{"report_id":"e9ce43e4-c399-406b-be9c-b42915c8b696","version":6,"status":"done","tags":[],"date":"2026-01-08T11:36:17Z","url":{"schema":"http","addr":"met072.sbs/","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"104.21.37.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"title":"Japanese Porn Videos, Asian Porn movies, Japan Sex Movies - XVJAV.com","dom":{"size":125746,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22410)","md5":"2e6de8010eca2c5484753fb06ee62c02","sha1":"0b4b212d5e9f2bf7892633b95a4551497eb9a3c4","sha256":"d88981e21eef00d0fdb37e6f1c8bf174c2e11d6f3c519d803fbea4988abbadbc","sha512":"04a2a296d7db7676373f0c8b9890cb5c594716ba891dc2613556c88ca11210745c3395db65bb8369d14594fd621e51cffad3152269baccc391a6ce24bd66c925","ssdeep":"3072:hSbxkdaRPMME4kH+YwawFSFnO3eUHH50+JQ/mtm2W0vU9QkPJkaFYgbm/3f28gj:hSbY00","tlshash":"7ec308f36219257f234786c8ea21b32c73275a5fea870c40b97d8b8447d2e64fe6d581","dom_hash":"domhash4f5740327fcbf5b4fa790884082a409b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"met072.sbs/","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"104.21.37.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-12T11:36:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"cdn.sgvafs.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"cache.sgvafs.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"node92.aizhantj.com","ip":{"addr":"43.159.106.248","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2024-07-29","domain_rank":2777266,"first_seen":"2025-06-02T19:05:33.428728Z","last_seen":"2026-01-05T16:48:44.912131Z","alert_count":0,"request_count":2,"received_data":36470,"sent_data":1232,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":23026,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fy.playergo.top","ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-08","domain_rank":0,"first_seen":"2025-10-12T19:58:03.268786Z","last_seen":"2026-01-02T06:23:59.888005Z","alert_count":62,"request_count":63,"received_data":64572,"sent_data":30089,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"met072.sbs","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-05","domain_rank":0,"first_seen":"2026-01-08T11:36:18.931441Z","last_seen":"2026-01-08T11:36:18.931441Z","alert_count":0,"request_count":26,"received_data":1488787,"sent_data":13234,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.sgvafs.top","ip":{"addr":"172.67.74.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-08","domain_rank":0,"first_seen":"2025-09-16T09:15:28.460867Z","last_seen":"2026-01-08T10:29:08.271163Z","alert_count":1,"request_count":1,"received_data":2048,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"cache.sgvafs.top","ip":{"addr":"104.26.0.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-08","domain_rank":0,"first_seen":"2025-09-10T03:39:13.857252Z","last_seen":"2026-01-02T22:33:12.76268Z","alert_count":3,"request_count":3,"received_data":22978,"sent_data":1504,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-04T15:48:44.603713Z","times_seen":102352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc90c948752ab9ab747400f3d6095f43","sha1":"ae63a93627e8d7395bee83a8a257265c7a469fa6","sha256":"4b1f764dae0c3c4904335787ebece005e353cc12939b7b76c25657d2488296e3","sha512":"2a7e04ae620c160118fcfa29e754adaf10f912a10f3de909934a2bdea1c11c9dc8c99aeef4a1e61f406dbafb142da2a6e78a583d3f9aae4b23218e0377bd2022","ssdeep":"","tlshash":"9c11e926e6051a1342fc41fe0b8ab30c79d50c22d784d852bf0a58381e15a3f13f957e","size":978,"data":"","first_seen":"2026-01-07T09:29:35.808644Z","last_seen":"2026-02-01T23:40:17.560212Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7255e721ecb194d6431bb244cbbaabd","sha1":"e1df2b13ca86fb3f526ce83eba3d62e1284cd69a","sha256":"b9f8575a52ec3dff3c035e83b49e7f7959ed8b2d57fe963b41da4c36aabf3aeb","sha512":"f72e7d4ce8eb3e02ec507f892e9a756c1bb51707c454f8bc4752ce3c46423b3392715eb093b346d3a1d0d1688578f360fc4ccac3bc5ea3fb40fa2e66f2555554","ssdeep":"","tlshash":"b5900454c54110005455175553c3df1c33075f35c401401143dc1100f435c03d013fc4","size":41,"data":"","first_seen":"2026-01-07T09:29:35.847053Z","last_seen":"2026-02-14T08:25:35.158748Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"45903b212599a6fcd38cfbb6704f55db","sha1":"353d6e0e618f49cb1266dd9ad0d9d12039e36a1b","sha256":"5e360a820c740aadfb8e7d936f9c50e5aef053775edc2b06c6d5995804ca307c","sha512":"afb792e0da3a4f2af3dbc92b7cace1056ae78fa6cccbdf3105cc740c2146b3e8df366164e94dd97d72b201efd3934a54f8a66d3bc683cf346f00d941d1343852","ssdeep":"","tlshash":"d8c08cc4a0d22e001a02645010bf28e8a024452674481b03ccd4ec583e220f08233e9c","size":142,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-04-04T06:16:44.067975Z","times_seen":946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"245560fb1f88235bb4a255ec2775d512","sha1":"20010b115466299f8709f66681d43a9730a781c6","sha256":"305ce3015c2c143a82dc897104084d2eaf23acbb0ae7888de1d4ec608acb5e81","sha512":"6cf1f9160fafed527d3fb95edbcdcf2fef072b95d0e0f111ed95e0e9462bf6876caa7f6c270ac413df5cffc380a8345f1c894d97d1fd3935f76b38e8db8ccb6f","ssdeep":"","tlshash":"64d0a7e892e36d0052066330b56f2ae471264426618455064daaf9982da70f0c37ff88","size":231,"data":"","first_seen":"2024-02-13T05:07:26Z","last_seen":"2026-04-01T06:19:37.477257Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"704d1a97bb7b70d4060063ee6a8486c7","sha1":"1677ef8adea7d66d4ee5e990be5c718b325f8182","sha256":"5281f2c2f661b08288b8f90338394bce4f6ee5b5a70f089e885d8eca0088161c","sha512":"45798b9bccd4f382c23997c590e92c13e784ec72d6e624e0fabbca255fbf0b6e2622844008d8283ee5dce959aab4a60a698c51e4f2600a60a9e23c36e2b4f6f3","ssdeep":"","tlshash":"41c08cc9a0ca2d00360274a011ef28e8a024842670485f928cd9dc482e220b88237ea8","size":147,"data":"","first_seen":"2023-07-02T19:34:06Z","last_seen":"2026-04-04T05:38:56.995215Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9eed6e45f374412e30529154bb14b99d","sha1":"8963adb2d12747855d90e8370fa008821ccde289","sha256":"8c135b9137c78d62a5b9a43daa95167b35a57fb12ad9bd14704a792d50d011d7","sha512":"3dbc61a5bf70560483d8894ee1b7b5bece0ecc6e9a54ceb11f3f9f3fb543a965aa24306fb0093a2acd21cc266c7500e746ae7e2b273ed09895b7e694ef56097c","ssdeep":"","tlshash":"a4c022c060caac082911a58000af20d1a02840aa60480b438ce6ec5a2e220b0a27bed8","size":190,"data":"","first_seen":"2024-01-27T11:37:36Z","last_seen":"2026-04-01T06:19:37.486887Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-04T15:48:44.603713Z","times_seen":102352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node92.aizhantj.com:21233/tjjs/?k=f895ld4tcvj","fqdn":"node92.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.159.106.248","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7846fa717757e9eb9a3d7f12c3f66859","sha1":"ff397bf7a4f65d1b5874a9db6ca274e9bcba5920","sha256":"2c49534d15bb71d13bb5d34e55c88c1d8432e3edaffaebab7cf0a56a0d18da56","sha512":"a193178a673b59c03962e575f313b2cef277a1552c4bb1f7ebabd14625e0d8deb2bde46f285f82649d263d3b3929d6ca8ea61464c073cffc6a71621a7068627d","ssdeep":"768:+sC5kuNkdE4rDE93/BvupsHs27ZyXnD0T:jCOykdE4rDE93/duYZknDm","tlshash":"dff2d7d632ca2536a27670a9d95fe50cf4b9aa1437d9ec44590cc0c46d208ba83ff9bd","size":35397,"data":"","first_seen":"2025-10-01T10:31:27.884549Z","last_seen":"2026-03-27T06:19:47.120983Z","times_seen":1055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/resource/aHR0cHM6Ly94bnh4LmRnYXYxMS5jb20vanMvanEtc2xpZGVWZXJpZnkuanM=.js","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.0.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4448d0ef59fcf5174d5c2592c07665db","sha1":"bb0bb7cbef8f9d8b44b9e12309d895567542718e","sha256":"c7c938f1097ebb4ebd688d907683428581db12c23e856f1d9f05bfe2edfc0238","sha512":"0b19d16cf5e49c2c3a53060f8e1206f1eff39407fd5a2cacec693e962a3bf84c5c60d7018cab015247dbad1901414fcd94eba162fed8bfcd7f6d3c98d62563aa","ssdeep":"192:CKPS5dNyHxk48GdcjvOqTduNTNd3ddcaTteAYPMGwI8QYcTL8YUTMo13gMyHYWVv:zPoIxk4xdci3vs7wI8QYcTL8YUTMKQL/","tlshash":"ab220f5a6aff2125d16bb4665e0f911a3a31404f244bde2c3cec91d0ef9487c16b2ef8","size":10144,"data":"","first_seen":"2025-06-02T15:45:03.145124Z","last_seen":"2026-04-04T14:17:41.841435Z","times_seen":1278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ba4dc073169348c9ffeab26815bb97e","sha1":"177697011fa6750c77b7106e8547d1f586af2e06","sha256":"0633fd53450e5d4a52b25568e08fbbead644686c61f23ba5c8c6b32b8b5fc2c1","sha512":"9d491cb0ab207c6dcc3626c27800f6ac732330175e5dabdcba3fc79fea5f54eb7c9d4f952bf77e0294961b6e8f914340aa32fd46276d1a0210f16b89ae025eb8","ssdeep":"96:90yROy1rC6cYwOMdq+wVPPxCOM1l2l5lglOlElulIsCA0FTfaDtCCdug2YflgKCE:90yROFE1PxnO+Jug2I+pgikkpp7g","tlshash":"bc92cad1e393fe80bbed94499285ea494b331f4b83a51dd6f924b8c152c9320b3b8597","size":21190,"data":"","first_seen":"2026-01-08T11:36:30.504106Z","last_seen":"2026-01-08T11:36:30.504106Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/upd/20251210.093405.7267/assets/previewl1b.20210114.1.js","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c590852dd189e3b756797480c613f8ed","sha1":"f2d8e9a416ae7b313b8464ec1428978c1fdf97fe","sha256":"39f7e9709a729259ccc447332203fc733e1bd566794d9dee25726e7390b3d12f","sha512":"0bf3438b41aa4b686e6aec0d0f9ab87f8c1b57b27ea305634d6fe7915ad241605f07c006997ebf67c661e7fd1ff899678892408b42e8f7bd6dad0648b9846c2d","ssdeep":"192:WzpOIztlomle7aVcUTCjbwbyqCwyvJHnvZOQCvvCBj:WRYYcUWjbwbyqCwyvZnvZOQCvvCBj","tlshash":"bce1f7ad36000a3b9ceb5bba64bee40835f21439fb474820d429dd754ea8cd531b7a8d","size":7267,"data":"","first_seen":"2024-10-11T08:53:58.412501Z","last_seen":"2026-04-01T06:19:37.407429Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/2vfoql1wyp/ggpsedl396.js","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06a911cab5a235bd1d8e3ee1f8171594","sha1":"598b16deb2db05ae2933bc953244fbf50218f150