76:74:CA:7D:56:EF:DA:0F:8C:05:9A:09:65:58:A4:A7:E9:08","sha256":"E7:5D:E9:00:A5:C7:CF:86:B9:4C:17:B7:F3:BB:C8:64:34:7D:93:9C:AF:F5:64:A5:E9:A3:9E:53:63:76:A9:51"}}},"request":{"raw":"GET /20250604_192227372_uMG.jpg HTTP/1.1\r\nHost: m1.cffpng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12093\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eK3SmBb8nyuc5PSNB%2FisC9Gm3q7FwTTnNhy5tQS3lFcvKjdFGcGUYgEv%2FW4AioqY2b5Z33RclMdcShDmPxtjeLJJbrTJu4DJB0r8\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"802d0785aa99bbfcf02f1a3c75ab14d1\"\r\nlast-modified: Wed, 04 Jun 2025 11:22:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 5202\r\ncache-control: max-age=14400\r\ncf-ray: 9c0154541a4856a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x200, components 3","md5":"802d0785aa99bbfcf02f1a3c75ab14d1","sha1":"b989c243ebd5e2e80f46b8b13861b7ca0cabc3b3","sha256":"a5da169cd311131169b3b4d92941043feb6527c0e600f952d920bf7184ad0a80","sha512":"1b4eeb353200785c1bc9cc1f4bfd22f23baf429ba6e2d0306e8b25280962b53277a5e4959fc29f7d37ea9c70feb3f3a9e0db981c881c55d0e1ed9dc763b7fd26","ssdeep":"192:4uohjhSuHpMbe4Fvq5Ix+7sBophViLyoYwfKLZBYRNSpd2iT/rdvG54vlM9i3tqz:4uolMuH4FkI4VphOyoYOKtBYNSpU6hFk","tlshash":"8342cf640853518be8df2ceb0ffabb98dd69fa32515b4754b886db927cc16584743301","first_seen":"2025-06-04T21:56:59.34556Z","last_seen":"2026-04-02T06:37:28.072773Z","times_seen":253,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":3,"connect":4,"send":0,"wait":58,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m1.cffpng.com/2025020810f8tgt.gif","fqdn":"m1.cffpng.com","domain":"cffpng.com","tld":"com"},"ip":{"addr":"172.67.149.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f9742aa1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 15:21:28 GMT","end":"Thu, 16 Apr 2026 16:21:21 GMT"},"fingerprint":{"sha1":"AE:EE:76:74:CA:7D:56:EF:DA:0F:8C:05:9A:09:65:58:A4:A7:E9:08","sha256":"E7:5D:E9:00:A5:C7:CF:86:B9:4C:17:B7:F3:BB:C8:64:34:7D:93:9C:AF:F5:64:A5:E9:A3:9E:53:63:76:A9:51"}}},"request":{"raw":"GET /2025020810f8tgt.gif HTTP/1.1\r\nHost: m1.cffpng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 557566\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFk0C5tkHbSI6BtCJti%2BNvZbczzdJ7jsMGy2gMTsN3n%2FIicQHgc1Y7MSSgBePkRQhBrj%2BzLOc9rZO%2FVg7msn4FrwHCJ0IIcGeQz9\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"08981705b3f3e7ab65a0ab29d4ae36b4\"\r\nlast-modified: Sat, 08 Feb 2025 10:22:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 5323\r\ncache-control: max-age=14400\r\ncf-ray: 9c015453a9ba56a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":557566,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"08981705b3f3e7ab65a0ab29d4ae36b4","sha1":"e2471798756bb33438743f5f675ac3991b53aae0","sha256":"983e76151091387c558e5b0a32893295e332c4184aebe0a0987d96c9776fbe32","sha512":"7f8196eafd17fb6cc3a0e7bffb0e6a7d7d6a7120e26bb36932e2bfb58b219aab1c1a169ee88ab9955cbc583340a9ed362deffb561fbdc084de97303b2917fffd","ssdeep":"12288:yfowKmrvAjqID00HKc9SZf8tQC+smCFNemDPTgAUgUrBEOW:yfoQrIQlcaf83+smy8mrTXUgUri","tlshash":"05c4234bcc9ca8b4de18bf1664cecd4be202f0ca05759097dd4e91f593bb62ec4a944a","first_seen":"2025-02-12T11:40:48.696541Z","last_seen":"2026-04-02T06:37:28.104689Z","times_seen":353,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":2,"connect":4,"send":0,"wait":33,"receive":72,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lsbbf2.com/20251223/EkK0k29J/2063kb/hls/q004H0ZS.ts","fqdn":"lsbbf2.com","domain":"lsbbf2.com","tld":"com"},"ip":{"addr":"142.248.99.101","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:12.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbbf1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 06:49:29 GMT","end":"Tue, 07 Apr 2026 06:49:28 GMT"},"fingerprint":{"sha1":"30:C9:F6:C9:51:76:10:59:60:B8:F7:2C:64:E2:FB:AC:EA:AD:A0:D6","sha256":"2D:07:B0:7C:E8:3F:E2:36:F7:27:5B:5A:BD:52:29:43:81:2B:04:EC:C7:CE:D3:87:CB:55:C0:CC:19:A7:04:52"}}},"request":{"raw":"GET /20251223/EkK0k29J/2063kb/hls/q004H0ZS.ts HTTP/1.1\r\nHost: lsbbf2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gangus.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 448568\r\nlast-modified: Tue, 23 Dec 2025 12:50:05 GMT\r\ncontent-disposition: attachment; filename=\"q004H0ZS.ts\"\r\netag: \"694a8ffd-6d838\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 20742\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":448568,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"3c75a8dc9d51455f8f1fa4956b1f1a2d","sha1":"ea435a7fb68c90a8effee93758ed96901512689f","sha256":"9f1f6301ef1ea668524dda600c04fc0456ca6d6a0a4ddf5ae884d6028a8625ce","sha512":"f7d26c414dc869549170ed7b4008fa287d1d04d04286717d58665225b9f9f77b9bd69e455c7a66c993190f1098fa21f836848436fa94652bcc80a8b8e4d49b6e","ssdeep":"12288:ye34gl6aKr09WGMF0isfq4lgv88i5ietNJfN6++OvC0R:ya6P09WGMFbsfq4GU8iDN6+xvC4","tlshash":"ba941209afe47c93cc6b64724609f332a2406e948b89dfeb646c391ef5fb7e0d4a5414","first_seen":"2025-12-27T01:53:07.886163Z","last_seen":"2026-04-05T06:40:17.99047Z","times_seen":352,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":439,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.catbox.moe/y3hh31.jpg","fqdn":"files.catbox.moe","domain":"catbox.moe","tld":"moe"},"ip":{"addr":"108.181.20.35","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catbox.moe","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 