{"report_id":"e4d82ce5-5027-4b51-9c43-725fba232281","version":0,"status":"done","tags":[],"date":"2026-08-14T12:32:16Z","url":{"schema":"http","addr":"m.pgjt216.com/","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"m.pgjt216.com/","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"title":"PG电子官网 · 官方网站 |","dom":{"size":8209,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9b8aec82c58f44db0e2da822dacba093","sha1":"eefdfd7d9d562be497b46a3340f84e863714e2bf","sha256":"20d91d56e189bcd65f395b82c8aa84f1cd48af613ccd6debf532c54acec37767","sha512":"9759bda4b09593e9305259d6c50675bdc446cd86d481bb119d0acf8e61e823d2913f9d3c93f2c4132110d061428251044770766c298f6d2cfca57e06c3c26a7c","ssdeep":"192:SrnMZjBPCpnDZ0CPBfE/k1mp6rPlyJzmRF4sArtg:1jmX7Artg","tlshash":"5f02871661d3115b2922d1a66fb3171b6664d407c30bc9a97fcc15cdef89ac9c8a738c","dom_hash":"domhash27012197961c49af023d3292681d65a6","first_seen":"2026-03-01T01:18:02.45292Z","last_seen":"2026-08-14T12:32:21.321925Z","times_seen":535,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.pgjt216.com/","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-18T12:32:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"m.pgjt216.com","ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-03-17","domain_rank":0,"first_seen":"2026-07-11T23:34:47.130166Z","last_seen":"2026-08-14T12:27:26.335119Z","alert_count":81,"request_count":27,"received_data":2326645,"sent_data":13601,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"156.244.169.211","ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":9,"received_data":294811,"sent_data":5019,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-08-11T17:34:05.943368Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":455,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"156.244.169.211:44141/static/js/link.js","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d755975711ef829ebb458f64fac5c045","sha1":"f1008699343f203cb9d48baef8d9272afaae40bb","sha256":"1ca4dff306424e507935800d2443fd3ef591dc3bbd7fd4b0ace629075aa6f4d9","sha512":"41cd3fd8f886918debfb1f7b2438baf7bab41777df863b4e1681007b5d0fa514a7814d1bfced1a74ce23badc1803f5fbe884366d63d597e353205885de607fde","ssdeep":"","tlshash":"25318c5ce6d038260d2709676a5f2d04b293400bbd4aec43f69d4ac0dfb1b2e4b7a9e4","size":1743,"data":"","first_seen":"2026-08-14T07:22:15.298987Z","last_seen":"2026-08-14T12:32:21.32595Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/e/dongpo/tz/tz.js","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdd51774e8d302e07682e09384b53740","sha1":"a852f9f4dd23af5da2990398fa3c68e8c49ff3ab","sha256":"3bb758e6d57d175c9e965cda74d02359b8816fc8d64254213b4ad5085b8d98b8","sha512":"b10a9f2c24f49203d0a6e07415ad0eb597ec15a46ced2d2c47c868ffddf5fec36f383da050a2397641791fff604f798ee65e6a974f216126eeaafb8d49da5b00","ssdeep":"","tlshash":"23218c7fae231250e01691592bba676c3a3a001b6301cc307abcbe685f42f429447bd4","size":1160,"data":"","first_seen":"2026-08-10T04:17:50.869663Z","last_seen":"2026-08-14T12:32:21.324769Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","size":80821,"data":"","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-08-14T12:32:21.355475Z","times_seen":2881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","size":140562,"data":"","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-08-14T14:48:56.154665Z","times_seen":5740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/bootstrap/js/home.js","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","size":5802,"data":"","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-08-14T12:32:21.325382Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/e/dongpo/tz/tj.js","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bf60b5cf9c764caf9e85228dc7bfc33","sha1":"22b0d1971d7ec1ec3bb55ff4771752db18eab9ef","sha256":"1a32c475f692c3c84f550cc194a92fff3df6368293bbec3b8e67a42bc2d92306","sha512":"681c26eab518649736ea2c6302120b5a61e0b0749375c8933c7c890b6195de0c6e09a4184c9af8c5fd0f5e5eeda63ba803574bee4c44737899ccd18ce14c97c9","ssdeep":"","tlshash":"8601f11f7c25e13463921c2d23bbdadcf5ad2016101dc80654dec4ad6c34ff9042ab4c","size":808,"data":"","first_seen":"2026-03-03T01:17:34.078046Z","last_seen":"2026-08-14T12:32:21.328057Z","times_seen":941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e534a5cbd2df3aaed4e2bb405780d2a7","sha1":"bd4ac483c7629ef832aaa724291e5f3c97013e14","sha256":"4df2c5608d78458b37f68c0612223902a6b6ea8d31ff8124ed0eff7589fc03be","sha512":"4a5e434560cf6e8e9c071dd0cc5e8c2442dafdfbcba638c0c7e90bdc5a74deee42bbd2a2a1b7452addb1a807443c6c4db4eb30e1cb2629ebe39320e9c7d36662","ssdeep":"","tlshash":"d4f0dcae9c51e178abc338ac9bafda88c16e1026110ecc03a9d9c5ce3c38fc8042134c","size":492,"data":"","first_seen":"2025-05-26T01:34:30.601443Z","last_seen":"2026-08-14T12:32:21.357995Z","times_seen":448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/judge2-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.960Z","timestamp":1786710699960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/judge2-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 194814\r\nlast-modified: Thu, 19 Mar 2026 17:02:53 GMT\r\netag: \"69bc2c3d-2f8fe\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194814,"size_decoded":195088,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 782x439, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1739c668891ea7c2bfffe002b0108d46","sha1":"88134cb4f146d75d2fcd5806d069ba3d0c6147bf","sha256":"17a9ba698855065e2e0732e8061265b3cd5541eaa51b0545a6050bbaa6829ae5","sha512":"c7cd90d7aea1b5bb5ab492ef93f6be3037370119e030d9954aa37f8fc107484f3707dea4287a9f8f1e1b496025c3f28c4006960c5a9f6210f7bd97e1eb1c0a63","ssdeep":"3072:f53HI5VXpJYnN+WoFcojecB5KT1qMO7jx12VZGmvWfao7B6iY/6W6ui:f9auN8jeiKZQjEGJEiKY7","tlshash":"0d1412b3cc8819e14e953d38840dbd35b34bea6e41e079d481a5bf25b7810f6bdea46c","first_seen":"2026-08-14T12:27:30.340882Z","last_seen":"2026-08-14T12:32:21.322954Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":1064,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/dfpc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-14T12:31:41.299Z","timestamp":1786710701299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 