","sha256":"6fc080845769e824b237248bbed826224044abf9f5c1882e03915eec10a9d042","sha512":"a5a6fd7ea2ccae520b5d1320aadd611f2b1f5373c286c74c071e0f565cac63c5cb8d097671825c38665276b7fb29bec353a8a61c034cf7e72f003f4a8e0275ec","ssdeep":"1536:O18MdnC5OPz8QP9r2RcZSgtK8sBggphk12FoX50FtQySd8uj6DzKEVKf7lbe0etc:mFSGSgtqZDqd8uODG0K5y0etsz","tlshash":"64e34adcb2d2b07407e75099d83f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","size":147735,"data":"","first_seen":"2026-01-07T09:29:35.683303Z","last_seen":"2026-01-12T11:48:53.086563Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b0c2663c6b4ace94eb154f732487d43d","sha1":"6feeb653202deea0836ac4dae3469f68061e1c92","sha256":"4a426ff978fbf4d42b2a19c7bec85ebe4fb3587a22346938be04abb9290a87bd","sha512":"6639f8bb2404a95dee9cb0633a034e17f946ee1dfeeea1d70d6c23dbdd0a3ac4f73f8783a596f68680af88de378d455a010e1af80221f9f565075040eae05bc2","ssdeep":"","tlshash":"87c08cc8a0c26d202606641010bf34e49028802770481b028cd8d8482e230b08233e98","size":139,"data":"","first_seen":"2023-06-17T20:50:25Z","last_seen":"2026-04-04T06:16:44.021063Z","times_seen":433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7a2e86b9bb7e97a9530d0ac66c360557","sha1":"78ba4cf78c61518d918b1641e965e21415ab5e00","sha256":"9a96c7431c2d1007fdd0c2a3cdc9a095e02bf2e09960efb5ee3709b80dd0a56f","sha512":"6761ccb3e36c6c1beedbedae3f5410d3a02e14b88691db006c2e4a058326e3d7818f50b9286b3b627022b92e235419e25fdd3af1530039351bbb793cb7be5f52","ssdeep":"","tlshash":"eac08cc4e1c62d002a02652014af25e4a0284427704c1b03ac96d8482e220b09233ea8","size":146,"data":"","first_seen":"2023-10-26T08:17:46Z","last_seen":"2026-04-01T06:19:37.485214Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6981ae2d288401ddae6b6d3b53bfe45f","sha1":"ee0e1cb2dfd6501895613e0b28169e50da8e5ab2","sha256":"1e7780fa072a7eed78cc3487730d897868c33519fb20e51548e00da6a7394ca7","sha512":"ef7022a020a3cb22713eea7d59fbcb83430ea49160454eef4bf1cbf224dc5f82637d93fe6d0de118e6cdddf7eca20a978d5215695ea481123853411058e58ae2","ssdeep":"","tlshash":"e9c08cc8a0c22d001602645010af24e49024402670481b028c94d8482ea30f08233e98","size":137,"data":"","first_seen":"2023-10-26T08:17:46Z","last_seen":"2026-04-04T06:30:59.734971Z","times_seen":850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66422aaec7a43cae6642a04808858eb6","sha1":"81388dcfb250e852796155a87a7a706127955584","sha256":"2edbd77f83947ad45f14b2e9892b05c97d423210f415c720452ff19896664ca1","sha512":"030d34e4a3b13859443c70d7aa69867416f78ed051060779def30a4462a3c8600d1f59f1bc133ed5ee4cf08e6667332e24e5acb0dc379af3640335bb470d9dea","ssdeep":"","tlshash":"cef092251e731570d22790ab133ee71129b301637045d11b7a8ccd0edfa0e52887a8e0","size":442,"data":"","first_seen":"2026-01-07T09:29:35.857151Z","last_seen":"2026-02-14T08:25:35.143444Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/js/main.js?20251024","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b615060f6dc4c0933cceb68b4ca5726","sha1":"ca876a6095d0e61a0c5934e00a61a63159bd2081","sha256":"5811cfcdd0aa80605e4c78e2b9abebdcccb8e5a8285cbddb75859fec323da854","sha512":"54b02694a6dc545a9a7c3b0886b67bb2b47b783567cf9db2c3db080688e44acb32f49c368a051bcdff52a89be38ec9d7e4e41db8a47691d056dfab74b39757c9","ssdeep":"192:Uls/WRlsB1HBirJ8bJFalC9DPEHt/IcoXMCskWp/G5GzgymyXOzkBKqPT06CylrH:SsGsBBcsYC9EdNcIpPI6/f","tlshash":"c47264181bf7083199a3116e6f9b13487271e01bad4bcd4d7fac86c54f91e2489b2fb5","size":16859,"data":"","first_seen":"2026-01-07T09:29:35.715989Z","last_seen":"2026-02-14T08:25:35.066853Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c413ebce77d0cdb4e8c78df1f94dccfc","sha1":"c9683b626dcf8329e8a8e2dca0b992b314d6b5a0","sha256":"0213dee801321f67a065c360d306592d7a9a103e2c85d42fff88cd3671846d2f","sha512":"ba22b3c97ee85a49503cb67015e329e4553f439c89b32a326cc11ed0510d9db3359ea01df8a64b3ef9faa339e2029a1ef92d4559126650211ea21413b4c5e091","ssdeep":"","tlshash":"bec08cc4a0c22d105616691150af34e49024402a74481b028ce4e8493e634b08233ea8","size":142,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-04-04T06:30:59.742244Z","times_seen":1647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cb55dbf81fefd4869616ca50dc0ea759","sha1":"ab2bf1d303f956537703dcde8a372a4a91fea224","sha256":"c8c2ee79fe276478c744c0407fbd53812dabd9d93f542c2d89d706c0eb8865ee","sha512":"cea0daf7e1ab80dcc98f7bcc4882391468ec4c71ffe85d5e547574b9e09704c97168afda6189814ac951112905a3deb124ae0e25094953748f90261006b24704","ssdeep":"","tlshash":"0ec08cc9a0ca2e002602745011ff28e8a024402674485b528cd4dc482e220b48237ea8","size":143,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-04-04T06:30:59.767821Z","times_seen":1650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9db7b970fc77f8af6ee2e06fd5902a21","sha1":"08c54cc8bb1a93142a7cd03f50a7238bf86ffa3e","sha256":"860bb07ff65172dd357c82ab5f60a8eae03ee82febb01c2f345546bac46a635c","sha512":"1a3dbc5ca7769a0daef75d48f98c7de9b9bebd9190d20d3a18a2fe34ff4f7e3a30a1603e2e61e0d7e9d7d591f6150e1775e028f56cf12be2eb5d7574e9b95fed","ssdeep":"","tlshash":"3ac08cc4a0c36d001612745115af24e4a024842674485b029d94d8482e220b89233e98","size":142,"data":"","first_seen":"2023-04-14T08:59:54Z","last_seen":"2026-04-04T06:16:44.086147Z","times_seen":639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"49400019217f7b2f8b62309c8955a405","sha1":"5bcb4e7566d9c7759bdb63ff48b96039b8b9e42b","sha256":"cad92fa4fa8878e6bc223a66c6093f8b0e4f40f60ed3b529898034db71ee935f","sha512":"e88991dd8b02009e1e4ecb93003de582822168ff6945100cbb1ab44bb7701c8d29a00cfac3d9e39b6a32fa25bbd3bc6fc6fe2d96097cdd4b76d3b6820a3b0762","ssdeep":"","tlshash":"91c08cc4a0c62d20160a685010af24e4a034403674481b128c94dc482e220b08233e9c","size":141,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-04-04T06:30:59.734423Z","times_seen":445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"569d9c518a1df21dda9d79dff52c2840","sha1":"9c7d3ea9ed59c550ab55bc05e0c4397fe12776da","sha256":"ac6844551695f9985659a758159b4fbceaf04f9a628b54ac61acc08549cf2517","sha512":"70ec61241bf75f353c4f435303a4612ad8ad8cab7c1f375c9a16234119b2c52845a0f3bd52001a21654b111a0ca03d6d06afbebf5ede4a7ea3a8157e1c2dcd9a","ssdeep":"","tlshash":"d2c08cc5e2c62d001a07651014bf29e49129842670486b039d94de892e620f0823be9c","size":150,"data":"","first_seen":"2024-02-13T05:07:25Z","last_seen":"2026-04-01T06:19:37.444361Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/static/assets/vendor.8faa8687.js","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c4d25c3fe174d84abda219d70948e1e5","sha1":"04f80a5fbc7c64708e57e33ddb0b7801ee9ff05b","sha256":"487282d6bdf942edab0aea534987d6b3efd3f3efd4747b060a129bfcbe8a162b","sha512":"f63c1172f64a956587fe16c1e416810036ad8d1e0d8058579d616553c04ebfd2a1f857d153532f130c4c575662cf4a798b7e729fdff744630d4dccac030592a6","ssdeep":"12288:ElHYKdi3+SbrgbwHST8/ku2oKmOuN7q74BVgWF8FDqtDFqipgT5xLe01h5rzXs/G:WJdiIucBWql+1k","tlshash":"d8a4645a79902039c233f3799a17d805f936172f2285865b7a7c919d2f32828d3f5fe8","size":456915,"data":"","first_seen":"2026-01-07T09:29:35.732795Z","last_seen":"2026-02-14T08:25:35.060192Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec3f3bfedb81856e63a58c3d1d2415df","sha1":"f37925271271d05ce9590c2a3653a75159169608","sha256":"7ceeec9f52a29bd655344b771d0080ae0a0537ae3bbf1accdaac6c9379a672cf","sha512":"da16527640db9c63e8fb1024e7e05f6ba90b35adbf81f4e64071c78baf9e3f4bfa3e72c47384e6f28f07376835186e56fb55dafe4a0bfe926454dec96113c9e9","ssdeep":"","tlshash":"10c08c5f230f6e40071002e00fa2b918132a8a5f6fc161047a8e8d8a0f162492a89a96","size":170,"data":"","first_seen":"2026-01-07T09:29:35.810219Z","last_seen":"2026-01-12T01:31:41.654377Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c4aca76fbb55660da06477dfb1213f16","sha1":"895f854d00dfb9255cfb0a63ed928240d4a0f405","sha256":"40f66a542a86eb29ef8fd2b55753fde24b809b1d7482e44db4d93c5a1c49aebc","sha512":"6323f61d40bff5d535e39cd7a021d17ab63311566098ffc9e1220a3625e73e1175ef7e6e14beabe17415ec5c43d69e51f10602e1ec231ac14f0834357e123beb","ssdeep":"","tlshash":"aac08cc8b0c3ad001602a4101aaf25e4a0644026b0882b128d94e8483e630b08233eac","size":147,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-04-04T06:30:59.771382Z","times_seen":1702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ee25df141b731e0db791e93312275f46","sha1":"c7de81b170dd04f2ec1244ea637bd67689a2e383","sha256":"ae4221e15a03cc0a37a1367e77b5065b2e6982a21f9bcd3c4daa1338db1695fd","sha512":"e42f5cec4374f848e64dbbc39d7fd67f02f214e3b9b3a8015f48d537257f6282c1b65422bd779b3d779f03192280698a84a5a93c9c4cc3fc5d7c3de3e2cf9a04","ssdeep":"","tlshash":"bec08cc4a0e23d002606641020af34e49024402670481b028cd4d8492e230b0823be98","size":140,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-04-04T13:52:32.327082Z","times_seen":3531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1d11dcd1277c30a425e4b3defa30db3a","sha1":"0603c10603a48ee5e1cea45463a9fefaac71afb0","sha256":"813b1aa411c984a0ea14286b26e1f775a6d25a007acaa4ca5a8452fa3e2fd07e","sha512":"27e36286efe77212e224e520ad9f48a6754df05e8ae1f6f5203ff24cc0c69ad1a62654f2213f06ea3732d9516f5dc1be2c781169d25b58fa5e777a3c051eb28c","ssdeep":"","tlshash":"74d097e472cb2f0c6e11a8047baf20e1b02900e2210a9303ccc3e8282a964be8173cc9","size":242,"data":"","first_seen":"2024-02-13T05:07:26Z","last_seen":"2026-04-01T06:19:37.446934Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/js/lianmeng.js?1767872157860","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5327f60aa6545c82314fe67e9893eda","sha1":"0f0eedeb7e2ccc66fc03a558cf2adfc30b97ad6a","sha256":"8384e4df0afd179354e87032f06c64e004c2e391fee460957450edd936e28033","sha512":"ce2be00cf61fca12136e481b25625c29a00c4ae88a94dd7508d0c13314816ebfcebe7d27bab18aed6c7cfdad135dffda39f8c8b216a7e23259f0ea3fc124702b","ssdeep":"192:jJz8GzCgQ7lUjtvYHemXStChAPvI0r4Bz5AhqekolopkJ7oiQ0Vxw8eytVC4+3iw:C0WUlYHemCa2hziTWT+Sw","tlshash":"e2221b182de760380d53b0685b5b30c49cbd77b751ded5ac7a1ea6811f80c8d61f76b8","size":10654,"data":"","first_seen":"2026-01-06T09:01:29.239012Z","last_seen":"2026-01-09T20:05:59.711479Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/verify/0aa9b8ff?t=1767870632673\u0026host=met072.sbs\u0026redirect=%2F","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8aaeaa39cfa0b2ee8be9de61473f5df5","sha1":"9598dc9fdbd0092174382475a2c9b5b8511b2714","sha256":"9e9678cb502826870ccf27004f08e6e38a44795c61bba176486a3e1da3fd0f99","sha512":"1666c1b647250ad8de5b157aa50f6d306bc8c0696b8362d09755d7534c52cb8e4928e221cb8984c940563b15985f44921b804b87cc8a39ed5ba55d3a2089ef5c","ssdeep":"","tlshash":"9441420e687b5848635660e01b53db8825b2a12332c1da827f2dc31d4f8990fd3237da","size":2037,"data":"","first_seen":"2025-10-18T12:13:07.212257Z","last_seen":"2026-04-04T14:17:41.870379Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1778883598145fc776bb6bbea3424f7f","sha1":"59d256aab387dfc0a366b34cce805f7b0c807da5","sha256":"4bbf2a0e8f5db390ddc1e6a1959c5c0c758163d9b8d2829d8be39beb0e16e2f4","sha512":"c65482f62f978017650bbeb01f936bbd1f432d1d668efff741e2ac73291c43b4b500c7f407accc66316a557629b049868f52bc82fde067ae7526c4aa86acfb8d","ssdeep":"","tlshash":"40c08cc4a0c22d002a0ea41114af24e4a034402ab44c1b028c94d85c2e220b08233ea8","size":140,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-04-04T06:30:59.74505Z","times_seen":1403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/static/assets/app.js","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"61140ff7294ad568b9e03b4a8f699edb","sha1":"be33fc2bedd96922a3b5a1de7ea18e6934cdf4ae","sha256":"46720924a329cd61928a24b50fcd9896400866f9a7e5c5e87e476c306a28136f","sha512":"4f5f4d210ee5a4b5a99f6a9cd6ebcf1d1a02fdfa6ceafac834d7e7b4bd95459d12319275539d4e068cb9182a3e435a76cd20e343b96fd4a2b1c5210fcfaa6c14","ssdeep":"12288:bxxmhsxWAPMTrvBdYUSwQgsiMkFBFGziwrtLqCVfErUoEolZb:1dpfUlZb","tlshash":"2484c61f9960447ac1f3e3759a674e0af626437f6240086b3dbc46481f7ec39e296fa4","size":393266,"data":"","first_seen":"2026-01-07T09:29:35.676312Z","last_seen":"2026-02-14T08:25:35.092022Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-04T15:48:44.603713Z","times_seen":102352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bccd8808700471397ed65a62aced74cb","sha1":"68be5039aaead8905c5cd869e82650d42ba3f98d","sha256":"005217592195f9cb5c129e16e383ed92092d2fa3bab2d628211992d6da43bdfa","sha512":"c138eeb446624d3100aa0574ae6989d079e60eb73aff4120133cd9ae8f0537aac616f5685072fead4000c1c2811401760a2ce9ea666208741ed74c970965aea9","ssdeep":"","tlshash":"dfc08cc4a1c36e005a02641124ef28e49024412674481b028c94d8882e220b08233e98","size":138,"data":"","first_seen":"2025-06-17T22:44:57.698793Z","last_seen":"2026-04-04T12:25:15.324017Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8065b02158829b8aca09d2f060479fb1","sha1":"9ebf18710bdbbd5167f601f2a17574cfab6b9687","sha256":"b2128c5c1fa62050824ac6313bdd10a660dda7544b4302cc660bb14b9cabb8e6","sha512":"7a3d1d4b82113f276f6e08f0355bbe50bc1ae545e8a8c8a10d68532a4dc2ee75810a0c7f75925e953ccf44642d3a5144fd1ca577f0bd1ac33e073ea3516f8bd1","ssdeep":"","tlshash":"92c08cc4a0c26e001602b59526bf28e4a02a8826b0481b428cddd9492e320b0823bee8","size":154,"data":"","first_seen":"2024-02-13T05:07:26Z","last_seen":"2026-04-01T06:19:37.48917Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a3114ec42f42405332558804d24f021b","sha1":"7b379c336ac668f0a7a4252f931bcfc8ae7b075e","sha256":"a4353db56b6cb55f2b9745682446169ae3ad2eb78a5e93a50eb2627de4cbeeb4","sha512":"03f360b847aa84b19f86ceab0ddfaff56a3b8998e1a1ab1591ef5a7698c3275288a6ef72de5ef13993ea12923ac7fd8915a01b0b253bd08818ebedb0a6c3a93d","ssdeep":"","tlshash":"c3c08cc4a0c22d005612b41015af24e49024402ab0481b029c96d8582e220b08233ee8","size":139,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-04-04T06:30:59.754575Z","times_seen":1188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bb16fdbf53f933b02ed408143b7c05d8","sha1":"a1ff6005aeadd6b1ffbde122ad63447d556e102b","sha256":"3a2c7e30ad9ab66c8ef77ceb36f58b683dbd9f4f84c892f46fe575ac409f18d0","sha512":"0d7554577f906670fbe21bb837d0f5caf3390a077638bb5ea805f14b36ee6f9333b5576b105a29ac8d4910689f2bc0c46806c5b59cee44555cb54087664bec18","ssdeep":"","tlshash":"51c08cc4a0c22d102602641010af34e49024402670481b02cc94d8482e230b08233e98","size":137,"data":"","first_seen":"2023-08-02T17:36:02Z","last_seen":"2026-04-04T02:12:13.386875Z","times_seen":329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cae68ea6f141e4d10555797b47a00137","sha1":"6d7487ad2c6cd92d7b0a57c7671d65ea34816136","sha256":"621aec1748ccd29106df6b756539d8363900d1bb9e6a155f105e538561488bc7","sha512":"802598a54385e66c4aade9d8089953400177bcf218415227baf3edc88bdc4236c6625635fc4ae2814940a6a46be01540afc18ba5334325b4fc4840b2cac33967","ssdeep":"","tlshash":"e8c08cc4a1c22d001602681010bf28e49024802670481b028d94dc892e620f0823be9c","size":140,"data":"","first_seen":"2023-04-14T08:59:55Z","last_seen":"2026-04-04T13:17:57.618147Z","times_seen":1513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a8d01154b87932bd77a505dfed71beba","sha1":"f7b9e08e999c848cfaab7fcf0ae5eef181a93da4","sha256":"4abd266b0726e144284957e9e493e9479f0b5055a21016e8e049c4165da2c2ef","sha512":"d11f47ad5481a6ea9d3ac5b789cd56880f91aa93bfbc6e73099601c6703464538bb19cb4bff836fb8506aac25aa9c39c5016efc43ff4e7044e689782ba187d5f","ssdeep":"","tlshash":"5ac08cc4e0c62d041a42641014af25e490248026b0481b038d94d8482e220b08233e98","size":142,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-04-04T06:30:59.760065Z","times_seen":1504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a9953c2b680446aef7072d38e3bd077a","sha1":"d5a7a20899ec3e9c12b54517fa6c01d6855ab695","sha256":"2ed823c1ba6afbe73ddce6a308cbc7966805673c36a8031d068d38cbda413480","sha512":"093658982a6c811a02d43455a851745d7f0ad52115ad10ee3a2bbae9cd73075689ec5b7be7a4fb701b109e98af28ac84fa11eed4ba557563965243c798f32a82","ssdeep":"","tlshash":"a4c08cc4e0c22d101606661110ff25e49034402670485b438c94d8882e230b08333f98","size":144,"data":"","first_seen":"2023-04-14T08:59:55Z","last_seen":"2026-04-04T14:09:59.938417Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7318438543494f9fcaf466aec8a14ad9","sha1":"8cd652c030efbfc3ec7004b586614a9458a40c27","sha256":"cf3775156cbdf44f461606eab1c1b89ad9242009cb2e3f08491d8351adb7dda9","sha512":"3231621877bafaab23c9e759282fd6cb5e53f746352b83384bbb5e99d0c6af48a30f64f61ed9aede911743eef165ac26c457755b29ac36e2e655bb3016677031","ssdeep":"","tlshash":"03c08cc6a0c63e106a0ab42819ef28e490358067784c1b128c99d8582f230b09237f98","size":153,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-04-04T06:30:59.745611Z","times_seen":1524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2b594770aaea0e98eade8a74194f08fc","sha1":"15589ea70518bcf971b9ac0663b42e982ea4433e","sha256":"e29c14b249903209385b087045103a48e2c22be7857179a94cb812fe55ffb411","sha512":"23bc4a9fd3bc315c4f2cd040df268e970991fb0d05c2d53131e52e0b8ab800a3fad86c1c0ca735a477ff690f76be86c7716e374dc4197ed47e24d059c983ba40","ssdeep":"","tlshash":"62c08cc4a0c26e201602751426bf24e4a038842bb0481b028c95dc482e220b48233ee8","size":148,"data":"","first_seen":"2024-02-13T05:07:26Z","last_seen":"2026-04-01T06:19:37.4438Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b5cac9283b3abb1e33c21c139da3cdf","sha1":"9dbc0702500b490adaceca5d16d44b5bb79f19fa","sha256":"912d3edf732097fd2d36492fb85cd91ca47062af291672cc928b3eddb2f1e520","sha512":"6c638435d1e1ec34c65174483950ca238a24304901c0115d340f46142a78ed4489e92327760ab713fae006f786ee2554c1ee0d710d9e7643a6f544402a57d110","ssdeep":"","tlshash":"e0c08cc4b0c22d107602a55064af38e49024402774485b02dcd4d8583e230b08233e98","size":143,"data":"","first_seen":"2024-01-27T11:37:36Z","last_seen":"2026-04-01T06:19:37.427325Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e3e5b37a064ed77eb0f79fa2196ed598","sha1":"29a42d8b55da992ff6e6b74e2f9355121d5b4ec5","sha256":"3a37ae0062a6f05505d66a0cdfd5a200863c098460a60202d21b16687fa304e0","sha512":"684aa3d34a77f76f083f04725150ee3472f9f4833a56fac11dfdc94788034772b66c41a35edd5b42b46356e7d09952d40be20e5e4606e7c794c71bf7eb1ad14a","ssdeep":"","tlshash":"aac08cc4a0d22d006602646110af24e49024402670485b028c98e8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:08:44Z","last_seen":"2026-04-04T06:30:59.776336Z","times_seen":869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0750a261029def06e66bf6e8fccadf75","sha1":"1b6b3ea2410cf0249a58456a2819b43a6ec98747","sha256":"be1c43f01d6729252dbf710189cb497c1a50c6295e3ab69d03308835d52236b8","sha512":"27423c8ea1e321c8a8083d8bc443823b13e61c1f46740543e19344263690e2a86f74e3bedc98ac5fbe119b5a34e62d4d4773bf7e13cb0fc305225c91f475ba8a","ssdeep":"","tlshash":"77c08cc4a0c62d011602641050af34f89034402770481b028c94d8482e230f08233ea8","size":139,"data":"","first_seen":"2025-06-27T06:32:17.866381Z","last_seen":"2026-04-04T06:30:59.796062Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"40bcb32249688809d25e46ab8c8218e8","sha1":"cd26d23c8124d449389d15ed353e9f166deb2dd7","sha256":"203ccea59cb255e6836c59350128e8c9737f7510b39df25c92512adbebd39431","sha512":"ad9636d6813c2f8d3129eb25a36217536d143998ecbef296542375d61542e0caa3537d08b70a61ef96df294c3c598a152f475ac012231016da002579713ac1c0","ssdeep":"","tlshash":"0bc08cc4a0c66e102612641410af38e49024402670481b028c94d8482e260b08233ea8","size":137,"data":"","first_seen":"2023-10-26T08:17:46Z","last_seen":"2026-04-04T06:30:59.771925Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/js/translate.js","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8516f204e7e896f116a69f661616e2da","sha1":"d084e960498a4017a0a3144c0043b75755e99602","sha256":"4f316355f206385bb9703fbf8af4b0326fd99a3d34d6138572971d9875567313","sha512":"35b569263a92453f5ee38dd3163a5a1baa1d36