20:55:15 GMT","end":"Tue, 14 Apr 2026 20:55:14 GMT"},"fingerprint":{"sha1":"27:89:BE:6E:2B:0B:87:52:08:C2:BC:D4:D6:B4:7C:CA:B4:62:40:C6","sha256":"DB:DE:FD:34:51:7A:90:BB:B9:64:0D:52:73:6C:88:95:C5:89:7D:E2:83:F6:9F:C3:5A:30:8A:87:3D:4C:33:13"}}},"request":{"raw":"GET /y3hh31.jpg HTTP/1.1\r\nHost: files.catbox.moe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32917\r\nlast-modified: Wed, 19 Nov 2025 00:02:21 GMT\r\netag: \"691d090d-8095\"\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32917,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 860x120, components 3","md5":"dfc9385ba0b9296195c04d85acd7330e","sha1":"926c32f13a37ecd676826d75a56490c49b750aa2","sha256":"d7711a5d2a3d4cb61a75057b58ee00d62452664cd3ed33e53232ddd0fd5b0baa","sha512":"32bf23a43328da55d05136d4dfa4d5ac2e085de49e1e4b4ff9cb76ad2a6e606c4103bdb5ce99d018916003ae9a7cb7ae3f71dc74a31a58386b6d46b343fa8e0d","ssdeep":"768:/sEKgU6G8tH3A/joMKgQQgFlK1KuIwDtGqquch57qXMMazFr:UNgd3A7oMwFlK1VI0tGffd8Yr","tlshash":"4ce2f286ff9373d1aa2ab7785dd3d84eda70ab48843a153f48109a38d1e1dac05dd3e4","first_seen":"2025-11-20T11:17:31.997926Z","last_seen":"2026-01-18T21:54:39.19723Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1331,"timings":{"blocked":507,"dns":14,"connect":154,"send":0,"wait":156,"receive":150,"ssl":322},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"files.catbox.moe","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/twitter-bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gangus.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 18028\r\ncf-ray: 9c0154501be0569d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb04010-466c\"\r\nlast-modified: Mon, 04 May 2020 16:17:20 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 414369\r\nexpires: Fri, 08 Jan 2027 21:54:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xcAkmpjmBjdJ9XZn45C8j9KQOX6isGTLy5EqIQRJHBpkHWZG98%2BZBEwbZT%2FqAdjccDIKn%2FoQQBxFyb8SCfcRQxgm0ur%2BkzU5EDHEPARbk0fv99qdtaTdFIy7q6TywACxxTASdZSs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18028,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 18028, version 1.589","md5":"448c34a56d699c29117adc64c43affeb","sha1":"ca35b697d99cae4d1b60f2d60fcd37771987eb07","sha256":"fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c","sha512":"3811804f56ec3c82f0bef35de0a9250e546a1e357fb59e2784f610d638fec355a27b480e3f796243c0e3d3743be3eadda8f9064c2b5b49577e16b7e40efcdb83","ssdeep":"384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA","tlshash":"d082d0f4ea92999085b01c37d19acb48dc87b9cef5a4d01611e4e13eb5ff8ad684c6c8","first_seen":"2023-04-05T16:42:51Z","last_seen":"2026-04-05T13:50:43.721599Z","times_seen":36854,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/c0f302_f31955823a8e4294af9a2612c84df4ea~mv2.gif","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/c0f302_f31955823a8e4294af9a2612c84df4ea~mv2.gif HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 160234\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 29 Sep 2025 16:26:54 GMT\r\nexpires: Mon, 29 Sep 2025 17:26:54 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Tue, 26 Aug 2025 13:52:51 GMT\r\netag: \"b25b96f460a75139525a2f5cc1273eab\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-7c597bbcf9-9bh2h\r\nvia: 1.1 google, 1.1 bac2c08263be93278e77355a3ca67ff6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: n8bv7o_q5dwbnDRtt-7AiDlS5uxwIChtzx75ytuBso-yYbByECfWRw==\r\nage: 9610037\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":160234,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"b25b96f460a75139525a2f5cc1273eab","sha1":"4478666762894380a434f3dabf4f7111b6086be5","sha256":"aba92df3bbe364d8ef68bd5cfe46b9198829ee926214c1eaf90e416ca467ab32","sha512":"c4209c51b3741c5e21fc001fc3cb48484b501f850dcd90bda4f775abaee939783ac2806f354a8e6af75b3e5762fc6cf281a86a9c6b0e001ea88a304b385fbf43","ssdeep":"3072:OYUemjqEPWELHzmEco/xwulUfGCDOjAu/ATcjo4itgtah8QoeMox53:OhjWEOElxwuOftDm/ATcmuWVxR","tlshash":"27f3120d2c4d81e121a7afdb73512fe146f61acee49d5185ce254ade3126bff232a390","first_seen":"2025-05-12T10:49:05.31121Z","last_seen":"2026-04-05T01:11:24.273366Z","times_seen":254,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":285,"dns":101,"connect":5,"send":0,"wait":7,"receive":4,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lsbbf2.com/20240821/dy13ohGl/index.m3u8","fqdn":"lsbbf2.com","domain":"lsbbf2.com","tld":"com"},"ip":{"addr":"142.248.99.101","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbbf1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 06:49:29 GMT","end":"Tue, 07 Apr 2026 06:49:28 GMT"},"fingerprint":{"sha1":"30:C9:F6:C9:51:76:10:59:60:B8:F7:2C:64:E2:FB:AC:EA:AD:A0:D6","sha256":"2D:07:B0:7C:E8:3F:E2:36:F7:27:5B:5A:BD:52:29:43:81:2B:04:EC:C7:CE:D3:87:CB:55:C0:CC:19:A7:04:52"}}},"request":{"raw":"GET /20240821/dy13ohGl/index.m3u8 HTTP/1.1\r\nHost: lsbbf2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gangus.