01:33:24 GMT","end":"Sun, 16 Aug 2026 17:33:23 GMT"},"fingerprint":{"sha1":"77:77:9F:CE:0A:B2:04:D2:61:70:A0:93:C1:04:CA:BE:85:83:47:A1","sha256":"75:6F:2E:5E:D9:CE:94:26:17:52:87:CD:1E:86:22:D4:F3:23:51:74:2E:0F:59:56:BF:8B:3F:B7:78:93:66:51"}}},"request":{"raw":"GET /static/picture/dfpc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 11:38:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d8daa-1c49\"\r\nexpires: Sun, 13 Sep 2026 12:31:41 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7241,"size_decoded":7616,"mime_type":"image/png","magic":"PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced","md5":"9ca63936da71d994267413c9b4d62583","sha1":"0083b92ce28904d8c01cca591a852d218c944d3e","sha256":"909c9c1f9b2ee3b6ebe305b395b454cb597ae2b4ad8ec0db3a57c2e678bb685a","sha512":"2c01f6e39b4f8c4ff7d8c2d20640c9d80b50ebb49351d32c4e0263b11abbb721b6af3c4d27c308f6e26d4f9e0c5f08045c0d235b3ef1a587eaa1df578c7c333b","ssdeep":"192:FxLpy98iKPdw9eYyJIoxrBG3GFQVnpq1fw5qDQ/7os:F1pyNIq9e1Zrg3GFQVnp2YsQ/j","tlshash":"78e18e3b8e8c2754c1551385a136fab4d8791ef331f4923e9a257c22dd52ab2c921386","first_seen":"2026-03-01T01:18:02.55958Z","last_seen":"2026-08-14T12:32:21.324128Z","times_seen":684,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/e/dongpo/tz/tz.js","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.938Z","timestamp":1786710699938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /e/dongpo/tz/tz.js HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 02:41:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a793a54-488\"\r\nexpires: Sat, 15 Aug 2026 00:31:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1160,"size_decoded":852,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cdd51774e8d302e07682e09384b53740","sha1":"a852f9f4dd23af5da2990398fa3c68e8c49ff3ab","sha256":"3bb758e6d57d175c9e965cda74d02359b8816fc8d64254213b4ad5085b8d98b8","sha512":"b10a9f2c24f49203d0a6e07415ad0eb597ec15a46ced2d2c47c868ffddf5fec36f383da050a2397641791fff604f798ee65e6a974f216126eeaafb8d49da5b00","ssdeep":"","tlshash":"23218c7fae231250e01691592bba676c3a3a001b6301cc307abcbe685f42f429447bd4","first_seen":"2026-08-10T04:17:50.869663Z","last_seen":"2026-08-14T12:32:21.324769Z","times_seen":6,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/bootstrap/js/home.js","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.942Z","timestamp":1786710699942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/bootstrap/js/home.js HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jul 2025 03:49:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68747e66-16aa\"\r\nexpires: Sat, 15 Aug 2026 00:31:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5802,"size_decoded":2098,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-08-14T12:32:21.325382Z","times_seen":1427,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/js/link.js","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://156.244.169.211:44141/","date":"2026-08-14T12:31:41.289Z","timestamp":1786710701289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 01:33:24 GMT","end":"Sun, 16 Aug 2026 17:33:23 GMT"},"fingerprint":{"sha1":"77:77:9F:CE:0A:B2:04:D2:61:70:A0:93:C1:04:CA:BE:85:83:47:A1","sha256":"75:6F:2E:5E:D9:CE:94:26:17:52:87:CD:1E:86:22:D4:F3:23:51:74:2E:0F:59:56:BF:8B:3F:B7:78:93:66:51"}}},"request":{"raw":"GET /static/js/link.js HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 05:01:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7ea141-6cf\"\r\nexpires: Sat, 15 Aug 2026 00:31:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1743,"size_decoded":1002,"mime_type":"application/javascript","magic":"ASCII text","md5":"d755975711ef829ebb458f64fac5c045","sha1":"f1008699343f203cb9d48baef8d9272afaae40bb","sha256":"1ca4dff306424e507935800d2443fd3ef591dc3bbd7fd4b0ace629075aa6f4d9","sha512":"41cd3fd8f886918debfb1f7b2438baf7bab41777df863b4e1681007b5d0fa514a7814d1bfced1a74ce23badc1803f5fbe884366d63d597e353205885de607fde","ssdeep":"","tlshash":"25318c5ce6d038260d2709676a5f2d04b293400bbd4aec43f69d4ac0dfb1b2e4b7a9e4","first_seen":"2026-08-14T07:22:15.298987Z","last_seen":"2026-08-14T12:32:21.32595Z","times_seen":3,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/jinshapc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-14T12:31:41.293Z","timestamp":1786710701293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 01:33:24 GMT","end":"Sun, 16 Aug 2026 17:33:23 GMT"},"fingerprint":{"sha1":"77:77:9F:CE:0A:B2:04:D2:61:70:A0:93:C1:04:CA:BE:85:83:47:A1","sha256":"75:6F:2E:5E:D9:CE:94:26:17:52:87:CD:1E:86:22:D4:F3:23:51:74:2E:0F:59:56:BF:8B:3F:B7:78:93:66:51"}}},"request":{"raw":"GET /static/picture/jinshapc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-a334\"\r\nexpires: Sun, 13 Sep 2026 12:31:41 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41780,"size_decoded":42160,"mime_type":"image/png","magic":"PNG image data, 295 x 113, 8-bit/color RGBA, non-interlaced","md5":"1d2140363e0fda69f41537010f37ac74","sha1":"9f3791b6ade0a7966dee0253cb698564490e9440","sha256":"65ff8549228320f54f3d93e45194314c43c7cea541241876a57633bb5ac94f92","sha512":"75dd491fe42a57dee94c06e5e389323f0b32a584f3d0223845ea8f945ac9cff401e65cc381f4e8973dd78c14655abfff000186a770df78acddff35e6bb69fa86","ssdeep":"768:fUD/+JUtuV8Sp+uA5mBhYhXXy7I1VzKT26hq34ZhMNg1de0nGtXIIq5y7RYLIXK9:j2SYd1Xy7wVG66BvMNg60KXrsLB","tlshash":"3113f1a116d7074d278849fcda334deec406ab285d19b93ec5f68f34e3846c4d083a66","first_seen":"2025-01-31T12:39:53.036928Z","last_seen":"2026-08-14T12:32:21.326599Z","times_seen":1036,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/1552215839168.