166baaae2c252f0f4534bba270f9990809bb5fc86b6ee22355c9a3447a234c676a8206cade388e446f20467ff6","ssdeep":"192:I5h95oRr5oRsIk/iVtli+swfli1QwJ6/2si:I5hDKNKhtlDswfl6J6/2si","tlshash":"65d174583025612a48b773bae7d3504dfd3d411b3052caa87e9d86441fb1e382be6edd","size":6409,"data":"","first_seen":"2026-01-07T09:29:35.694029Z","last_seen":"2026-02-14T08:25:35.027596Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/js/tongji.js?1767872157860","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a15f24b1e969c8bc58c57274df2fc3a9","sha1":"67bc8263f5f8da4180a0bf15b64989578ce72e13","sha256":"5dde320a8e6a63985c8e70109e9d4c409c9e76efc9b6ea104f9e6e6ff2a9ce29","sha512":"09081186e977108782847040f31c07accc8ea29cb53125dabf921152888663d68fa4c854821fe4be6cb580a0c253aec59f95f72558798aed0a0e13b0fb649a5a","ssdeep":"","tlshash":"bed0974f3cc008f9f3ab00a809afc24ab023502828cec10188ccc5da9d20de40aadacc","size":255,"data":"","first_seen":"2025-10-01T10:31:27.761092Z","last_seen":"2026-04-03T17:43:35.49238Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e96f81fb853118fd155a6dfc4317618","sha1":"adf38a9e2a64b88960f929b3dc5e550c31bf68f0","sha256":"5290348755f865d531c77317b6693c6d2c9a3c08a43074e70cd39a162ce78b3e","sha512":"bfe327461009dea02ac714a6d58f28a011835158140a953c23b7bd5174986e3d56312dc31a23679081b9f1a658e821b67d4f590dec3add91ab069fee72321f32","ssdeep":"","tlshash":"f531c60f72d320f8879670f3281b622db832d8250d2ac561555bd4c46d385fe8a1fecb","size":1761,"data":"","first_seen":"2026-01-06T09:47:56.098529Z","last_seen":"2026-01-09T20:05:59.739647Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-04T15:47:52.023014Z","times_seen":233550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"eb1a32b4cb9e8e2439d7a303b4a48cd7","sha1":"8cb36458eaeda850e4446febd2b9e8474d86d340","sha256":"8d6c8fb78baf22433acb49c83b0d447498459552a94892893983c51d4a2f6361","sha512":"e9fa7ac317ddeff7ac30899f6d6f454c3ea275b4d621e068b6503664e227df1329a63cfd6579954e346a189302dbb97fbcc14758b70cf88df4ea4b504cb63c6b","ssdeep":"","tlshash":"cbc08cc5a0d32d002612645110af24e49024402670481b03aca4e8482e220b08233e98","size":139,"data":"","first_seen":"2023-10-26T08:17:46Z","last_seen":"2026-04-01T06:19:37.495968Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e72149d5788d2e19b81eb5b4326ca99b","sha1":"ebd0948e33ee83e0512279c2df196c3ca6d73666","sha256":"c020455a7c5657122ea2127097388a76ec3a072d82af198e8602507908f8ac0b","sha512":"b39d961538e111fc6edb680ed562152624fa7e6896edd356490f6ffe429ce50e336b74357ece513c02d544878b019e5e361604fd793d78987879cc6e4b12e080","ssdeep":"","tlshash":"d7c08cc4a0c27d105622681010af24e49028406674481b028c94d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-14T08:59:55Z","last_seen":"2026-04-04T06:30:59.768362Z","times_seen":893,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57abf723fb16b90cc19d274f6510aec7","sha1":"b36ca6a74916a1e4416438318050db13bed4e991","sha256":"262a62f0ae6c9d1dc04b7ff30531058904fae0543051db881d0f04f50d0fe3de","sha512":"cb2b34c6125f96584d1087b158be11eac80858123c151473f5d858c26d1207fe70c7276e8434cc5fd979a701ceebc33b75b5ea8255c89fce61d916c6aab5d8f2","ssdeep":"","tlshash":"dec08cc4b0d26e205616692421bf29e490348026704c1b038de4ec482ea20b09233e9c","size":149,"data":"","first_seen":"2025-06-27T06:32:17.891934Z","last_seen":"2026-04-04T06:30:59.761858Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ee079873e3ed752aba43bfa4c4fc0a67","sha1":"2574d5e8293512d3954286029d175f4a30340659","sha256":"f78f650339ceab444669f7098663ff767c4fce230b4c753c6c740ff5375f2a3e","sha512":"4fcd4c760dfc60d428bf2f85cde00b13d3749c15c3ffcccd2e57553618e3abf5d19e01218159dcff630f90f3edd1c6840dc1b975e1a8ff2f4b305b5677fe9522","ssdeep":"","tlshash":"40e07dd5f1975d1053055370f64f27d4f122802a52c00056dd6de87826230b9937ff89","size":321,"data":"","first_seen":"2026-01-07T09:29:35.835007Z","last_seen":"2026-02-14T08:25:35.153277Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bdea2de41df0e5ce599ee9d3b5838549","sha1":"6df9d613e1caeb6c26a5c0930a8793a3174f2c87","sha256":"ff29957625665e833a06fee125baf16063bb3fe2a542e46ee8c4225602eecc05","sha512":"49f5b8af436641b64b5dc0cc814385238b2efeebd36a04859ca75be4efc323d5c685509ce2ae6c12b1ddfcb7a4ebd7f2d09033b69baac6bb50d9d340862e86f7","ssdeep":"","tlshash":"8bc08cd5a0d33e001612682550bf25e4a025802772481b46dcd8d8482e230b08237e98","size":144,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-04-04T06:30:59.735495Z","times_seen":1213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"8700b220fdddd5a0c59feed1e252d743","sha1":"b95933a19ac9afe329889e8db1684aa9defc6763","sha256":"89dd47609da1eb171a3724402f5c681b96b7429e591ce4941135321eaef50258","sha512":"58237217ea93de808ac7b9e3423119a66d3488c9c94ed468aa17848b4ad4fa5dfc811e566a760b6cd7835f8690a6b261690cd133b8df671514cae90f74f11ba3","ssdeep":"96:BO+SKBLua9lwsI1U4Id8BuUtH/PX+wl3R2RPFbs0WCI2UwNkDvcw9Sgn/0gLAsF4:BO7KBLua9lwsI1U4IeH/POwl3APgQJ","tlshash":"5e22adb3cb84412a720441b76460fb3cd1c949afcda3ed42f07e594a8b94e9d8736bd8","size":10105,"data":"","first_seen":"2026-01-08T11:36:30.535695Z","last_seen":"2026-01-08T11:36:30.535695Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Excellent%20Xxx%20Movie%20Old%2Fyoung%20Exotic%20(18%2B)","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Excellent%20Xxx%20Movie%20Old%2Fyoung%20Exotic%20(18%2B) HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"18c-vB9JJ5ruAglE/9d7DISP1+xHnXg\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QOa8A3H14ngM7FPn0IdgK7w1GFUWsAZ7ajPB60SNymdWBdz95gL1huAterK41TlQFBLD8mVS00sUtSSYg5lEc9eAx%2FVu21gVccQnq9Cx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ff48cec272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":396,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ee95d28f1afc4446c5465043956dc239","sha1":"bc1f49279aee020944ffd77b0c848fd7ec479d78","sha256":"229303dab3b37bddb58717602d67e2e079b64efa8935930bb9cdeeb406ec9faf","sha512":"521dfd5afe9cfa4d6e6435032b200d554f07c056996edbb67df70c2656fcb1cb7555d11efbb79e021eae01020348c09032f5891935508a045875a942893ca075","ssdeep":"","tlshash":"77e0618901254d731f49e79969977f8ad52cf2956413384582f618134ba553e8143487","first_seen":"2026-01-07T09:29:35.742112Z","last_seen":"2026-02-01T23:40:17.537013Z","times_seen":4,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=x7x020BD4AF6BFC6FF88F","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=x7x020BD4AF6BFC6FF88F HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"13f-0kgZT2Bp/S8tA1I1PktjgCVHwoY\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7x4se552QKy6uwzkB8lR66G8bE2OmRRDxWEn0HzwFcjxvibFNJOmP8ZlXyoFUA7TAzPCEugRTsAkgK%2Bo8nI0GupocUKfgV7X3ukw3L%2FA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ff792ec272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"87f509ed95bd914cc694ca89339b8081","sha1":"d248194f6069fd2f2d0352353e4b63802547c286","sha256":"152a2c0f1b876b9c8a0af2c542fcec79c54f0aa871eea5986c6ddda77ee301bb","sha512":"4902863d4771f2b6e1a5be7a040fa47727bbca801b3406a06062d79201f78ecf1ebd1646b1f8db7d02ebb7bb7a04aec016af4fec4a0f99f91bc2b8ca34074567","ssdeep":"","tlshash":"aee07d871d6d1c731f5d01d53a419f4fb56d41c70021544a13e70d3112d361e0e5f40a","first_seen":"2026-01-07T09:29:35.706989Z","last_seen":"2026-01-12T11:48:53.036419Z","times_seen":5,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/images/favicons/favicon-32x32.png","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:59.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /images/favicons/favicon-32x32.png HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1; country_code=cn; ad_index=0; Hm_tf_f895ld4tcvj=1767872159; Hm_lvt_f895ld4tcvj=1767872159; Hm_lpvt_f895ld4tcvj=1767872159\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 08 Jan 2026 11:35:59 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 23\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\nset-cookie: country_code=cn; Max-Age=86400; Path=/; Expires=Fri, 09 Jan 2026 11:35:59 GMT\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\ncdn-cache-control: no-store\r\npragma: no-cache\r\nexpires: 0\r\nlocation: /\r\nvary: Accept, accept-encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lk17aAVfpjY0oFAT970sq1EUt%2Ft0Acwokg4CrlA%2Bn5ugnBKBXedIzTm1b4sqW8SDv%2B48qGK7dw9gTH32M0JaZCQGKQv3aZPZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab65029f585699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21222,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/static/fonts/Noah-Regular.woff","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:56.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /static/fonts/Noah-Regular.woff HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/static/assets/app.css\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:56 GMT\r\ncontent-type: font/woff\r\ncontent-length: 53036\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 01 Dec 2025 17:40:34 GMT\r\netag: W/\"cf2c-19adb007e50\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cwkH1aIxw52MfYz3GN9ZIM743ihIw%2FLutUw5%2B8p3HLcEUy1N0X63JpPRv5qSI5EjXGJdyKKrNkFjUxHzaM4hKUskD%2BIpJXPI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64f2487b5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53036,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 53036, version 0.0","md5":"68447794b5fd51af907b6acf4a07e01a","sha1":"56e1ee4ad8c163f546152300c9c2a4ba9e80a684","sha256":"483cd79cc6d1aa49fdd0aa9a1da87d0750b1ca5ba8cbc38b55c1cf75a5b80491","sha512":"8bf926fb46589d3605e5d0b00547191ec79ba1d5774e8c886b16b69ee01960aaacdb7ad281313dfd3f51fd57714ca8c6d971f10b9abc37e5aaaf89b0b2361092","ssdeep":"768:3h+GGxUwwtMNRfA+i6YH8mWJZMJNR+EaoOesQxaE992zYpBWaiwU05hjmKy6tI:AUhtMPFi64C6NUE3MCdD2zKYn0/xyJ","tlshash":"b233028571174eb193250bbbafa9f7763399f4bc4ce76cba64600e2a62511e630fcc50","first_seen":"2023-04-10T08:45:57Z","last_seen":"2026-04-01T06:19:37.358225Z","times_seen":179,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":364,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/2vfoql1wyp/ggpsedl396.js","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:55.