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: application/vnd.apple.mpegURL\r\ncontent-length: 118\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nage: 78440\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":118,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"36bd2fa0c29ddd785c58d9ddaea77653","sha1":"3cf0b8491d939808ad1dbdee69036c2263402238","sha256":"bda32928ee3b01caa141fbf3347aebd21b2f6eac7202cf659f869dd73ead20be","sha512":"51665ab2bae8980c0815e09a229b1da5e5f0d402eac19e92625378681b9662ee7b8a99133366246b0dbca3b9edd813e36d682763be2a59658b24e5dc69bdc854","ssdeep":"","tlshash":"a6b09b9030698259dd14c1d8c58d32577466ba9489c0051461e691544d869e1159556c","first_seen":"2026-01-18T21:54:39.199873Z","last_seen":"2026-01-18T21:54:39.199873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":99,"connect":148,"send":0,"wait":148,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gangus.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 01:19:29 GMT","end":"Sun, 22 Mar 2026 02:17:53 GMT"},"fingerprint":{"sha1":"AD:2E:CA:E9:64:B5:EB:53:94:55:66:9D:3C:3D:23:38:5E:80:A6:58","sha256":"E2:F9:18:E1:63:89:51:7D:E9:61:DC:77:62:1E:F2:CF:67:76:92:14:37:74:F2:8F:12:E8:E6:C6:F9:A3:D7:7E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: gangus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gangus.net/vodplay/526615.shtml\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=vbIihVWuanLRNApVH9P3WAFbDbF4Gqy2bMjs3zWG; wxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5vukRetkWsslBKZle1Z6dMS4umD92mn5NcrQET6U-cvVWV-eHO-ZeIseI\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: application/javascript\r\nexpires: Sun, 18 Jan 2026 22:42:10 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YiSnitEQ8L34yDutTRJiTBcPoWSUtk13WIBjRnjA2%2BeSv%2Ftvb18B4kN7wyuOZ0COUItr%2BY2B8W7aLt6sAO%2Fz%2F4%2Fdn6IbDgnd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c01544f1d3cb521-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-05T13:48:07.070752Z","times_seen":293044,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/layer/3.1.1/theme/default/layer.css?v=3.1.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/layer/3.1.1/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2396\r\ncf-ray: 9c015451edc7569d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ed4d0d2-381f\"\r\nlast-modified: Mon, 01 Jun 2020 09:56:34 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 529722\r\nexpires: Fri, 08 Jan 2027 21:54:10 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=G%2FxSfYes8ek2AlcHpwLMK7SyvK8HE2LJuqtT3YaLpethQ4nLp961vYJU30y7XpBbutM0Qy59ynkmhfHYIjQytJdxfi%2BWeU1U8Xh7fb05v%2FP92u5PSFbJbWkGGWHLwkCV2OgMEHX6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14367,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-04-05T13:50:50.524164Z","times_seen":5862,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/001f0b_66329ece18ee4e2b9f15d14b2a8183bb~mv2.gif","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/001f0b_66329ece18ee4e2b9f15d14b2a8183bb~mv2.gif HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 125114\r\nserver: openresty/1.27.1.2\r\ndate: Sun, 21 Dec 2025 14:09:30 GMT\r\nexpires: Sun, 21 Dec 2025 15:09:30 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Sun, 21 Dec 2025 13:55:33 GMT\r\netag: \"cccec6c7b13ba53cc6a3bf39b4579784\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-7684b47d4-88lnd\r\nvia: 1.1 google, 1.1 bac2c08263be93278e77355a3ca67ff6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: bMk5CVzXryhvk11r4jUvdcQLQE2bqDyA80BClpTDkY_cdmiZ0rn0hw==\r\nage: 2447081\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125114,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"cccec6c7b13ba53cc6a3bf39b4579784","sha1":"c7e173aa62c7f9ffc2b4e68012874b0a35c053b8","sha256":"ec80341177eb900085a1b9f4f0fb81a3ff5b1ec96027a67a0945471f90da5151","sha512":"080ffba0c02860b7065e24b7c66faf43da355707f60d480574dc594b03373950b48dd2ef961b9c65c3ad12ebad2491e0c4fa0af415d9b62765e5f250e0895906","ssdeep":"3072:SKWRlW7IDt+vhFtBYvdX6Jmme0QPbnXhjPuORqD:oDfdS20QpmOoD","tlshash":"e1c312e90c9d64c2224942870d9b875a4d873edc48c77d8cbc6b67cc713b278a927c69","first_seen":"2025-12-23T02:06:05.636286Z","last_seen":"2026-02-16T21:56:32.075903Z","times_seen":40,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":347,"dns":105,"connect":5,"send":0,"wait":3,"receive":3,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/vodplay/526615.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-18T21:54:09.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gangus.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 01:19:29 GMT","end":"Sun, 22 Mar 2026 02:17:53 GMT"},"fingerprint":{"sha1":"AD:2E:CA:E9:64:B5:EB:53:94:55:66:9D:3C:3D:23:38:5E:80:A6:58","sha256":"E2:F9:18:E1:63:89:51:7D:E9:61:DC:77:62:1E:F2:CF:67:76:92:14:37:74:F2:8F:12:E8:E6:C6:F9:A3:D7:7E"}}},"request":{"raw":"GET /vodplay/526615.shtml HTTP/1.1\r\nHost: gangus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QR8i3xe69XtzzO2YPkUlZktgvtUiG%2BRSpu9Fo0j17OoEJ1ZjHh3q0DL%2BVJ%2BnkZ8%2FKAA0DuyaH63D30R1K9ncXHt0t9ox1Iu2nPA%3D\"}]}\r\nset-cookie: JSESSIONID=vbIihVWuanLRNApVH9P3WAFbDbF4Gqy2bMjs3zWG; path=/\nwxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5vukRetkWsslBKZle1Z6dMS4umD92mn5NcrQET6U-cvVWV-eHO-ZeIseI; path=/; HttpOnly; Max-Age=86400; Expires=Mon, 19-Jan-2026 21:54:10 GMT\r\ncontent-language: en-US\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c01544b0f441525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":66093,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16681), with CRLF, LF line terminators","md5":"8c443c973820d2507babb7c6c85a5928","sha1":"a73c8d3497563d2bbfad608a194a82e42523592a","sha256":"e972f4e457a315e7ee0e11a45b152c6f5dca5f737b2265719911b61f586777fd","sha512":"d6eaeabd9dab446347b0d206c6259308ca04cea6d8c9efed4b61a6f3a8629f659c8fbd11a1e4cbc917fa6e6dd04636e92f5f51b7aabb369c1523cc11bed32649","ssdeep":"1536:o9GhfhHLlkcHDkRpPhuYGWKbj7sgSend9QzdSV:f51YGdbTSend9QzM","tlshash":"b9534c72e2855d1ea23783c190e5b76cf003b447da424ff6e5e474f6e68ded168a220e","first_seen":"2026-01-18T21:54:39.204739Z","last_seen":"2026-01-18T21:54:39.204739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":47,"dns":29,"connect":1,"send":0,"wait":391,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/layer/3.1.1/layer.