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-14T12:31:41.301Z","timestamp":1786710701301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 01:33:24 GMT","end":"Sun, 16 Aug 2026 17:33:23 GMT"},"fingerprint":{"sha1":"77:77:9F:CE:0A:B2:04:D2:61:70:A0:93:C1:04:CA:BE:85:83:47:A1","sha256":"75:6F:2E:5E:D9:CE:94:26:17:52:87:CD:1E:86:22:D4:F3:23:51:74:2E:0F:59:56:BF:8B:3F:B7:78:93:66:51"}}},"request":{"raw":"GET /static/picture/1552215839168.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-2a6b0\"\r\nexpires: Sun, 13 Sep 2026 12:31:41 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173744,"size_decoded":174162,"mime_type":"image/png","magic":"PNG image data, 488 x 147, 8-bit/color RGBA, non-interlaced","md5":"ce2e5b88612ff5d0c083357995805cb1","sha1":"ee211057d855fb16fcbbc4dd280c54d0e8be9445","sha256":"8d2484ecd64a9270ab446bebd54998c84015ccac62e322332ff027218cc11c54","sha512":"5c3a7cc91ed1cc8f9064538fd154dd31addf4705eea3767bd444c06cc64dfedc9bdccee584936bd2b6a4f142820d0bdd74213497247a59759e89d79fa5bfd896","ssdeep":"3072:7jOt+RYVDFMiydCbjFViIj2qBEn0uzBdtt/jU4SyaguPpoQE3TqtGMFR++gcKiYF:fOARYVFMiyyhViycrTLw4vagkpoQE3T/","tlshash":"c204124c9c4413f186c9f265e2068884e57fc915427c342b37c9e3fb4da6a4927baf32","first_seen":"2023-09-28T01:03:26Z","last_seen":"2026-08-14T12:32:21.327385Z","times_seen":982,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/e/dongpo/tz/tj.js","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.943Z","timestamp":1786710699943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /e/dongpo/tz/tj.js HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 808\r\nlast-modified: Fri, 20 Feb 2026 16:17:53 GMT\r\netag: \"69988931-328\"\r\nexpires: Sat, 15 Aug 2026 00:31:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":808,"size_decoded":1159,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (554)","md5":"1bf60b5cf9c764caf9e85228dc7bfc33","sha1":"22b0d1971d7ec1ec3bb55ff4771752db18eab9ef","sha256":"1a32c475f692c3c84f550cc194a92fff3df6368293bbec3b8e67a42bc2d92306","sha512":"681c26eab518649736ea2c6302120b5a61e0b0749375c8933c7c890b6195de0c6e09a4184c9af8c5fd0f5e5eeda63ba803574bee4c44737899ccd18ce14c97c9","ssdeep":"","tlshash":"8601f11f7c25e13463921c2d23bbdadcf5ad2016101dc80654dec4ad6c34ff9042ab4c","first_seen":"2026-03-03T01:17:34.078046Z","last_seen":"2026-08-14T12:32:21.328057Z","times_seen":941,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:40.631Z","timestamp":1786710700631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/skin/fontawesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158220\r\nlast-modified: Fri, 13 Dec 2024 00:50:06 GMT\r\netag: \"675b84be-26a0c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158220,"size_decoded":158494,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-08-14T15:21:00.632257Z","times_seen":33655,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":355,"receive":465,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/logo/mpgjt216com/logo.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.948Z","timestamp":1786710699948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/logo/mpgjt216com/logo.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2642\r\nlast-modified: Thu, 19 Mar 2026 17:02:50 GMT\r\netag: \"69bc2c3a-a52\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2642,"size_decoded":2912,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x140, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"712e88b03232e71f6dcd809b97699af0","sha1":"502d978f15c2c78b89034bd3d4d2e0bb29d8c708","sha256":"4a5697ba6ae25fe3a156281bd89c8664edf451fb13a07224b63decaba17e76d2","sha512":"1b2b8603ffd9ab39f639c22db99e04bde31d989317c2dbcba651c71d9e70136b62698b42b1dc31476003c852aed3ef79171e618032e96d7d9b31717105f0cf7d","ssdeep":"","tlshash":"be515ba0ec32761dc668f5b300caebb11fc321130a8609d6192baa80d8df50db8f145d","first_seen":"2026-08-14T12:27:30.322835Z","last_seen":"2026-08-14T12:32:21.329125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/hero-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.950Z","timestamp":1786710699950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/hero-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 104346\r\nlast-modified: Thu, 19 Mar 2026 17:02:50 GMT\r\netag: \"69bc2c3a-1979a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104346,"size_decoded":104620,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 732x488, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"93879829b86a9c80fef11b26bad6f3c8","sha1":"fd8c6847ba887d8ced5aa7308043d83ae8a385dc","sha256":"76622dfc82c1e600e28e824b06505348cc4734950ecffadbdb225acf04688a71","sha512":"1a1c26ded63a7841c73eae30f5fbcbf9a96cb3e4d396dc979605ba2bdd49b4c5a76c26ef939d9a2470e72427198ae63446293099cb6fbaa2c053ed663cae3bfc","ssdeep":"1536:JMT4B8qqH2S58kBy9VNFIt+ni4NQiuFQba5/o9T5lSjgkxx1R2oIq2MoaDMotRVI:J5B8VVBy9nFIciGNz2MaF/R2Y2nq/qTL","tlshash":"76a302326e6e70740d5edb29b77ce0281e4b4ad623d68d4c3a70c76ac579bd02e0a74d","first_seen":"2026-08-14T12:27:30.338243Z","last_seen":"2026-08-14T12:32:21.329746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":890,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:40.819Z","timestamp":1786710700819,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T15:45:50.965074Z","times_seen":17889028,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.941Z","timestamp":1786710699941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/swiper/js/swiper-bundle.min.js HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jul 