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /2vfoql1wyp/ggpsedl396.js HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:56 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncontent-encoding: gzip\r\netag: W/\"24117-WYsW3rLbBa4pM7yVMkT79QIY8VA\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z691FA4wl6zO41AdeteQL8G0MNBaHXVgtv5aqANJsBrjzFUyxvpDq1KEM9j2tZQBV%2BNTxwHENj9G3H0A8uVKU62Gp%2FdDm5F%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64eeddbe5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":147735,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"06a911cab5a235bd1d8e3ee1f8171594","sha1":"598b16deb2db05ae2933bc953244fbf50218f150","sha256":"6fc080845769e824b237248bbed826224044abf9f5c1882e03915eec10a9d042","sha512":"a5a6fd7ea2ccae520b5d1320aadd611f2b1f5373c286c74c071e0f565cac63c5cb8d097671825c38665276b7fb29bec353a8a61c034cf7e72f003f4a8e0275ec","ssdeep":"1536:O18MdnC5OPz8QP9r2RcZSgtK8sBggphk12FoX50FtQySd8uj6DzKEVKf7lbe0etc:mFSGSgtqZDqd8uODG0K5y0etsz","tlshash":"64e34adcb2d2b07407e75099d83f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","first_seen":"2026-01-07T09:29:35.683303Z","last_seen":"2026-01-12T11:48:53.086563Z","times_seen":5,"resource_available":true,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/api//json/suggester/43200/1000.json","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /api//json/suggester/43200/1000.json HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1; country_code=cn\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\netag: W/\"3b7e-uXfOwIDTe6ufi13WuvHrvVUFA7c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1D9lT4N%2BqdT8HprnL%2B6UK3Hzw%2BFwOWBN%2BpjA5hGmPB%2BL7tUrkiC1S4CkY5rDLf7y6DK66vQhdluOJlCqCXv9KI2%2Fjjz4p6M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64fa6fad5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a3d9af4d1cdef1155a39378d58f53778","sha1":"b977cec080d37bab9f8b5dd6baf1ebbd550503b7","sha256":"9da14731a0ee054ae74f60360c83ea0b483e6177314f24b45f59882705562e1c","sha512":"75e9cf396b2abd296ab174915874c5df5a4350a5f18a7a0eff68f970f07fdd8dfa92ee5e9612d3690892cfc32fd131e03f9b19a92e90415a74855da870c55a8c","ssdeep":"384:8vCZyY4RWwSOjYginQJfvxcUr8sJPErc3A521JhxkYr6BTiri:86sYBdFgzpcuzPEw3A52txnruTx","tlshash":"0f62c94443762c7e57e6c2d62dd35f49005e03d32386fa6ba9e69aae264c3b071c7d8c","first_seen":"2026-01-08T11:36:30.417282Z","last_seen":"2026-01-08T11:36:30.417282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Community","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Community HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3d4-Aq5657aEUwb0opL53nh3rYByzTM\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NRuSZQppJM0y1Fl6QEty280vhmNK%2Frgh7R06Ij6sVf8AELjW0%2B81BqmhJakL8KNC4BJzRuzZN8Sa8vOtDb2m0zfkD5tiLuCqNt0BNggn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb1ccfc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":980,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"883cdeed5b58c63fef055b6a5ad4ee40","sha1":"02ae7ae7b6845306f4a292f9de7877ad8072cd33","sha256":"913af7266fb9daa56b5e677881c78e2b4df765303b26d3f2713d308800031a93","sha512":"f5ff058dd73ca26cbdbb8f815389d3e2c0e4e632135c9a9035434cb9e76f6bcfc75e8434bde05bbad560810d75686cc36baa8ae828d6abf7a7c41c7715542936","ssdeep":"","tlshash":"49112e99107d862799870756324b1c8935fc1f42cb3b98083e527f5ed7bacd90a45c0d","first_seen":"2025-10-28T14:55:13.473673Z","last_seen":"2026-03-08T18:05:59.344809Z","times_seen":31,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Top%20rated%20porn%20videos","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Top%20rated%20porn%20videos HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"139-jU52Wvu08lc57F4WCywnoxXK4wQ\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oF%2FDYFkqAW%2Fe2REfmAhSmddUK9SDA5tv7SEI6MQQ526zHeLIK9uL8akraRHPd1XzEPs0QUeFjQCFp%2FSiV5E5MKIqvVeHx8VCvXzI2AUs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb0c6cc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":313,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"288a8a61ac33848eddbff20a1635d990","sha1":"8d4e765afbb4f25739ec5e160b2c27a315cae304","sha256":"5cd727d40d571d3d9fa7a29be18f04c8305d213cbaa833809ad358c36e60afc0","sha512":"9cbbed060b41eef684d8aa03abba07e252daa2fdc2070b92e6e8599673f715dad41062a996e5ad93da5b28c77237da61a4a2c1f4bf73dbc97626716e3ab49962","ssdeep":"","tlshash":"3be07dc614041fb21f4946d9bba1ae4ba43d825500714c6d03fd0d6147954370757424","first_seen":"2026-01-07T09:29:35.751218Z","last_seen":"2026-02-14T08:25:35.007213Z","times_seen":8,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Japanese","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Japanese HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"2aa-MZhgidrE3h52KsNExADg1i6449E\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2qqpaefHpwVdRsHz7qKsXJ4oBrpla7L3xE3LSV%2B%2Bw66AX0GWSy3Bk594AiE8vVy4IKEiVawjboZm5%2FWIqZK1FogGnfZqtSwHUnFYC%2Fw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d5cc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":682,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7f0c466022ba897aab51f02286dfa03d","sha1":"31986089dac4de1e762ac344c400e0d62eb8e3d1","sha256":"cd49dd7238d52856d32976a258f23780948b9409712cc1616506b1e688115a6e","sha512":"a9dca55dca6032dc6dfbf6952af381026608a00774294bbc9bfdcf27464d6ef91ed45e084514a4358f5fe78cd28c8f727e8eac1593480257edc744fbe4adb5e9","ssdeep":"","tlshash":"9f019e462139cdf56b87672667830d7576fc04d2ca33980b1b607b5d978edfd3245108","first_seen":"2025-10-28T14:55:13.5225Z","last_seen":"2026-03-08T18:05:59.45806Z","times_seen":25,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Big%20Tits","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Big%20Tits HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"a3-6rTYNarltsrv2Ose5w4zpZGn9L8\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hiu3lT4ZKAQdPak6SXrutZRnNq6%2BtG2uSwDBn%2BFnA3FhNPAyEm%2B6QHkvKYn4pBhZtDACH1VGFclntvsz1YhhMZ8D9UAF2jOr11mzdMUd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d6fc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2435159f4582814835196fd278e0f839","sha1":"eab4d835aae5b6caefd8eb1ee70e33a591a7f4bf","sha256":"dc99f940fcf72059d0d617a656e4f69cee2ef0fcade17771389db1a467f2f05a","sha512":"1e00171d1dbc7c2057442937c737524bc2f65b89a8235c4909de0320bb713d9e4be58ddcfe03cc56e4d9db5d8c10da6b1593fb9a8008cd3071de5aa4413e7288","ssdeep":"","tlshash":"24c08ccc04121c712b68836928822e0bd5ec80a2c02bb88923f93da28bcd80e809880e","first_seen":"2025-10-28T14:55:13.558418Z","last_seen":"2026-03-08T18:05:59.153265Z","times_seen":31,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Yuuri%20Himeno","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Yuuri%20Himeno HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"cd-0Xtbb2LBjKvbP7fDyRCP4aHfJpA\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DPmm%2FBAPcQ5IyIHarPQ8ohZCeEnq0irmpjEcoRpu2WBVilws95saIZZCS2KGZyMy6pURGJWAWNzZAs93juHrHssxIIAh7ylPl2sSxe8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d85c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":205,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c6138ec79a755a2d75201b1db4161017","sha1":"d17b5b6f62c18cabdb3fb7c3c9108fe1a1df2690","sha256":"90eaac5239455a0e887fe9aeacb7b323f66e349b5cc880a2146f26ea9a5c9139","sha512":"45e63bfc7226c300097667d42411e6ff4e04dce263f3d9f798d04cb286a896e38f2dc3b307936011e422a3ef09ff33eff89604f39b89c3e56840e4d465cce452","ssdeep":"","tlshash":"b2d022c8018aacb02f59826f1dc11e8be02c80e1422aac0c03ec2e2a42c881c808c88f","first_seen":"2026-01-07T09:29:35.672208Z","last_seen":"2026-02-01T23:40:17.504845Z","times_seen":7,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Fabulous%20Japanese%20slut%20in%20Crazy%20Dildos%2FToys%2C%20Uncensored%20JAV%20video","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Fabulous%20Japanese%20slut%20in%20Crazy%20Dildos%2FToys%2C%20Uncensored%20JAV%20video HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1df-SDTYGLJMxFRNyNZoup/9GS+OUs4\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vb2FEtK2lSjxc02amHs4y2lcHTWdRoaoomtOHsFL0tGR9NDeqkXrhFBNTM7DobgtPKWFDuLIVbgpWtx8GDAGjr6t4CxbqTpLlcQc500D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ff58e8c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":479,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4b958e48ef92d27720aa00a1a060b21c","sha1":"4834d818b24cc4544dc8d668ba9ffd192f8e52ce","sha256":"70d694cf88ae5385c73b08a118fd182bf94d7d4574271555af59659774675f37","sha512":"f952ed13e7fc4402dc3104cb78c5680f34bb9d89133abe3908bcebbd8645c01ea64909b2c37471a3493dfd7fa53594320cca8b04de6559aa87b4b55554a0ccc0","ssdeep":"","tlshash":"f2f0d44274548cf32ec867d5df471e46e83c80c2003d094a47e25e768395d25154dcce","first_seen":"2026-01-07T09:29:35.689797Z","last_seen":"2026-01-18T21:40:20.535172Z","times_seen":6,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Watch%20Ru0072%20Bbw%20Mature","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Watch%20Ru0072%20Bbw%20Mature HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"14b-4373Beo8CB41RBg66eQY1tLd7OY\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eG7c8xgQZ2zlE%2FYdsW%2BXZCqa0mmwAUIMcGp%2B8cewI01jQpERyhqOPFolqclLMnTYhYIgSwQdnttb759xD6Yy698HfxD%2BWqQrNEmMY0ya\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffa9bdc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"18c964c5bf22efa7482251741c2a96f2","sha1":"e37ef705ea3c081e3544183ae9e418d6d2ddece6","sha256":"06a223b8c80f04206e050eacb4d225bb5b6628b103a94d6be629f0b4001f24cd","sha512":"dbcf27c2a4167e6b41442f528e854bacacc469bddf46b6a57054c96284daa83094c152d628abff102729f61b75fe4832040203dcb436a18a2f4f78e40ec3207e","ssdeep":"","tlshash":"72e07dc718414df37f5c4ba6eaa22e8fd4ec90aa4475644903fa0d33cf5b76b0643405","first_seen":"2026-01-07T09:29:35.74445Z","last_seen":"2026-01-12T11:48:53.031212Z","times_seen":5,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/upd/20251210.093405.7267/assets/previewl1b.20210114.1.js","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:55.