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/layer/3.1.1/layer.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6591\r\ncf-ray: 9c01544f1af7569d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ed4d0d2-54d1\"\r\nlast-modified: Mon, 01 Jun 2020 09:56:34 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 547700\r\nexpires: Fri, 08 Jan 2027 21:54:10 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Qs35u2ugIrbVpJxPW9YPTCnHfqxtfZokKTzAM63xOdmwIAfQ7ERlAI2jsH4KvfKiz3rvCBtlWrwtjzjGW95T0%2BJM%2F26RBwZPRFeR6MW9im1G%2FtLWsBS8BHNcUbKATKxpXNZ8jvin\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21713,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21713), with no line terminators","md5":"060444af631570264c5b3f957e26f5e3","sha1":"8278c4d47ac985481da0e5efb922457eaaf1dc0c","sha256":"7ed41c1149adf244bf700213886bfe8648d164942eb68527a7476bb7955c5af9","sha512":"d18a2c4bc192c90219776b9658d1c6f7942037c90f37a5819a38f36a4a1345f742b74602989b361c78a217ab661b09e037f7d9f891fddf3152916d9cbf9b865b","ssdeep":"384:qefWYREmwZAxlh2K1mM+8leJLCgO7TKVJO7:ffBuF0lh2smMNeP4","tlshash":"1da2b46a314035a7621390a9d14fbe0f71b21d24e7174128f12af4bc1dbdda9a2b7f4b","first_seen":"2023-03-07T15:24:24Z","last_seen":"2026-04-04T23:48:32.037502Z","times_seen":379,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/static/images/load.jpg","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gangus.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 01:19:29 GMT","end":"Sun, 22 Mar 2026 02:17:53 GMT"},"fingerprint":{"sha1":"AD:2E:CA:E9:64:B5:EB:53:94:55:66:9D:3C:3D:23:38:5E:80:A6:58","sha256":"E2:F9:18:E1:63:89:51:7D:E9:61:DC:77:62:1E:F2:CF:67:76:92:14:37:74:F2:8F:12:E8:E6:C6:F9:A3:D7:7E"}}},"request":{"raw":"GET /static/images/load.jpg HTTP/1.1\r\nHost: gangus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gangus.net/vodplay/526615.shtml\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=vbIihVWuanLRNApVH9P3WAFbDbF4Gqy2bMjs3zWG; wxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5vukRetkWsslBKZle1Z6dMS4umD92mn5NcrQET6U-cvVWV-eHO-ZeIseI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18341\r\nserver: cloudflare\r\nlast-modified: Thu, 31 Oct 2024 11:46:58 GMT\r\netag: \"67236e32-47a5\"\r\nexpires: Tue, 17 Feb 2026 16:55:34 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 17919\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPRH9HGvS%2BzgOR6qHePhOPL0E5LjfsrvjSZseBNh8G12GnWPEhFoHoNoIJqS6Vij1DSYfQ5Nt21Ic%2FbBBCqoR%2BzZefvYGhMA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01544e6c98b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 600x389, components 3","md5":"b84934511a97331b49e2b6d768501bc0","sha1":"95743d245d8caa2ef10a461c95ae2c2e86fa4b85","sha256":"9229125f9b07014aa5d3b8292bb55320c14a516688e6f918fd55fc80b181ff35","sha512":"3e6c990b064601da36e5e0678e6f1e5dfc9ec4ccb60d8cfbaf8212cb16792a19daa2e13758e792006fc371cee5632a0e06e9d6f8b0c697ab4313eea402dedd36","ssdeep":"384:YfOrhuJyAdIJcmBqj46101GxTDBeq12JCci8/yRdV/DHjGOx3:bhutIJTqc61CGxTd59ci8/yRdBjCOx3","tlshash":"e582d1738aad6fa793e16cf8453e85b1a7c8ac5354c8a70fe08604777a3a42f474d391","first_seen":"2023-05-22T17:27:11Z","last_seen":"2026-04-02T05:54:53.02966Z","times_seen":380,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.140","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 21:54:10 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Wed, 26 Nov 2025 01:16:23 GMT\r\nConnection: close\r\nETag: \"692654e7-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-04-05T12:57:46.247963Z","times_seen":2180,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":107,"dns":1,"connect":34,"send":0,"wait":35,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m1.cffpng.com/20250604_203434223_wiv.gif","fqdn":"m1.cffpng.com","domain":"cffpng.com","tld":"com"},"ip":{"addr":"172.67.149.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f9742aa1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 15:21:28 GMT","end":"Thu, 16 Apr 2026 16:21:21 GMT"},"fingerprint":{"sha1":"AE:EE:76:74:CA:7D:56:EF:DA:0F:8C:05:9A:09:65:58:A4:A7:E9:08","sha256":"E7:5D:E9:00:A5:C7:CF:86:B9:4C:17:B7:F3:BB:C8:64:34:7D:93:9C:AF:F5:64:A5:E9:A3:9E:53:63:76:A9:51"}}},"request":{"raw":"GET /20250604_203434223_wiv.gif HTTP/1.1\r\nHost: m1.cffpng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 467090\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PUcy3iHPdw7h3uWGOBojVVRy8XdRrnrh9vLIGsW49ukh8nm0WKHr06UB8lrCHu95cDzZnrxX0CXoUPEG%2Bj8R7HQoo15cv%2FnsQXoz\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"57023ea55f533f6faa966410593b3692\"\r\nlast-modified: Wed, 04 Jun 2025 12:34:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 2479\r\ncache-control: max-age=14400\r\ncf-ray: 9c0154540a2256a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467090,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"57023ea55f533f6faa966410593b3692","sha1":"efe3a1d4385abe83df97d6bd8c6a383951964fc4","sha256":"81fdbf1f34adca3c679133e9e472a9315bd7e8440df864d52ab6d40c1b316d2d","sha512":"6199433cb8c32d75f337dc79e107f9c4aa7081aa67a1fde1b0695672b80e15f126ec024eb94b0e44c5a4eb569d302120eed621830567c1c5f9501f77c92269df","ssdeep":"6144:Am8xOlWhPq8F4b2khydXdNILJWVQUqt4gJUhGvZHnbDaD77kYb3ooc2DPmpzFXGJ:AKohFFyydNmJaDgJz7DaXBDa4q18vc+","tlshash":"42a423a87843f254b01d55af07ae1f9a3fb1ca5a739da7220f88b51d239123b744163f","first_seen":"2025-05-21T16:57:41.187227Z","last_seen":"2026-03-14T08:58:42.711809Z","times_seen":319,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":5,"connect":4,"send":0,"wait":16,"receive":50,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LFDMM5L089","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:56 GMT","end":"Tue, 03 Mar 2026 17:08:55 GMT"},"fingerprint":{"sha1":"9B:DA:B6:34:03:0E:E4:FD:FA:30:B5:6D:01:40:C4:2E:00:97:47:DD","sha256":"37:65:D0:AD:22:EB:DB:D8:29:6C:00:B4:BC:08:C0:A1:B6:35:1A:92:40:C0:7C:08:EA:90:48:6D:1E:EE:20:38"}}},"request":{"raw":"GET /gtag/js?id=G-LFDMM5L089 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\nexpires: Sun, 18 Jan 2026 21:54:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143849\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434388,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"ede68f54376f7926a563bb6e66b4c1df","sha1":"00b5412290ac3400208788785f0eb95c52fcaa2f","sha256":"144142ad0e7d8045e318682619f6de5f2a92a159dd3b442dc263c7c3701153ee","sha512":"fde2b255a3efd7a72f72cfa8266d470447b4a277ab16a657e3d56f3e523af3a17701fdb7bc46b2ec32069df9cf6a70c3d4a27b9c13824ec184f05b09de4b7d0e","ssdeep":"6144:3oRnbh1DGvjHjUG2tonsYDfc1YgdxBX83ospS2VK7GO:abTDwjFBns3X83Vu","tlshash":"88941a8e73c674265396f078503f018ba57b29a2b45cc896f189cce42e74a9a4277f7c","first_seen":"2026-01-18T08:31:18.276775Z","last_seen":"2026-01-18T21:54:39.209062Z","times_seen":3,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":96,"dns":0,"connect":15,"send":0,"wait":52,"receive":49,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.140","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 18 Jan 2026 21:54:10 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Wed, 26 Nov 2025 01:16:23 GMT\r\nConnection: close\r\nETag: \"692654e7-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-04-05T12:57:46.247963Z","times_seen":2180,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":110,"dns":0,"connect":36,"send":0,"wait":35,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs4.imagebam.com/17/19/88/MEPEDLU_t.jpg","fqdn":"thumbs4.imagebam.com","domain":"imagebam.com","tld":"com"},"ip":{"addr":"212.63.223.225","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imagebam.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:54:E8:10:23:71:91:D2:C6:56:EB:9E:84:9B:C5:7C:D9:F4:1D:D5","sha256":"EC:44:EC:3A:D8:9F:93:67:8B:1C:12:24:90:18:30:92:79:14:4D:82:5C:17:2B:ED:0C:F9:B6:03:84:2F:4C:1A"}}},"request":{"raw":"GET /17/19/88/MEPEDLU_t.jpg HTTP/1.1\r\nHost: thumbs4.imagebam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Sun, 18 Jan 2026 21:54:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6188\r\nvary: x-s-token\r\nlast-modified: Tue, 10 Oct 2023 02:22:02 GMT\r\netag: \"182c-607535f41a344\"\r\nX-Cache: HIT\r\nX-Whom: srv1535\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6188,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"155fcc2c1bf1fe24594aa854fc36f3d5","sha1":"6bf018a247ce46063f98b28979a6e96a5aa28b5b","sha256":"2657b71deb167f1afd3c56aaf2c67bcc1c3704b368bd6fce5e9b89cb464e50c7","sha512":"7701925dd4a2f738be8dfbedaf33078b568f1c9fe5c9360dfe0259a87542f685755b94cf502f9a749810729cfe121e54bdd0564d5d8bc96a54b5c83061f53e2f","ssdeep":"192:RNfRCIQv+F1keP90/JXHcCfFYib0/t+Zlusv5nqqh3l:RTRlBmlcwYJAZ8sRf3","tlshash":"a2d19e00ef14ea0eda70e4b3a21f63f8951edd12ef5947b593d89231552a0c22a79a0c","first_seen":"2023-11-05T11:28:18Z","last_seen":"2026-04-02T06:37:28.071668Z","times_seen":375,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":244,"dns":13,"connect":25,"send":0,"wait":43,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m1.cffpic.com/20251001_182112400_QkZ.gif","fqdn":"m1.cffpic.com","domain":"cffpic.com","tld":"com"},"ip":{"addr":"104.21.69.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8412a442.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 05:24:58 GMT","end":"Sun, 22 Mar 2026 06:24:55 GMT"},"fingerprint":{"sha1":"95:83:58:84:21:57:9E:DC:81:7C:31:13:FE:71:09:E5:5D:75:84:A0","sha256":"CE:43:16:00:EF:A8:4E:C2:A9:4B:48:CB:8C:A8:05:CE:3D:1C:3A:5D:D0:7B:24:63:EB:57:2B:C9:79:4C:94:01"}}},"request":{"raw":"GET /20251001_182112400_QkZ.gif HTTP/1.1\r\nHost: m1.cffpic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 293626\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nxsm%2BY5JeZDpLHA5FVzt8Ac6QN5awXTES1axPJNVnX5i4SFhGmtP4RGROzi9tctgEAqyJmeASHSrfceoQ6KGmRt6%2F3dN%2FeqH7KWs\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"e535b417ec8e87325eddcc3e8b3a6f82\"\r\nlast-modified: Wed, 01 Oct 2025 10:21:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 1166\r\ncache-control: max-age=14400\r\ncf-ray: 