2025 15:58:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6865571e-22512\"\r\nexpires: Sat, 15 Aug 2026 00:31:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140562,"size_decoded":39953,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-08-14T14:48:56.154665Z","times_seen":5740,"resource_available":true,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/departments3-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.954Z","timestamp":1786710699954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/departments3-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43908\r\nlast-modified: Thu, 19 Mar 2026 17:02:52 GMT\r\netag: \"69bc2c3c-ab84\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43908,"size_decoded":44180,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 645x430, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"afbe68c8b824c3075be84ee0bb8108d8","sha1":"721f5b5a9d1c5729009073a80cb723c3a126b770","sha256":"7d63b17dd7d98c3133fd4cb0957bc7988b0d3a272564bc515ca37cf7ff8795a1","sha512":"cd433ad81311d36ec59f4394747a33eb33f85faef843f6646db364055033a9be35096a89b3495b41671819f9aa26cb28184c728a476f5193bdd96c8114b6edc7","ssdeep":"768:72Zyy7oyVafTAVOBsrcYiRHgrM2lnxADWkdI08AOB4Q0raS5g0YqQBDfurf5n42E:72Zyy7DafTzqNYHgdiDWkdT8dsdUBD0O","tlshash":"061302480fd39cc5f744513882be8cea9911cc5f959c7b9a79293a73571bbb82e41e01","first_seen":"2026-08-14T12:27:30.346881Z","last_seen":"2026-08-14T12:32:21.331396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":640,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/departments5-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.957Z","timestamp":1786710699957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/departments5-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54044\r\nlast-modified: Thu, 19 Mar 2026 17:02:52 GMT\r\netag: \"69bc2c3c-d31c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54044,"size_decoded":54316,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 552x365, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cec762c2214b4464011a19b6f9b39d0","sha1":"5ed80c5de2bef3dc4ef3c7980dc7b983fef37e17","sha256":"f3bad2e50e096cad0fd95036190e4dadd1252a2a7db36e1c3d6992fb4b09faf8","sha512":"1d8f274a734a0f5b934e796da97c43cb1937cc23e119a9c2624e8c5c53e7a7aaab1b5157b61c4fb322857053d23ccc3d707b779ca07196212020fc1eaece9f75","ssdeep":"768:m9VswqHdfD9MfFkDI+Cgh4ps+yq82NxDz7ymDYeN4YZnXAGEpQnQOng5f6X+r:mXwfaf7+bQsy/7yJerZX+pgQOgGG","tlshash":"4e33f1c6b8b628052834f4deb7aed5b58cd4c9b64f83be0d7381c5a21a534467931cde","first_seen":"2026-08-14T12:27:30.362957Z","last_seen":"2026-08-14T12:32:21.332183Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":641,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/judge4-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.962Z","timestamp":1786710699962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/judge4-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 103954\r\nlast-modified: Thu, 19 Mar 2026 17:02:53 GMT\r\netag: \"69bc2c3d-19612\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103954,"size_decoded":104228,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 812x541, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"df58858d75b4557a6c920908cb2999c4","sha1":"61fa6c3ad11ad453544b0e18501453e4b49e2da5","sha256":"6503cd9fe39fada9631d23dc980c02758da29027cbdf79c0d1b3171545d978b9","sha512":"1a4aa51579db17b833a67fde3cb146091de3bc2e28aeb1177f6727883028cc246e6e85dc4807ab3ecda12c56d940b6319b777e0d31d251f59bfe5ac3c137a948","ssdeep":"3072:cy6I4vBIWTgey7IuMmO7ry3ZaEnEWxOm9:HOIgtxuMmO7rAZrnEWxOm9","tlshash":"2fa312bb4a4fcb894106f98f515d0adbce39acb9920004a054d4f1e3a40df6a989fa7d","first_seen":"2026-08-14T12:27:30.353798Z","last_seen":"2026-08-14T12:32:21.332755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":892,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/judge5-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.963Z","timestamp":1786710699963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/judge5-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 103514\r\nlast-modified: Thu, 19 Mar 2026 17:02:53 GMT\r\netag: \"69bc2c3d-1945a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103514,"size_decoded":103788,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 615x410, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e2f629d380071a2d93d2b56157a7c00e","sha1":"4032f81efa8935e7d3c9b0daebf487008aefddff","sha256":"ff6fa3d3e05336cdb2c3ad9202399e83476cacf0bfb8edb375bedc0fb9f47e2c","sha512":"11ca6e0e063a8e845640ccffb0debd789c72f83f1b968af7e4b7396a9088c1f876aff9d3f8aadd7e3ac1951744217a5bf87ec586076a14db7ae720c42d1dc4d9","ssdeep":"3072:dgYb9zJXRuCQ7/27OQsK2fJPl0rw8fDj+DX:dzbhJXR1Q7+7ZTYPgHw","tlshash":"d9a312071f20ce2fd2b8bfad70964e5b85d8e71455b02500db18e58eba6b38cd879d0e","first_seen":"2026-08-14T12:27:30.365376Z","last_seen":"2026-08-14T12:32:21.333302Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":893,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/footer-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:40.591Z","timestamp":1786710700591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/footer-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 135134\r\nlast-modified: Thu, 19 Mar 2026 17:02:53 GMT\r\netag: \"69bc2c3d-20fde\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135134,"size_decoded":135408,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x506, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b821e9590c677da93a35d78aa484988","sha1":"63c22e51d1f6b077e5659de0fd6531a2f0dfbaed","sha256":"a65984881c23eadcf4318fe896c044a1eaa9b2bc0af19e025c27371cf183b0e3","sha512":"848b52d39c16aea3dfbec7664433e02eacb0e98ad76b68dd64846494e1b03e8b3fe2276de5ce1f8ffaafa3fea428705c24efa0df1b2ab4a7a4512045b6c122bb","ssdeep":"3072:7nFM9ul7gS4gJ/5eWv0k7bWT0r+9V1JF7XL57kmR+gWHBeDhk:JM9uNgSV/dZg0r+9zJ117P+gWhe1k","tlshash":"a7d312186dd8dd1706820938e426434654ffbf280396846a177a2c3a7ffb099bb543bf","first_seen":"2026-08-14T12:27:30.366994Z","last_seen":"2026-08-14T12:32:21.333863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":859,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":465,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-14T12:31:38.958Z","timestamp":1786710698958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22897,"size_decoded":6981,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17587), with no line terminators","md5":"bbe231af7d6fc57cc085ea973941cc98","sha1":"e5beee05091bceb8ab770f439eb6c18b76919694","sha256":"249197da030bf44b520524b834bba392e08b7b3b4855547fd441779503fb7378","sha512":"1f0a13f9614ffdbe9dd0350ce5a1f8834dd96213c5d9307d3402696bdf73290abefe5c37473592bd1c30ab0b27c969ea82945cac8a9b42a9b819c3f31cfefa12","ssdeep":"192:CXfOEy882MjSbrvsXltYythSXsK/MO+eFppZoat8UHLL1RYB4ppRTJzl:kNyMMjCrkXH08++eFpYenhHl","tlshash":"c6a297377842797b03ab99edb6946bcf70f3910eca7749066bf997c84bd1c838851209","first_seen":"2026-08-14T12:27:30.343516Z","last_seen":"2026-08-14T12:32:21.33444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":44,"connect":212,"send":0,"wait":245,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/bootstrap/css/module.css","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.921Z","timestamp":1786710699921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/bootstrap/css/module.css HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Jul 2025 12:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688221f2-28112\"\r\nexpires: Sat, 15 Aug 2026 00:31:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":164114,"size_decoded":32362,"mime_type":"text/css","magic":"ASCII text, with very long lines (65518)","md5":"67e45932bedd92dd7bc2a7de1653677e","sha1":"b15f3b2e370d9a7c2c40ea991c8f4a839617702d","sha256":"6e25cdc64273a412026df8a7b3510d9ba7dd6cd75653dd3eb884371b4ace73e8","sha512":"d6130c594f82eefca5109421095dc8c0603b44c4c714bdb8956e64278c9c1625263a531a1ad401fa344f180c2f1cbe95af8246c9e33dc6a28316ab243f448591","ssdeep":"1536:qiVj2AhHm0CfrtrPr7AhhTQbdS6U8H2GXVxICl1gGqotJFFp4L/Xzbv9ALVTFCew:sAhhTQg6U8p45s5Q","tlshash":"c6f397309984202cf11bc5eae5d0abef32649801f663077ef66370a6d6c21ef577674a","first_seen":"2025-10-09T23:37:04.753197Z","last_seen":"2026-08-14T12:32:21.335336Z","times_seen":1401,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/departments6-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.958Z","timestamp":1786710699958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/departments6-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57610\r\nlast-modified: Thu, 19 Mar 2026 17:02:52 GMT\r\netag: \"69bc2c3c-e10a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57610,"size_decoded":57882,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x537, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"34efbe6a86193a3fc8da860a452423b7","sha1":"47bffba816010e9fb93f7734632f84440a9e11d6","sha256":"eecaad7c3314cc563fa04cb3fc49ec077d6d46f4f4a5ad5f1739cfe55c418286","sha512":"41e5e9545e3dbd8fd3373bbe1144cb6b7521d25d8a645b4c07f736c44a206b6873873731edecb2a51875c0f9679e6aa1163f957003534a90b90168aff19553ee","ssdeep":"1536:TWVd0ZcvqyIWrWacAyVN5StA2jtwWNynI:TWgSMdaENeOCyI","tlshash":"954301d89e6649c8a0fda16555730f7ba0ea13b0892c366cffc81ee1234cf587a54e18","first_seen":"2026-08-14T12:27:30.349052Z","last_seen":"2026-08-14T12:32:21.335902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":641,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/judge3-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.961Z","timestamp":1786710699961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/judge3-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 72302\r\nlast-modified: Thu, 19 Mar 2026 17:02:53 GMT\r\netag: \"69bc2c3d-11a6e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72302,"size_decoded":72575,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 564x317, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f109a204c47f54d16f5ba4fc999c5d5","sha1":"dc06865ac3d55b89e17bde95f6e7a43bc467dd1c","sha256":"8dffe2e69cb76b6732233dec9f16d5eecd24773eb1fc167f5f72fcb4ac26d5e0","sha512":"3fac5eacb4844cf2854f04110d012039b7c3044fe1cec75a7b7492576236cb15f37ae23350dcb046b708b4410297792eea1e86c8117bf9a6d3bf4e957a7abdcf","ssdeep":"1536:cK8uH7ZymCLSQJC3KKmf+05hmbrKekC8KiZzGyk39aIr:f8UVym0SOamfnOfKekCN8GyGr","tlshash":"92630207ae381a4e5f9a381770b97cc632ce24e75a1e4664d966e6b4f4d0cb2c12c5f2","first_seen":"2026-08-14T12:27:30.351204Z","last_seen":"2026-08-14T12:32:21.33643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":892,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:40.646Z","timestamp":1786710700646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 01:33:24 GMT","end":"Sun, 16 Aug 2026 17:33:23 GMT"},"fingerprint":{"sha1":"77:77:9F:CE:0A:B2:04:D2:61:70:A0:93:C1:04:CA:BE:85:83:47:A1","sha256":"75:6F:2E:5E:D9:CE:94:26:17:52:87:CD:1E:86:22:D4:F3:23:51:74:2E:0F:59:56:BF:8B:3F:B7:78:93:66:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:41 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 10 Aug 2026 