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /upd/20251210.093405.7267/assets/previewl1b.20210114.1.js HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:56 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncontent-encoding: gzip\r\netag: W/\"1c63-8tjppBauezE7hGTsFCiXjB/fl/4\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GdpEL5yFU2tn212JEXqXywW%2BB7cbPAV4wWwoP1jQWkxNF4or0uGlGTve8NXDC7ok4IZkBUhwoPwZddur4CECftzwtLqxYdhI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64eeddbc5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7267,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1628)","md5":"c590852dd189e3b756797480c613f8ed","sha1":"f2d8e9a416ae7b313b8464ec1428978c1fdf97fe","sha256":"39f7e9709a729259ccc447332203fc733e1bd566794d9dee25726e7390b3d12f","sha512":"0bf3438b41aa4b686e6aec0d0f9ab87f8c1b57b27ea305634d6fe7915ad241605f07c006997ebf67c661e7fd1ff899678892408b42e8f7bd6dad0648b9846c2d","ssdeep":"192:WzpOIztlomle7aVcUTCjbwbyqCwyvJHnvZOQCvvCBj:WRYYcUWjbwbyqCwyvZnvZOQCvvCBj","tlshash":"bce1f7ad36000a3b9ceb5bba64bee40835f21439fb474820d429dd754ea8cd531b7a8d","first_seen":"2024-10-11T08:53:58.412501Z","last_seen":"2026-04-01T06:19:37.407429Z","times_seen":70,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/static/assets/vendor.8faa8687.js","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:56.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /static/assets/vendor.8faa8687.js HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/static/assets/app.js\r\nCookie: _slide_passed=1; country_code=cn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 01 Dec 2025 17:40:34 GMT\r\netag: W/\"6f8d3-19adb007e50\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3IcjVJQ3YwhsQS%2B2bnJAzMGHD8bW4VoSENjp4drm8qfMmH0qzGVEdw9n4a7d%2F332%2Bw7cneVcyND0jXMQupMRR271NaQnJGI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64f399885699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":456915,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"c4d25c3fe174d84abda219d70948e1e5","sha1":"04f80a5fbc7c64708e57e33ddb0b7801ee9ff05b","sha256":"487282d6bdf942edab0aea534987d6b3efd3f3efd4747b060a129bfcbe8a162b","sha512":"f63c1172f64a956587fe16c1e416810036ad8d1e0d8058579d616553c04ebfd2a1f857d153532f130c4c575662cf4a798b7e729fdff744630d4dccac030592a6","ssdeep":"12288:ElHYKdi3+SbrgbwHST8/ku2oKmOuN7q74BVgWF8FDqtDFqipgT5xLe01h5rzXs/G:WJdiIucBWql+1k","tlshash":"d8a4645a79902039c233f3799a17d805f936172f2285865b7a7c919d2f32828d3f5fe8","first_seen":"2026-01-07T09:29:35.732795Z","last_seen":"2026-02-14T08:25:35.060192Z","times_seen":8,"resource_available":true,"data":null}},"time_used":890,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":363,"receive":527,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Newest","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Newest HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"15a-KusB2a2irDCglIDkCAhYQhzv2q4\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WumxgUWnRx7suUaRULPNPmNDGeH1gobtJ1RhkIorVxeDOb1RYxbQjAJAH6Uowm4wo8PY0B6jPnXLT6irme5TxQWEr0d7HUqIlFxLwC%2FQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb1ce3c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":346,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"597d931ccea466e4f3238ad8acd6bea1","sha1":"2aeb01d9ada2ac30a09480e4080858421cefdaae","sha256":"0355cf88851028cebcf98d26b0c0297e1ae6c8864be240c64792bf9811784d05","sha512":"89378f6613a5d074439d988d8831676ffd79415018c2301b8917f82c0a03eb099483d3888cfe7fbe7548485a619bd1648bdf8415c116195f9947c7cd3134de2a","ssdeep":"","tlshash":"7fe026dd10299db2cb8d133a56821c4b50ac51c8c53ea88443e53e0ecb99e6c48c591e","first_seen":"2025-10-28T14:55:13.535586Z","last_seen":"2026-02-14T08:25:34.990848Z","times_seen":30,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":35,"dns":1,"connect":1,"send":0,"wait":201,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Asian","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Asian HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1ff-n6hfA0tQpvuTMYEv82I64qkSJG0\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tmxqx195epnsW68zJCs3HlwwR4ebdppVhw8TEH%2B13%2FUNu8T3gc%2BhwTvpYqexIoLfrPNntmj%2F92dqGiWR3SWSdJzz1QTLBGdeoHZGCAEs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d5ac272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":511,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f22aff15dd8df4ace91b385700ef9da3","sha1":"9fa85f034b50a6fb9331812ff3623ae2a912246d","sha256":"981bc68da062fa50ae40a7828ed531c2d789b1e95d287be506db3071d991e8fa","sha512":"58f7ea0a98769ffc6818940b6fd027aaa5da1d05f4ae1f2a686066948356a8715d1e9265282046b54a6d9525d89dc7d0489a5d4e6c5f81c83f6275ef13a69418","ssdeep":"","tlshash":"8cf0e98d1025cd7a4e558726728e184ee1ecc891c136d88a27be3e1f9bd7cb84785009","first_seen":"2025-10-28T14:55:13.451918Z","last_seen":"2026-03-08T18:05:59.345726Z","times_seen":26,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Cute%20And%20Shy%2018yo%20Japanese%20Girl%20-%20Fetish%20Hardcore%20With%20Cumshot%20-%2018%20Years%20Old","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Cute%20And%20Shy%2018yo%20Japanese%20Girl%20-%20Fetish%20Hardcore%20With%20Cumshot%20-%2018%20Years%20Old HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1d3-sQaw5L890w+Y2cQCi94hH9FIKLQ\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eiVb5vW2vXD6NDpGhuTnZXLyhPaIcySSgxmVpSIvkkjVV0wgD3EVSdEyrhFKVmD4CnizIMyE%2BHXR6UnzVfeMYU0GKE2%2BgHZK4qXDpMqF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ff7949c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":467,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8a0d3f1dcc78df504e27a4bc33dd4089","sha1":"b106b0e4bf3dd30f98d9c4028bde211fd14828b4","sha256":"af86e3835bb97cc84c9ad45e7a081ea4780e2f8f39c2b7c666b90064e7701c48","sha512":"157e906ce6075c977cbf794a17a6ab89799c0c6b0ad1285e3fd1aa7c508ea2d94fef4212a71fd25d7e556612b3030ab9dec48b43bdbe68d91a70973b13a401cf","ssdeep":"","tlshash":"c2f097d728140cb62e484bca6f562e4764a9416a8052088603ba2a23230572f8683c06","first_seen":"2026-01-07T09:29:35.698766Z","last_seen":"2026-02-01T23:40:17.486252Z","times_seen":7,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sgvafs.top/resource/aHR0cHM6Ly9mb250cy5nb29nbGVhcGlzLmNvbS9jc3MyP2ZhbWlseT1Sb2JvdG86d2dodEAzMDA7NDAwOzUwMDs5MDAmZGlzcGxheT1zd2Fw.css","fqdn":"cdn.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"172.67.74.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:56.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 10:32:16 GMT","end":"Sat, 04 Apr 2026 11:32:11 GMT"},"fingerprint":{"sha1":"23:E4:E7:DA:80:74:DA:F8:86:29:06:89:D9:E1:26:93:5F:5A:2E:A0","sha256":"9C:28:F0:88:CD:66:FC:19:0C:CC:67:37:05:9C:96:EB:59:53:41:E4:A1:F1:93:7F:49:9E:79:55:5D:E9:5F:51"}}},"request":{"raw":"GET /resource/aHR0cHM6Ly9mb250cy5nb29nbGVhcGlzLmNvbS9jc3MyP2ZhbWlseT1Sb2JvdG86d2dodEAzMDA7NDAwOzUwMDs5MDAmZGlzcGxheT1zd2Fw.css HTTP/1.1\r\nHost: cdn.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=60\r\netag: W/\"4bc-Je4aJk/SGOgaPweGhaUy2xHf0UE\"\r\nexpires: Wed, 24 Dec 2025 15:21:38 GMT\r\nx-cache: EXPIRED\r\ncontent-encoding: gzip\r\nage: 1282517\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQdZurCZ4K2upydtBO7YLHMLs7wEeU9%2Fko81GCxBbnYQpH%2F3nTpMs86qhHx%2FkcTldZavMhe9LmxjXWbhbcGSnv2eaP5tyn50rA9G\"}]}\r\ncf-ray: 9bab64f29e59b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1212,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e7df1f7e55375640251b8db4a5c941b1","sha1":"25ee1a264fd218e81a3f078685a532db11dfd141","sha256":"5cdf4c7673ce19bfde1272961ce81154388ac0e31a5792afbca8ca0656a6005e","sha512":"56e8f55c6b2bd40ab4ddb4808bf29283ba439936293b522b62ee34ca1819ab4334f36dfd82e264430f19cbabbecaf4f0be4016795f226aa68a22e802d432a5a2","ssdeep":"","tlshash":"04214b20a815aa60e6430d69778b2f1d7c3d19217976d8ee6b5508788ce6e38c381fcf","first_seen":"2026-01-07T09:29:35.73064Z","last_seen":"2026-02-14T08:25:35.014644Z","times_seen":8,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":50,"dns":29,"connect":1,"send":0,"wait":13,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"cdn.sgvafs.