9c015454de1156ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293626,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 350 x 350","md5":"e535b417ec8e87325eddcc3e8b3a6f82","sha1":"dc06b5c31af1c083a28ad6a229f846a2813e1dfc","sha256":"99d748bbe387f2a202775046f692115bf6ff633179c9edc76c2c6455b7ebb767","sha512":"c7446461e2b413a38fcb8fb3b8ec1a83c85077d1384889ef33d5de77ce8cef458b9da4e86c7b52ad5986bab57cbe803358df9b4610f0d4de8065900013f25e32","ssdeep":"6144:odtWPYxU1Lr3CJrsiJkehEMR/dJN06EMm24Js2V+rq6KK:fSURb8RN1H0jMM+2V41","tlshash":"095412e398f83455ca96230c7f1bcef5f4199949eaa30f2027eecf501e5864555f9883","first_seen":"2025-10-16T12:14:17.160665Z","last_seen":"2026-01-18T21:54:39.211256Z","times_seen":81,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":17,"connect":15,"send":0,"wait":8,"receive":24,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boxypluckunrelated.com/get/1997345?id=1997345\u0026pid=__clb-spot_1997345_ogo_1\u0026jp=_clgotqvbhhrtfbwbcwuqss\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.2-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=w7xSOyBaHR0cHM6Ly9nYW5ndXMubmV0L3ZvZHBsYXkvNTI2NjE1LnNodG1s\u0026afid=4619517951111168\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1133\u0026rlp=%5B0%2C49%2C99%2C73%2C863%2C1795%2C586%2C1355%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=2\u0026uf=0\u0026freq=0","fqdn":"boxypluckunrelated.com","domain":"boxypluckunrelated.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boxypluckunrelated.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:13:21 GMT","end":"Mon, 06 Apr 2026 16:13:20 GMT"},"fingerprint":{"sha1":"F4:38:25:C5:47:D7:FE:94:17:A1:F7:AD:DC:71:48:7B:7D:8D:DF:F5","sha256":"68:55:B0:94:16:DC:4A:D4:12:0F:0A:58:10:9D:1B:91:BE:24:06:82:56:63:FB:98:B1:87:C7:66:3A:6B:AE:20"}}},"request":{"raw":"GET /get/1997345?id=1997345\u0026pid=__clb-spot_1997345_ogo_1\u0026jp=_clgotqvbhhrtfbwbcwuqss\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.2-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=w7xSOyBaHR0cHM6Ly9nYW5ndXMubmV0L3ZvZHBsYXkvNTI2NjE1LnNodG1s\u0026afid=4619517951111168\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1133\u0026rlp=%5B0%2C49%2C99%2C73%2C863%2C1795%2C586%2C1355%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=2\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: boxypluckunrelated.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 21 Feb 2027 21:54:11 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 21 Feb 2027 21:54:11 GMT; Secure; SameSite=None\nUID=2601181654dd3fa53b1c754353bb74871c91; Path=/; Expires=Sun, 21 Feb 2027 21:54:11 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6059,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6059), with no line terminators","md5":"67263cc27bd5216a47f92359141b187e","sha1":"7fc53fc5c47e8d4fa992ac507755afb432b22fb2","sha256":"d6d698f4d742ef1f50e9a9a41a7f03e0753fe097e2034ec53ba6a865202d3178","sha512":"762b47fed6baeeb89a2676eab23d8c7db59a79d1df5f60facddda8d7b39cfe8217df5c92084b5777c587ad5d3e29e0620f1666efeeba589b3657d33bc7d72e28","ssdeep":"96:4zr4b50T1aNrEU6dQjGqbn0T1aNrEU6dQjGnbZ0T1aNrEU6dQjGyYbu0T1aNrEUw:8EekGTyGmekGTyGVekGTyGyPekGTyGMO","tlshash":"cfc1d7c46c816c04082d6afb152efe924195fe7074ebccc8a996da7e6d96f3a5b30443","first_seen":"2026-01-18T21:54:39.212203Z","last_seen":"2026-01-18T21:54:39.212203Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"boxypluckunrelated.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lsbbf2.com/20251223/EkK0k29J/2063kb/hls/wala3pf6.ts","fqdn":"lsbbf2.com","domain":"lsbbf2.com","tld":"com"},"ip":{"addr":"142.248.99.101","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:13.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbbf1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 06:49:29 GMT","end":"Tue, 07 Apr 2026 06:49:28 GMT"},"fingerprint":{"sha1":"30:C9:F6:C9:51:76:10:59:60:B8:F7:2C:64:E2:FB:AC:EA:AD:A0:D6","sha256":"2D:07:B0:7C:E8:3F:E2:36:F7:27:5B:5A:BD:52:29:43:81:2B:04:EC:C7:CE:D3:87:CB:55:C0:CC:19:A7:04:52"}}},"request":{"raw":"GET /20251223/EkK0k29J/2063kb/hls/wala3pf6.ts HTTP/1.1\r\nHost: lsbbf2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gangus.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:13 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 193640\r\nlast-modified: Tue, 23 Dec 2025 12:50:00 GMT\r\ncontent-disposition: attachment; filename=\"wala3pf6.ts\"\r\netag: \"694a8ff8-2f468\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 20743\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":193640,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"e9b41582b9d47a89f7317cb46d0ee4b3","sha1":"852e7e830096bea293e2ed7957e8913d0d7bd71e","sha256":"6b30ca045f74e3cfb75858ec1e77bc40af8c59f325b9e2737a1c7a51de19ba7b","sha512":"c0a5c1b326909a7b7b238294d9ed5227685a154ad3bbfaa3faf25f278de9f7a6d8812826dcdea2e1cd6c517e403f06ac5116c504c70d0124ca86e71ed5eb1648","ssdeep":"3072:BA4MYd781bwhcDwotfCcSmhM24pJWfZbj3X3TV4o9KDa1P5uWKPcnAmy9dx:BAA7lyPfCHV2rxX3dT4J5","tlshash":"c714025b0bd11ce7de3099b0c906e27206517c8c874a5beb2c1d789eecfeba5842147d","first_seen":"2025-12-27T01:53:07.844194Z","last_seen":"2026-04-05T06:40:18.013786Z","times_seen":222,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boxypluckunrelated.com/bn.js","fqdn":"boxypluckunrelated.com","domain":"boxypluckunrelated.