02:34:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7938a3-2022\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8226,"size_decoded":2882,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"37e7d1f52c08e5cba53549061a088fc5","sha1":"28c3261f8d0f8046ea8bfbcc0ad0e27c80b4dd5f","sha256":"16fe2998b51bd69b9259cb4d1045e4053b99d36368c45efc805240deebc66f0b","sha512":"e64d59f26fc94e14d5b925894cfcdeace55b2bdc48a749ef9b1a7043df551479d55529bf533bc94d68d5f5f071d501c5cfef7fa3eb13fdde26bdcfeb5f3cc85e","ssdeep":"192:irnMZjBPCpnDZ0CPBfE/k1mp6rPlyJzmRF4sArt+:ljmX7Art+","tlshash":"d602761661d3115b292291a66fb3171b6664d407c20bc9a97fcc15cdef89ac9c8a738c","first_seen":"2026-03-01T01:18:02.551716Z","last_seen":"2026-08-14T12:32:21.336986Z","times_seen":579,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":0,"dns":0,"connect":177,"send":0,"wait":179,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/wnspc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-14T12:31:41.296Z","timestamp":1786710701296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 01:33:24 GMT","end":"Sun, 16 Aug 2026 17:33:23 GMT"},"fingerprint":{"sha1":"77:77:9F:CE:0A:B2:04:D2:61:70:A0:93:C1:04:CA:BE:85:83:47:A1","sha256":"75:6F:2E:5E:D9:CE:94:26:17:52:87:CD:1E:86:22:D4:F3:23:51:74:2E:0F:59:56:BF:8B:3F:B7:78:93:66:51"}}},"request":{"raw":"GET /static/picture/wnspc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-1eb7\"\r\nexpires: Sun, 13 Sep 2026 12:31:41 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7863,"size_decoded":8238,"mime_type":"image/png","magic":"PNG image data, 172 x 60, 8-bit/color RGBA, non-interlaced","md5":"6e6f3e6c749737e6c347ec25d39b3eb1","sha1":"076c805bf394c7996a58202e333827837c8b1378","sha256":"391138ddf53bc321563b3d17fe0f37f5b40efba65fc661dbfa239a2b2184ec65","sha512":"b4621a8e30b49a48b1b13e9582c260b02d42ab2cc2509d59e56cf85028eec3dd165e255dff5c61e689ad8b4eaabe74852185efb2764da5c0ec1133a2ccb02a3d","ssdeep":"192:FQSFq7yL2y34yuuSzYUfBY2kCf9pDnA3+O07Zu86U9S0aN:zFjLX3u1YU5sCzA3hEu86sSLN","tlshash":"26f1ae6b1553fcb469dda7e92063af6082136f48b0077a12fb2b29748135fe5f44aa13","first_seen":"2023-09-28T01:03:26Z","last_seen":"2026-08-14T12:32:21.337481Z","times_seen":1060,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/tycpc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-14T12:31:41.298Z","timestamp":1786710701298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 01:33:24 GMT","end":"Sun, 16 Aug 2026 17:33:23 GMT"},"fingerprint":{"sha1":"77:77:9F:CE:0A:B2:04:D2:61:70:A0:93:C1:04:CA:BE:85:83:47:A1","sha256":"75:6F:2E:5E:D9:CE:94:26:17:52:87:CD:1E:86:22:D4:F3:23:51:74:2E:0F:59:56:BF:8B:3F:B7:78:93:66:51"}}},"request":{"raw":"GET /static/picture/tycpc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-4d7b\"\r\nexpires: Sun, 13 Sep 2026 12:31:41 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19835,"size_decoded":20210,"mime_type":"image/png","magic":"PNG image data, 162 x 60, 8-bit/color RGBA, non-interlaced","md5":"9cccfc8ca4e4f50e4155a906a42666cb","sha1":"6687ef39ed3ba532124b8155234e819655ac0827","sha256":"38fa753bd6894fd8b0fdd94ba7e7bd9da32cb1e58017c44ce0147afba97b4841","sha512":"4e5e74b92841a16efc4cad516894bdaa1eca4ccdca290bcb36bbaa68cbe2011a6d12005f5bc2946532bbddc4e73161589ab3a296a734b78ad12aaa540bed9cca","ssdeep":"384:nC4JlgpsDv49JmGFnsvbCU5jAEVzJ0smbzRgZGme584WLMM0tq5PHcMV:Ccw9J9FybCUTzJ0smbZhwPH5","tlshash":"ba92e1cc99b518a51940f1dc2f338a48cfe9112c29e58776b1d377a2d94ae6f307c60b","first_seen":"2025-02-07T02:11:03.006958Z","last_seen":"2026-08-14T12:32:21.338077Z","times_seen":1032,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/bootstrap/css/bootstrap.min.css","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.920Z","timestamp":1786710699920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 14:17:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6863ede4-38a52\"\r\nexpires: Sat, 15 Aug 2026 00:31:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232018,"size_decoded":32163,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"50c95aae1a6c1e089c11681d1e1906f8","sha1":"a65e4fd8db9bd0440de2d6d73c9e7cd00fce4a8d","sha256":"cd1826581e4f2b80af4f1e05897b316c7698441063cffaefbbdeec382ee4cd72","sha512":"7f0edff9370c8d36fb6e96cb25994ff20d98e17702c85656f2ecbc1ec459b07fd2c1b330d2994a1c51ebf7d0cdde5d3856c60dc2fce27145ffeaababbc8c5bc7","ssdeep":"1536:v9xnXGi9GfJkfvq5wlP7cQZDR9uvV982sYRElV6V6pz600I41r:HnXp9GfrV98II6V6pz600I41r","tlshash":"d03482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-06-19T07:12:41.126365Z","last_seen":"2026-08-14T12:32:21.346667Z","times_seen":2887,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/swiper/css/swiper-bundle.min.css","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.922Z","timestamp":1786710699922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/swiper/css/swiper-bundle.min.css HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 00:36:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686c681a-4691\"\r\nexpires: Sat, 15 Aug 2026 00:31:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18065,"size_decoded":5190,"mime_type":"text/css","magic":"ASCII text, with very long lines (17812)","md5":"ea28ae0aaf82709381c57d6a7daa7a05","sha1":"a7c528dc9018aeefed9a52337168decb220e2f61","sha256":"af8545de3876815292506711e1369bff9dfe57ec7e04c45c3e1bdac48a11f3b2","sha512":"9c63402a957e06b7c365a6cf5f53baaba991953e7bfda99d8feeaf177db6a2782a28004b1d82df2dcde362d5556e4891f6da300d63cf13d816144dadb1920f66","ssdeep":"192:1VmUJbiKne0JlXZHZ+Sme+jexS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9A5Q:1gUbe0JdZHZ+W+SFnZ24tlWfF4XYz","tlshash":"d08245a85340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9132f6a9","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-08-14T14:48:56.200876Z","times_seen":6367,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/about-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.951Z","timestamp":1786710699951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/about-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42484\r\nlast-modified: Thu, 19 Mar 2026 17:02:50 GMT\r\netag: \"69bc2c3a-a5f4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42484,"size_decoded":42756,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 