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Nude%20school%20day%20punishment%20for%20cute%20Hikaru%20Shiina%20(18%2B)","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Nude%20school%20day%20punishment%20for%20cute%20Hikaru%20Shiina%20(18%2B) HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"197-ZYEhndKrZN2res7Qq22lrpwFXU0\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRS7h2exmmDRDx1mipjd5eyR6Y9BlB%2BJRKsvasxD20lbtHx53xP9gyNeSV1xYQe%2FVEwN94pZhK5X1L0iWlNzbm8Kwr26eThwHS2gVMNX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffb9e8c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"22c71d6a3bd81b2755814800e6ad6259","sha1":"6581219dd2ab64ddab7aced0ab6da5ae9c055d4d","sha256":"be6d0ca8e7c81cc4bd02f257cdda4984025edbe0e8261de17a38f546d9fb97be","sha512":"81e90e51280ec1d9aba9906a377f175524ed979b12554820734377596b0aca3c9b9370838b8297abc68d4f7109bfff50339688465396831d9ce05f30c56e211a","ssdeep":"","tlshash":"6ee02b4658201cb21e48639777463e47c47c538f10666b09d6f61d72539a52e929640a","first_seen":"2026-01-07T09:29:35.725046Z","last_seen":"2026-01-12T01:31:41.563221Z","times_seen":4,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=japanese%20mature%20housewife%20cheats%20with%20wild%20man%20in%20the%20warehouse","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=japanese%20mature%20housewife%20cheats%20with%20wild%20man%20in%20the%20warehouse HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"19f-c3JUBAgFtBq/obAaIOzGODMZCX8\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Pd9WWpJTIynCPuXiEwpnwa%2FwDPaLF98SbT6%2BfnqJ%2BY3g1h3fnyRyOeVA9e486%2B5CHgC%2Bb0CgLrshzxie5bB2xxCuF8to0HlkHkaKXkX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffca05c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":415,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"396e5c7dd6b90f449fa0e811aa3d64e3","sha1":"737254040805b41abfa1b01a20ecc6383319097f","sha256":"b46aa2df161cf71302a2bd07ff648ea841ce913ee6cd7b3864063de250c06069","sha512":"491b817b174a5293a516910e6cc00f2c957b99826aa15ce83a09fbd8ef7baece2e7258a7b05142a8bd49cfb0771b98bb7e710cebb48de748fe62fa4201d218d4","ssdeep":"","tlshash":"afe0f18be8121cf10a4c5294270bae8bf17c818212356c4d37f52a3393ce93a0f8b64e","first_seen":"2026-01-07T09:29:35.731713Z","last_seen":"2026-01-12T11:48:53.088322Z","times_seen":4,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9pY28uZGFnZS50b3Avc3RvcmFnZS91cGxvYWQvMjAyNTEwMTIvNjhlYjk5MDdhMjQyNi53ZWJw.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.0.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://met072.sbs/verify/0aa9b8ff?t=1767870632673\u0026host=met072.sbs\u0026redirect=%2F","date":"2026-01-08T11:35:55.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:11:08 GMT","end":"Sat, 04 Apr 2026 12:11:03 GMT"},"fingerprint":{"sha1":"C1:95:F4:80:A2:D4:51:B4:6E:D8:A2:6D:B5:A8:31:3A:CB:60:95:9C","sha256":"96:D2:75:B8:56:DC:9D:9C:1C:34:1D:A6:96:18:42:22:1F:59:87:E4:75:D7:C6:A2:65:F5:B5:4A:E8:FB:24:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9pY28uZGFnZS50b3Avc3RvcmFnZS91cGxvYWQvMjAyNTEwMTIvNjhlYjk5MDdhMjQyNi53ZWJw.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5108\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=86400\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Sun, 28 Dec 2025 15:05:11 GMT\r\nage: 937843\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgWLT%2BEtd8n46spAHIUD7vc%2FRYmYP%2BdRcD6y1aG0YmLXywypOxAez34K4VMtRd4UJhUb17s0u5LZnYjrzFggriu2ro2gLuJhj2YQkms%3D\"}]}\r\ncf-ray: 9bab64eb6dd20afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5108,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cc9c0fdb683837db0ef0c90118869573","sha1":"2290ce083abd6a2ad93ca7a520c47392ae3c03c8","sha256":"1d0f2e64bf9f371e57bccee4e3d86c7ef5fa1b214f4af9ceab3c74791dc7792e","sha512":"0d9f0e989dbf1f110dfa18e2eef65d2dabfc26488bd8d1612eae9fdbd5d2c040547df6a89418e9da8f3cf6c3a5d34631b86ea3eb0732b2e0b87f0c6a52fbe746","ssdeep":"96:Q7ooaovtFHlR3yXSobCIeoqklaySDsLku3HwaHFXBzTKYirKXyU2s27S:cooawtJPyXSuCI9qklabsDdvCUC","tlshash":"52b16d2a92ae93d3d84329f8acb6f590154b751d3a25e13f60099993db308437327bd5","first_seen":"2026-01-07T09:29:35.726953Z","last_seen":"2026-01-12T11:48:53.070694Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"cache.sgvafs.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Videos","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Videos HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"16c-s77XU3Ab2HWbCEXWBTBKlIeWj8w\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GhPAco519g7zYCMjDc%2FHREzqUgMmOJ%2FFwjpQvaQ6VVSU5T%2BQ2jq5gaHx6D0%2FQCiC9GmUtDy2arCoZMsk0V0ekmJqcyLsv7bLXkt0Efoz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fafc64c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0bf52a1b8b72ad3a9cfc8d365159da06","sha1":"b3bed753701bd8759b0845d605304a9487968fcc","sha256":"c192f73dbb527b0cbdb6c9b3f168a901cf23ccf2f21f04ea83c0673bcefc84a1","sha512":"24eb6636db74e9bd0ffce386812acad761c235db50bd957388d0a73441f1154a0906422fdba92fa53908106048df627c943501908e904c322b1afc6d54edffc9","ssdeep":"","tlshash":"bfe0c085202a05321b0b83772cc22c0aa4ec02e1c2325c1837773f2e8fdecae05e945d","first_seen":"2025-12-07T08:20:59.902016Z","last_seen":"2026-03-08T18:05:59.475323Z","times_seen":18,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":187,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Pornstars","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Pornstars HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"b0-VE86theZcLkI635dAncQoAUrwVY\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CmW%2FSc8SNLWrvJWcWKA%2FDKocSHvhpkMQe3cXHKQnKVOEb8n%2FAi9wYyg0ACHefCTm5vS7BPaWDJYc0NrIJqIoSk0npjzUMyQ75izGBYXO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb0c88c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cad0d5b9cb85e9d122a9e09d7cf1089d","sha1":"544f3ab6179970b908eb7e5d027710a0052bc156","sha256":"f0c72158f8a27ec07f3030eef5c121a30d6c18789288ea6edc894b4cbf816aa5","sha512":"852fdad305e0ff3c30664688bb938a9f2e676badb48eab54d08c537607fdc9fac768be4a3db089f1a5bcc6b6795564b523d0be7c2a9a52c922200ef1c939e0f6","ssdeep":"","tlshash":"56c080c8100919725f54c35519413f07d45c419380362c4b17fd3d458bddc0f4444807","first_seen":"2025-10-28T14:55:13.596583Z","last_seen":"2026-03-08T18:05:59.393127Z","times_seen":26,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Saori%20Tsuruta","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Saori%20Tsuruta HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"167-/Zs4oKdI/02oar+h5rCMSzJ5QRk\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XsaeMX13XDhub%2FWVlnXSSMeHXLoSVQRKABL2df9KUbX4TE11z2Mh8Er%2BHh5ISy01w%2BTiJaY4XfxiaRRQuf7n4EvTTTW8OTTlP%2B9PRJ0h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ff6901c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":359,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f3352d622f400ef3d2b49e31e9dc3034","sha1":"fd9b38a0a748ff4da86abfa1e6b08c4b32794119","sha256":"3ca138f3b6293e467ed1f06e82c9c389da2065ae5931f2d51552b6a4c883a3ac","sha512":"d14a38315972af6a36003b6ee6a6e240f82366ae9a00d5e0693e1e78ac15cf5c3cb64b7ceb9dee3017fd90d7e27694d004167b106ab24d102a161439f930c70e","ssdeep":"","tlshash":"5ce0c0822c118cf24f6e5ad97b916ee7f03ce24930344c4d52fc0c3201e94a70b53829","first_seen":"2026-01-07T09:29:35.767637Z","last_seen":"2026-01-18T21:40:20.527331Z","times_seen":6,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Nasty%20Amateur%20Bbw%20Asian%20Porn%20Video","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Nasty%20Amateur%20Bbw%20Asian%20Porn%20Video HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"17c-QT8XFs9xFZGhGOxRp5C440IsaBQ\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWyMQeazIXqZOW9wngVXjdxQMcF0JTsSe2TdOYXtgkhAPSa0H5mpbz41DFgdgNGxfZV%2F7g27c4Vl3OAq1OurFo3SIV2Vadg5KJx9Okix\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ff9993c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":380,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d40f76200d26eda8fdbe4cb9c31bfb90","sha1":"413f1716cf711591a118ec51a790b8e3422c6814","sha256":"5dbfa5dffd775d8c8d597823f2e6a61930a537ec926621b283a54e834a49ea9d","sha512":"0aac64aa38162805da2f801301ba85a28ab39e34900da9b141f683d959bd5a6099dbb8c243a729b189e3aec78acafcdf8ec42cc01b5ea67a3c812a29e488d7ad","ssdeep":"","tlshash":"dbe061c624045db14f8846d6fb622d57f83c824610a50c4d52fc0d9183d15a7475f495","first_seen":"2026-01-07T09:29:35.685032Z","last_seen":"2026-01-12T01:31:41.564797Z","times_seen":4,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Best%20adult%20clip%20MILF%20crazy%20pretty%20one","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Best%20adult%20clip%20MILF%20crazy%20pretty%20one HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"16d-lfdx0X0xLSwibQ/gfzmH4BKs9qs\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8PFCLwIxJWDy5sHFgWSXvET77suoQpLwAyzuVAbvSmnx3td5jmbjDWh1YulAQWYKkso6FocDs4WHgqX%2BvtNh%2F%2Bbe%2F90OhB1VDlMRfsc%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffa9bbc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":365,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"779465c6ba14b416e437d6c1a61b0c69","sha1":"95f771d17d312d2c226d0fe07f3987e012acf6ab","sha256":"e605cd38748528132ece785747677d3d0c5dd3da8df5e949e9bbcc4f59330c87","sha512":"1b5756b776f10fa4e7d12afaff3dbd38100075707b90076462c88b30adb8cc00b41cc3d953f0d2046098e65394f58c3e24f0594ef63fc6edba940b8a2113c521","ssdeep":"","tlshash":"80e0688b1448be726fd982d926a25e9aa02c830a0026288cc2ea0d2246c157a064bc0a","first_seen":"2026-01-07T09:29:35.708902Z","last_seen":"2026-01-12T11:48:53.073883Z","times_seen":5,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=asian%20office%20girl%20suck%20and%20fuck%20her%20boss","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=asian%20office%20girl%20suck%20and%20fuck%20her%20boss HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"176-JDrMCJkfRWq5KfGdnHKB3DiUGSE\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IU7%2FwaxIEOt1ScasWbmFAdOrkmgIK55Cxq98jLf6tYaGeO3xIRZfRj9%2F4MB4iZXm91VAi%2FnUK8L7DY6R0pow9GMwkKudIaDhrWO3ZjBO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffca23c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"37c69ee5c154ef142b16d433b07a4a5d","sha1":"243acc08991f456ab929f19d9c7281dc38941921","sha256":"b807fcbd507b1825bfd2af9e0a320b03f20d733cc9cd2d93b54566147c6e0437","sha512":"5d00cabaefcb15ff5a622f19fc67dc02b15c4b1c51ea90dbb430ab271d84e978896c32c475ff3920535020f60eeb2b587820c1460d3033b7407c958918d76353","ssdeep":"","tlshash":"7ae068c78c245c764ec9067aee751f87a42a8146001168ce17ba09b18b6a33acb97415","first_seen":"2026-01-07T09:29:35.715036Z","last_seen":"2026-01-08T11:36:30.440513Z","times_seen":3,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node92.aizhantj.com:21233/tjpv/?cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=215264496\u0026si=f895ld4tcvj\u0026su=https%3A%2F%2Fmet072.sbs%2Fverify%2F0aa9b8ff%3Ft%3D1767870632673%26host%3Dmet072.sbs%26redirect%3D%252F\u0026v=25.01.26\u0026lv=1\u0026api=0\u0026sn=65534\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fmet072.sbs%2F%3Ft%3D20260108\u0026lvt=1767872159\u0026tf=1767872159\u0026ej=1","fqdn":"node92.