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boxypluckunrelated.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 16:13:21 GMT","end":"Mon, 06 Apr 2026 16:13:20 GMT"},"fingerprint":{"sha1":"F4:38:25:C5:47:D7:FE:94:17:A1:F7:AD:DC:71:48:7B:7D:8D:DF:F5","sha256":"68:55:B0:94:16:DC:4A:D4:12:0F:0A:58:10:9D:1B:91:BE:24:06:82:56:63:FB:98:B1:87:C7:66:3A:6B:AE:20"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: boxypluckunrelated.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 13 Jan 2026 10:31:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69661ef4-13e72\"\r\nexpires: Sun, 25 Jan 2026 21:54:10 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"1c265053f898d944dbe5ee80b1491152","sha1":"a507629369c768719baf97c27f96f83685372242","sha256":"a006dd04e0ee6e35b0616299ac1f821e421caef2e2967f185d9cf19fc2494db3","sha512":"635a4867524da99b4d3eadb4dccc93f0646deccec1de721182fbda6753b4b521b69917031715270a87c3d1611f556d333c07c03a268411916d6b6458bafd0b81","ssdeep":"1536:Ra6OOon58/jgntqD0YWisgNeVysDCPudeA9A2ECKntPdd:o6OOoi4tqnsgyM920nh","tlshash":"bb83d755f691b422425791f842bf401da23b3d78a4bd5138b0d2e8ea2cbdd8d6223f7d","first_seen":"2026-01-13T16:50:36.80312Z","last_seen":"2026-01-19T07:32:01.888687Z","times_seen":72,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":62,"dns":19,"connect":18,"send":0,"wait":18,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"boxypluckunrelated.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/c0f302_5089463c01914c93a7bb08251083fd13~mv2.gif","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/c0f302_5089463c01914c93a7bb08251083fd13~mv2.gif HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 81429\r\nserver: openresty/1.27.1.2\r\ndate: Tue, 30 Dec 2025 16:17:55 GMT\r\nexpires: Tue, 30 Dec 2025 17:17:55 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Sun, 06 Jul 2025 07:38:34 GMT\r\netag: \"ec5bcfd45b9056b8870790361ea9409b\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-55b9647679-r48jg\r\nvia: 1.1 google, 1.1 bac2c08263be93278e77355a3ca67ff6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 8v6tB8DBawpN_-r6a6qgv2EAl2iVm78U11FhpFwy0mprGKIgl_aTCw==\r\nage: 1661775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81429,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"ec5bcfd45b9056b8870790361ea9409b","sha1":"e7e37d4b4d57f3370e3f6ec5876bc443fb38f64e","sha256":"4259a0f2e650fd059fa5335a7da3d87d81678b9cb3ba2ebf3a0c09974ffa9b76","sha512":"9f1e1b5a154ace5620767d5d487d3f5271957e473555fd7badd8ee369917658f4faa6aace72e35aa6b72e35c9d22e6196b8b40f63bfaba7e08f013e51f00319f","ssdeep":"1536:IP+4SVlh9w4vxV6PHgPObhgIUZPzAsFihCH8qGyYC/hAX12X:IP+4tiVCH+2WcsGCWyYC/hAE","tlshash":"2d830219990a5848a06b3f7053e9c51c3b5dd4e198faedb5100ded27fe48a3c4f2cb66","first_seen":"2024-03-07T18:40:46Z","last_seen":"2026-04-01T19:41:36.271854Z","times_seen":170,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":72,"connect":5,"send":0,"wait":5,"receive":3,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3pkf5m0gd.com/aas/r45d/vki/1997409/3ac833c7.js","fqdn":"3pkf5m0gd.com","domain":"3pkf5m0gd.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3pkf5m0gd.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 15:09:09 GMT","end":"Sun, 15 Mar 2026 15:09:08 GMT"},"fingerprint":{"sha1":"0C:3F:1C:FD:1B:88:04:19:08:0E:2E:19:7F:00:04:21:BB:2C:1A:81","sha256":"E2:9C:E5:C4:38:5D:95:FD:95:17:C2:FD:82:E2:02:C9:D4:54:93:26:6D:C4:BE:39:4C:AD:D2:17:AE:D7:E3:AB"}}},"request":{"raw":"GET /aas/r45d/vki/1997409/3ac833c7.js HTTP/1.1\r\nHost: 3pkf5m0gd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 13 Jan 2026 10:31:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69661ef2-119af\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71919,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"fed5c7321c74e77d020e13d4e59a944c","sha1":"686fbd8a740280666674657743caf2337d1b4a28","sha256":"6e6549eaa82d242007e7710ce67b1b670c27d58e39770dc06a31148e9a0c9fb6","sha512":"a1c85614fffa9dd3418d679e4e8bd47ffbad4a949c224ba7a687a9c66a31caca1a8c015e54304f7a46b03adf4cc20047cd3a63da3b47d375d636d0eed2c69554","ssdeep":"1536:mfN2pG0T+C2Zngud46O4e7Ya7fFbdiSl7l:m6Ank61e7FFp","tlshash":"9163a89afa95b865035390f852bf001da33b3d6ca4fc1128b191e8d92c7cd4d9663f7a","first_seen":"2026-01-17T23:40:24.318753Z","last_seen":"2026-01-18T21:54:39.22123Z","times_seen":2,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":80,"dns":42,"connect":21,"send":0,"wait":42,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"3pkf5m0gd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gangus.net/user/srcd.shtml","fqdn":"gangus.net","domain":"gangus.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gangus.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 01:19:29 GMT","end":"Sun, 22 Mar 2026 02:17:53 GMT"},"fingerprint":{"sha1":"AD:2E:CA:E9:64:B5:EB:53:94:55:66:9D:3C:3D:23:38:5E:80:A6:58","sha256":"E2:F9:18:E1:63:89:51:7D:E9:61:DC:77:62:1E:F2:CF:67:76:92:14:37:74:F2:8F:12:E8:E6:C6:F9:A3:D7:7E"}}},"request":{"raw":"POST /user/srcd.shtml HTTP/1.1\r\nHost: gangus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gangus.net/vodplay/526615.shtml\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 2\r\nOrigin: https://gangus.