612x408, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4a6fa6914cd9c68401fb0c83f10a4b45","sha1":"398be3da6d3628f627d0b93c28e4eea0c088f12e","sha256":"a8515a8a5bde4e93ce20f7dc203ac01a30a1b53e9829d7e39eeea2bdef0527fc","sha512":"d3c80edbdb5e7c0236e4298d9970f6dc7448e36545d312329e0ad1ac37fc11733aae1f4da83ed2098b06ef5f9a2869ad295600ac47d541cd01ee253e645ee8db","ssdeep":"768:z9fRu2IyYFsYdnfk89x5MJLsQ4rgFpW+YI9VPXCziSNK7K0oe+cnS9AFNJatH:zFRu2IxFfV89BmgTW+nVPXCz3N7De+ca","tlshash":"7113022154387cb209af48b4cbdb8733d15b9e015f6af5cec963aa1ce9d7c48d90a810","first_seen":"2026-08-14T12:27:30.37593Z","last_seen":"2026-08-14T12:32:21.348874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":425,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/365pc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-14T12:31:41.295Z","timestamp":1786710701295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 01:33:24 GMT","end":"Sun, 16 Aug 2026 17:33:23 GMT"},"fingerprint":{"sha1":"77:77:9F:CE:0A:B2:04:D2:61:70:A0:93:C1:04:CA:BE:85:83:47:A1","sha256":"75:6F:2E:5E:D9:CE:94:26:17:52:87:CD:1E:86:22:D4:F3:23:51:74:2E:0F:59:56:BF:8B:3F:B7:78:93:66:51"}}},"request":{"raw":"GET /static/picture/365pc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-2255\"\r\nexpires: Sun, 13 Sep 2026 12:31:41 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8789,"size_decoded":9164,"mime_type":"image/png","magic":"PNG image data, 189 x 44, 8-bit/color RGBA, non-interlaced","md5":"e0c9d379cd4926e815abd7d25c32f5e4","sha1":"e9a1fb55262d96495f14da278c7242cc3fda956b","sha256":"7b50586f667edbeb0c3d573a44d40742354c385a2d7ae1971aa4b0173c11173d","sha512":"519aaeff0baab73e269e86413df78c8563728cb4b1f17e448877c4853a726df366f201b9e869078a4fa460517530a84b5ae9da4290511aeb4d0b93aecb9ac99c","ssdeep":"192:6ZTS99EegUNgEBTJ35PgUUxiKlqSvxV5mG5pqghmCoTHV0:2YzgogEr35Y7cK1YGmAMT+","tlshash":"1e02a0bc5a62079b3d1aa9f8172c54f1fdd070eb411f7c99947d201b0c68a1c83af4a3","first_seen":"2025-01-31T12:39:53.02929Z","last_seen":"2026-08-14T12:32:21.349775Z","times_seen":1037,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/xpjpc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-14T12:31:41.296Z","timestamp":1786710701296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 01:33:24 GMT","end":"Sun, 16 Aug 2026 17:33:23 GMT"},"fingerprint":{"sha1":"77:77:9F:CE:0A:B2:04:D2:61:70:A0:93:C1:04:CA:BE:85:83:47:A1","sha256":"75:6F:2E:5E:D9:CE:94:26:17:52:87:CD:1E:86:22:D4:F3:23:51:74:2E:0F:59:56:BF:8B:3F:B7:78:93:66:51"}}},"request":{"raw":"GET /static/picture/xpjpc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-5800\"\r\nexpires: Sun, 13 Sep 2026 12:31:41 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22528,"size_decoded":22646,"mime_type":"image/png","magic":"PNG image data, 183 x 55, 8-bit/color RGBA, non-interlaced","md5":"c53d923594566be7e0e41e8d720c0ac0","sha1":"e16a4b701d10291bbff90178e8b0d5f576e00821","sha256":"021994557d1d9642fdc16a0d8f6e471bec81bea7f366de6ef631f536c165418b","sha512":"554f7d6d44d26905610a65e21bd157ec30fef501c356e97787deca22f9089216f59e284f0effab7b18da89134af594d4ffd5eed889b1b5a4d5a5412456b9832e","ssdeep":"384:QfchEzlZmrXTjUDkJe2tERBxq2ceTdr1lFJ3d2Oo+UQSYJshjRHXvcQ:QfchEzrmrXTjUhP42cKpFJ3lo+UHYa//","tlshash":"fba2e0f1f36ff1b54a924d554cf8e2b080978942e088ee6135cb204acade8d31d993e7","first_seen":"2023-05-07T20:04:35Z","last_seen":"2026-08-14T12:32:21.350526Z","times_seen":1176,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/departments4-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.956Z","timestamp":1786710699956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/departments4-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 79812\r\nlast-modified: Thu, 19 Mar 2026 17:02:52 GMT\r\netag: \"69bc2c3c-137c4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79812,"size_decoded":80085,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 682x454, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"356489419e659ad0b231bee4f60fd6ec","sha1":"70edc70d7819e57f332438edca509f90ec2f5d82","sha256":"bf651d975dd4e2a476e445e85cbc8968171ef7bdcc3a72439ff5b4dd31362ae7","sha512":"34a8118213c4e6a8e24f07fc6fa4da50d3c7ff6a2b0eec59340160c81b516690bff6b990ce73bf6772ed9b43ad1d8852eff3073afa4da617ffc42acd44987888","ssdeep":"1536:x9hhnIPkIoa9nvViKfaJOt+e+dr3VPkBcRXbBk7Z1rc8ykyldY7cCJkNDO3:xIkl4n84bt+e+dpccda7hMdskNy3","tlshash":"04731298eac2febf1c9ca437c9ff6249364aee0b27c90522d1441cf55ac694151321ed","first_seen":"2026-08-14T12:27:30.38544Z","last_seen":"2026-08-14T12:32:21.351336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":892,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/judge1-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.959Z","timestamp":1786710699959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/judge1-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56762\r\nlast-modified: Thu, 19 Mar 2026 17:02:52 GMT\r\netag: \"69bc2c3c-ddba\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56762,"size_decoded":57034,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 596x397, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"db35039dc53bb3ce4c0f23c00183ed44","sha1":"4f13c5618a897820869d7ff65c68a81dd2a5d11f","sha256":"1de38ed897af850935932ea346b330511032256ce38597e098b96eb562f1acfe","sha512":"897c6891b4a2b778d55a5732ab009f7cda0728ab20760211e4f9b2fe7658af8cf9c9e62f22e57ecce983ebbe5f009fb99f154ad354012b8be5dac05f33eaa949","ssdeep":"1536:Uph80y5FwcYIXjBIcbkpcwQi/r9e9bsdPuaCSt:Up2FwdIXtBbYQcJwAd1t","tlshash":"5e430262360f99cf50458685db9fa8e8fcebe49de46cce9c95d80f614f4e110e063646","first_seen":"2026-08-14T12:27:30.326188Z","last_seen":"2026-08-14T12:32:21.352864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":669,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/ico/favicon54.ico","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:41.725Z","timestamp":1786710701725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/ico/favicon54.ico HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:41 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Tue, 08 Jul 2025 19:42:24 GMT\r\netag: \"686d74a0-423e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16958,"size_decoded":17232,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"d87ac20d5d70f1739512e279f672b9f3","sha1":"a9ec630ab2b9250066d28baa63587d9ca6bd5db6","sha256":"50e433253b3c4575135119ab8bec89e8273ae4ad6488d54a6a398b450d2ecc54","sha512":"05d8a0660295a89a5790b33be82c2a5a7f1a1d51eeca90c71156f5a9f97e30c05ed6bc8090ac5e07aabfc5d0744bd1a02c31bccbea3e5573078810925423a7ff","ssdeep":"96:ZNQFxt/03vUWzuWUajoZoyvj8u2/gTMEiCCmZQjnyqLWRnjos2Dk0x80/RWSaaaE:eKvUsb0L2/rCCpjnykWRos2wI80k8","tlshash":"02723327ffaada43c40a6a721094d93922272dde70214151b8cdffef3c7d90a1e90656","first_seen":"2026-02-01T13:01:08.264316Z","last_seen":"2026-08-14T12:32:21.353827Z","times_seen":7,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/fontawesome/css/all.min.css","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.933Z","timestamp":1786710699933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/fontawesome/css/all.min.css HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 14:17:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6863ede4-1907e\"\r\nexpires: Sat, 15 Aug 2026 00:31:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102526,"size_decoded":23140,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"c43cd173eeeba2f72aa6b431d06b8c07","sha1":"427a692f7f39eabb3d5b8510aee2743025daf813","sha256":"c880eb3d25c765d399840aa204fec22b3230310991089f14781f09a35ed80b8a","sha512":"02f6f6422b83104bc1e1b64961d7edda63635528417ed2dd3c6f0527457b8ab4cb43c528d2a70fc61e0f96aec6e6d1a6d2b53ed523e1568b6d78ba41111c1393","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq","tlshash":"4fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-08-14T14:43:28.993736Z","times_seen":14671,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.939Z","timestamp":1786710699939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Jul 2025 15:41:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686401bc-13bb5\"\r\nexpires: Sat, 15 Aug 2026 00:31:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80821,"size_decoded":24420,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-08-14T12:32:21.355475Z","times_seen":2881,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/departments1-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.952Z","timestamp":1786710699952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/departments1-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 157258\r\nlast-modified: Thu, 19 Mar 2026 17:02:51 GMT\r\netag: \"69bc2c3b-2664a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157258,"size_decoded":157532,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 683x452, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"611bcc164b4b47af35e6da2702982b74","sha1":"9e2b1c136674c59c418c5b1818648bdc8f77c443","sha256":"3f1e77f926bed8a53c25a9c4b513adee43a36662ac40e8402ebf7454d74bfc7f","sha512":"083be6eb902419bfac9885f821fb41aeebeea5e2aafd411ba652ac3ba7b6b1f4119b668c4bec3ef8540721cf5cc8e7d71e84a64c4a16ffd1e6d2cead40dc218c","ssdeep":"3072:V/ZwvyOCtxVfhyscCNPJUCp+Rgy8U1hkA24cGLXIJpLlXN00gT5Ox7O:V/OVC1cuPJUQ+Rgy1kAUJ+0gT5Q7O","tlshash":"bbe31256dfa3c568b1317ca6bbdf2c6c0a72285dd16f10fc2075aeab21ac413514f39a","first_seen":"2026-08-14T12:27:30.379391Z","last_seen":"2026-08-14T12:32:21.35625Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":895,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.pgjt216.com/skin/cover/mpgjt216com/departments2-54.webp","fqdn":"m.pgjt216.com","domain":"pgjt216.com","tld":"com"},"ip":{"addr":"156.227.79.251","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.pgjt216.com/","date":"2026-08-14T12:31:39.953Z","timestamp":1786710699953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg33339.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:32:32 GMT","end":"Mon, 21 Sep 2026 13:32:31 GMT"},"fingerprint":{"sha1":"CB:04:FA:BD:4F:76:AF:97:8D:03:57:75:DC:C2:CB:F7:FA:4B:1A:F4","sha256":"32:91:C2:8A:3A:FA:0E:04:A9:38:72:B8:54:10:CB:C0:D6:DA:52:3D:99:9B:53:AB:3A:5C:BF:C0:E2:76:35:68"}}},"request":{"raw":"GET /skin/cover/mpgjt216com/departments2-54.webp HTTP/1.1\r\nHost: m.pgjt216.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.pgjt216.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 14 Aug 2026 12:31:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 166086\r\nlast-modified: Thu, 19 Mar 2026 17:02:51 GMT\r\netag: \"69bc2c3b-288c6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":166086,"size_decoded":166360,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 803x535, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e1bfea3ebb48933e559d8a9f94dfa050","sha1":"1bc7e80d39bbdb4ab1a5ad2228c2a7447d5f79b3","sha256":"fee63abd6e8f88608c1912d6c6ee9af17c2d3b746149a6dac84126f1d5a3d75e","sha512":"15113cbf3e5ee45aa5aff3fb6c8a779a95475b973ec4ec237235882d6e2bc8f609af06ff98cdc43d99456b0c951d1d558af727537835426de79fde156866892d","ssdeep":"3072:RZlhA3T2UlVpP0NncnBVxFRHB43a85gk7njJ6bUmgb1489d8N/m5KQDVCZk0K:TloTlsEBVxFRC5Nc4moV9d6m5KQ5CyH","tlshash":"17f3120ea2bf95dc89db691727cb9f117ab4eebcb41cda30cd78616ce5e15800f88584","first_seen":"2026-08-14T12:27:30.359643Z","last_seen":"2026-08-14T12:32:21.35714Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":895,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"m.pgjt216.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}