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=vbIihVWuanLRNApVH9P3WAFbDbF4Gqy2bMjs3zWG; wxxu=QlU9P1luV0txcQVyTwlEcniyUH2nRvHrPQpuaFN_tl5vukRetkWsslBKZle1Z6dMS4umD92mn5NcrQET6U-cvVWV-eHO-ZeIseI; UGVyc2lzdFN0b3JhZ2U=%7B%7D; srcd=false-pf-Win32-h-1024-w-1280\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F3MiRcFgxJzbsiyjhzkqhPFSMh4TfTrLkOB0%2BwCvXicTV2rDSKurEp7kGrlPjRP%2FBsfFHKg33AIutXsPRDoGtwHXCm%2Bjedyb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9c0154533a53b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/001f0b_aaf3cdcb4ff942358e1835a6259ab379~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:11.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/001f0b_aaf3cdcb4ff942358e1835a6259ab379~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 151939\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 08 Dec 2025 06:26:45 GMT\r\nexpires: Mon, 08 Dec 2025 07:26:45 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Mon, 08 Dec 2025 06:26:18 GMT\r\netag: \"2b1acc49f9d64d5b6770cbffe23c361c\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-7684b47d4-f7d5s\r\nvia: 1.1 google, 1.1 bac2c08263be93278e77355a3ca67ff6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: tN-Wu-UiH-kdm98U0M8svGYUPEFL4uJp9TlPTVYWq8jmi5J8wgwf_w==\r\nage: 3598046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":151939,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 432 x 432, 8-bit/color RGBA, non-interlaced","md5":"2b1acc49f9d64d5b6770cbffe23c361c","sha1":"29f395ef5ec2f0d43541add1652667ae63cebf83","sha256":"f43fde190b71e68b822b9316c197484b50af3c822a38d3d55d186611e877da64","sha512":"d0b0cf7eefc135373381a42d53c84cad6a0fb663f7b3ade4f81c024c2c082b6f01bfbdf4469ae7fd630f9a70453309dd9081813abfaa64133189881cd6af69f1","ssdeep":"3072:ikNTlam884ssm6eeyXBN5+tsfF61NtP2I0MYYkuMq6yMQNl:RspVm6wfA1NYIPPkuMfyMGl","tlshash":"b4e312b85d29e8f361239e666ed756d536c6c0349c5f6e04bd39f081f2639860fb0a28","first_seen":"2025-12-23T02:06:05.627423Z","last_seen":"2026-02-16T21:56:32.073226Z","times_seen":39,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":39,"connect":5,"send":0,"wait":6,"receive":3,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/dplayer/1.27.1/DPlayer.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/dplayer/1.27.1/DPlayer.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 21:54:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 46460\r\ncf-ray: 9c01544f2afe569d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"63cdcfef-b57c\"\r\nlast-modified: Mon, 23 Jan 2023 00:08:15 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 220729\r\nexpires: Fri, 08 Jan 2027 21:54:10 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=N60X9jOO%2Fc30bp3cNWPVzymozin%2FxHVoA6FT%2B49ba1z9OSMT8q%2FXT0idvMLfPEmcsfEua9AlTrgO%2BbupMk4hmnlCxGk%2B89kSZ4uhatlkxzZl69nxdjVL0dBzJ%2BVXLNsNq55zk8Ja\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304629,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2cd381ba72be1f7bf86e97fe4698a542","sha1":"290283e41ac69bfd570c90800680097f998e4e0c","sha256":"930aa94317d71f1459823cda409da8453078af00fe405027c67932445ec997e8","sha512":"c397f2eae103d9a2bfc57f3f45d8776d4dde8d113babb3c67d02bfd8a970eb6412a1950b5402884d8c28d8f0d0bfe90d109f8d99ed2a1d049427d5135e785eb8","ssdeep":"1536:nFri4r9aKySaa3rzg7hSwaKySaa3ref7j3MEwOMEa8vTDadMcBjOsCSwixK1LzVj:vNDyMgjKbixKVhjLIR2INivkS","tlshash":"ae54b20b364131340262afe8c6db534a36347311e9728729f65ef9de8f9d84c6427b7a","first_seen":"2023-04-02T21:26:50Z","last_seen":"2026-04-04T17:42:14.964574Z","times_seen":187,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images2.imgbox.com/e6/fb/QV8SRr50_o.gif","fqdn":"images2.imgbox.com","domain":"imgbox.com","tld":"com"},"ip":{"addr":"212.63.223.227","port":443,"asn":50827,"as":"SpaceDump IT AB","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gangus.net/vodplay/526615.shtml","date":"2026-01-18T21:54:10.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imgbox.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:40:C4:66:DF:6A:53:69:91:C0:6E:E4:30:08:6A:AE:7C:D9:E0:F4","sha256":"5B:6C:CE:B6:08:A1:0E:CB:E3:DE:59:62:F8:8A:62:B0:EB:CC:60:FA:D1:4E:D3:0D:56:1D:55:32:E5:36:BA:4C"}}},"request":{"raw":"GET /e6/fb/QV8SRr50_o.gif HTTP/1.1\r\nHost: images2.imgbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gangus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 18 Jan 2026 21:54:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 32798\r\nvary: x-s-token\r\nlast-modified: Wed, 27 Nov 2024 06:06:35 GMT\r\netag: \"801e-627dec49b50c0\"\r\nx-cache: HIT\r\nx-whom: srv1535\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32798,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"39f9c3ddf152664c74f7d07571b2f3d1","sha1":"9f71c2b38a42bc5d5558f8228db7983239cb3ccd","sha256":"0ff71f227d4f57d2b89e8f6d175fc540c2f5e70f634b2814f2af3d5d939174b2","sha512":"4c770ed4a6b05bbf1b6840b25429f8fcf0c478908b30cf1b1a2956f70bae2d6695269f253627f873b3dac9d6ec2f0de540d899041c26d74e1803b04461764d21","ssdeep":"768:ZqRrGgxKkH4t0E5VZME6ycYwv8RHozLzfSvVSzcKNUATNVax+HqZAlvuo:Z3Ft0EXagwkRHozrzDj5VNmo","tlshash":"6fe2f161fb06ab32d637143cdf2b5c8b629fe473e35f4ad1402962e0612e76921268d6","first_seen":"2024-12-01T08:51:18.635316Z","last_seen":"2026-04-02T06:37:28.076628Z","times_seen":343,"resource_available":false,"data":null}},"time_used":1494,"timings":{"blocked":706,"dns":32,"connect":61,"send":0,"wait":52,"receive":9,"ssl":621},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}