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.159.106.248","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aizhantj.com","organization":""},"issuer":{"commonName":"Leocert TLS Issuing RSA CA 1","organization":"Leocert LLC"},"validity":{"start":"Tue, 29 Jul 2025 07:48:12 GMT","end":"Sat, 29 Aug 2026 07:48:12 GMT"},"fingerprint":{"sha1":"08:E8:20:3E:64:D6:76:65:C3:01:5A:25:5B:CE:23:E1:04:FF:9D:3A","sha256":"ED:59:41:83:D6:B7:DC:EE:38:8B:4C:EC:A7:BB:DB:86:03:54:41:AF:C0:7D:3F:63:B3:8E:65:A6:75:6E:6C:1B"}}},"request":{"raw":"GET /tjpv/?cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=215264496\u0026si=f895ld4tcvj\u0026su=https%3A%2F%2Fmet072.sbs%2Fverify%2F0aa9b8ff%3Ft%3D1767870632673%26host%3Dmet072.sbs%26redirect%3D%252F\u0026v=25.01.26\u0026lv=1\u0026api=0\u0026sn=65534\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fmet072.sbs%2F%3Ft%3D20260108\u0026lvt=1767872159\u0026tf=1767872159\u0026ej=1 HTTP/1.1\r\nHost: node92.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS\r\nset-cookie: _aztj_sess=1tfka2f92mbcio8lu819vjeuvq; expires=Thu, 22 Jan 2026 11:35:59 GMT; Max-Age=1209600; path=/; secure; SameSite=None\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nx-mtj-pc: 29\r\nx-mtj-ml: 1\r\nserver: nginx, Aztj(node90-1)\r\ncontent-encoding: gzip\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\neo-log-uuid: 3503060977830783701\r\neo-cache-status: MISS\r\ncache-control: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T15:48:44.449051Z","times_seen":554453,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":43,"dns":0,"connect":19,"send":0,"wait":266,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=All%20pornstars","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=All%20pornstars HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"d5-ooY7NIUMqIS75oKgm299ePfr8L0\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q70FeOwrOCMhuEVTbRmjQCiBF2kgFjg1SbGJtuFKJQBzIWUFjwhiQS01dui2cUlyBLZX1etn6JeLk3jFx%2FUlIjxjIyaa9uP9Wz%2FvVVmX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb0c89c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":213,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ceb309cf04a351e519c15919a2c0df5c","sha1":"a2863b34850ca884bbe682a09b6f7d78f7ebf0bd","sha256":"8bb1cce57c8936d18f8634ad68a108ea93c611cc2c7b5b084de53b416886b7d4","sha512":"ce33ccadf51862ce373d5f5456dc36cef44a0d13fb24b2b2b45de0057858ce38898cf7ac95bf166b038de15d5884818be14e196299402963f82923e07ded76fb","ssdeep":"","tlshash":"20d0a989200828725e5882281c813f0a94ac8693c22a680a37ea2d498b8081ec445c5b","first_seen":"2025-12-07T08:20:59.721463Z","last_seen":"2026-02-14T08:25:35.00501Z","times_seen":17,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=New%20porn%20videos","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=New%20porn%20videos HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"133-lm6Tm55n6uw1uc4xn9GIJ7TzCqo\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOmtsMPgEzFbpyfStNsSm2yV6Jj8nRHB5aBF4eUErtw%2BAm85hWS3mAxPHkn0lKO2YRTUwtVOKil3pB5XV%2Bchsmn00q3Th97sfMd0C0eC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb0c71c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2188e33e9b22074cd841b11aac17a63f","sha1":"966e939b9e67eaec35b9ce319fd18827b4f30aaa","sha256":"81b625fce1c77fd566e47dfe3da18b76a36fca94e3c668363b393dc1365f8199","sha512":"87948f6df1a22e38bfa8a3c3d58848c96f020adb76042e79345baefd53145f6277c4adb7fe16ecf42f4bb73f03d081b12b7430c83b370b0404280fa90a5d3056","ssdeep":"","tlshash":"56e0e7d718041df25f8c42da7f922d8fd07c434900614c8d13f90d61838553b0f57414","first_seen":"2026-01-07T09:29:35.687658Z","last_seen":"2026-02-14T08:25:35.063605Z","times_seen":13,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/favicon.ico","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:59.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1; country_code=cn; ad_index=0; Hm_tf_f895ld4tcvj=1767872159; Hm_lvt_f895ld4tcvj=1767872159; Hm_lpvt_f895ld4tcvj=1767872159\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Thu, 08 Jan 2026 11:35:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jP4yJnF3l2VGdAlA55BZp5DY8KCvnwflkBe0KA%2Fo5dDE8Pj4yw5NvBMZCamrCSWo2qpoBTURZf2rLwS1KWaI%2BuGGCOYenFJZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9bab65029f5a5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:55.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 08 Jan 2026 11:35:56 GMT\r\ndate: Thu, 08 Jan 2026 11:35:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"8b069290d580640c2512a5872f990fbe","sha1":"772850bb200365986c8c897d43124b02697df5d7","sha256":"92ee84761852cf51959d497b17af8f5f813c404a54f6b194ab717f4919f0eb09","sha512":"43449b7b81b3322a0f09c18d81389676a57a2a2e20fa6cb111e96687db0f4d31670e405930b21892a5a3eb562ffd144165f93b3ce7b8fc16b94eeacb5b6a265d","ssdeep":"384:pKf5KgKPKrKyUK/qY4+K4KYKpKfMK1KWK6KyhK/qY4XKNKtKiKfDKOKdKBKyaK/s:pCJmwBUiRDfMTcfFBhiEymDcTYeBai7k","tlshash":"1ba200a1041750009b834ce223cebf35fe1f52517142d0b5abfdab6b9dcbc66526939d","first_seen":"2025-11-20T11:54:43.39154Z","last_seen":"2026-02-19T13:16:33.30571Z","times_seen":60,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":178,"dns":94,"connect":20,"send":0,"wait":38,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Akiho%20Yoshizawa","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Akiho%20Yoshizawa HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"169-6r/8dJcumTOXT/OFxV/ldhVtRY8\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BZmgaR8BR7sHnaIfGyig5ZCtlTFdN%2B86OSSWkT2XuC1POE16SJIQtKfT6vvk4k4xdOaeYh%2Bp7puaUNr2Ln%2BQjFmkKB2TXWvn8xLX3C3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe3d97c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9b555ff0c547b5b88e29efdd327c3613","sha1":"eabffc74972e9933974ff385c55fe576156d458f","sha256":"076e5b25e340e4ca9b9badfb28e80952b669723e4bab6947ba8ad5d0d80b05b0","sha512":"0dc741e8ce125bcf25707f1f188255820e14e49d902fadc30ad4d03c087b61d58a026a29c1f8c2e89d5280656169cf1f2aea6f768db4c64f554b7cc319666a77","ssdeep":"","tlshash":"b1e0c08754228cb31f5c4de93b922f87e03ce1062470584e46ec1c73017e5770793425","first_seen":"2026-01-07T09:29:35.740203Z","last_seen":"2026-02-14T08:25:35.021397Z","times_seen":8,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Japanese%20teen%20Getting%20Hardcore%20(18%2B)","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Japanese%20teen%20Getting%20Hardcore%20(18%2B) HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"172-h9Y5jplJwDNHi8AeVOWIjZntoyk\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MN73OYbPbT02nsKaER2Hiawy%2BKaSeHAuZU8rBoV8J%2BGcQbl%2F2kodMC1nkblGYyTg283FGbEO7iB5BzGD4T0hfMBaq3mx7Lg98C8Rovlh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffa9b2c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":370,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5a32fb7e55794ad8d86c150451ec2677","sha1":"87d6398e9949c033478bc01e54e5888d99eda329","sha256":"d8260fcba924f3ca4a073b53a5387db6b77cfcc7e1e4c83b0490a84c90deb2ae","sha512":"dbb6c0db1bbe89240eabaf00a7984f963477d4e5b391b4ead6826ff3ebf78e59bd1468a018fa18813fb570a55275fd817b886b64df1891b8e244922218eb30b1","ssdeep":"","tlshash":"2ee068c620168ef22f69c26a362b3e9be82d91ca7131580b43a989730b9533a6643414","first_seen":"2026-01-07T09:29:35.688585Z","last_seen":"2026-01-18T21:40:20.528869Z","times_seen":6,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=N%E1%BB%91t%20ru%E1%BB%93i%20Step%20son%20tr%C3%AAn%20%C4%91%C3%B4i%20m%C3%B4i%20h%E1%BB%93ng%20c%E1%BB%A7a%20em%20g%C3%A1i%20t%C6%A1","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=N%E1%BB%91t%20ru%E1%BB%93i%20Step%20son%20tr%C3%AAn%20%C4%91%C3%B4i%20m%C3%B4i%20h%E1%BB%93ng%20c%E1%BB%A7a%20em%20g%C3%A1i%20t%C6%A1 HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1d7-+jeCv2CUXoIeWsq0g3AQrnxYTSM\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6V8m6ppzxoKEky5niHo2DfdA1bNaq2lmcg2ahh2Kd7GSDIkY5H5k%2F7QWbtDU0ORI0g6XrzfeXh1BC5FVxEyd7JINElBIHD8VMbtkdhi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffb9f1c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":471,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e98d6cdeafeb1b3214e086efa0470ce7","sha1":"fa3782bf60945e821e5acab4837010ae7c584d23","sha256":"e5c3f899963cb86d832f4f9f7bc1bd365638d8c23eab188e58c0f5ef3b7ffaf7","sha512":"25ad5351f14c79f628fa4e611ab93fb014a5e86b9010f984eab35c74739939f1854fc1cc48a9995902728b1101424475748a1293a12a7db74821ff658a0b3c25","ssdeep":"","tlshash":"76f09ec138501cb7df4d669d3b032d46842d800924284ccd02e81e30465952e0e47537","first_seen":"2026-01-07T09:29:35.682432Z","last_seen":"2026-02-14T08:25:35.113345Z","times_seen":8,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Kaori%20Otonashi","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Kaori%20Otonashi HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"168-l6J5v2NfWmykTf0S2P8P+X6P6QI\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCUt%2BHUojai7Y6CPeR28Tn%2F%2FenOiDocmgnAPt6Q4COZVJ1DyZ9TFMKPbTfz5WGo0mqn89bRTnSPVqf%2Ft3QIWekopdIeg2oARxY5btKuu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe3db6c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":360,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a7a56c0c0d2c6a675468f089816a4fd2","sha1":"97a279bf635f5a6ca44dfd12d8ff0ff97e8fe902","sha256":"ec59cfc39824a719070d45189372598f93a70655e927b396984cfadaea20b200","sha512":"c4e2c430135df70a9d67b2bc2d9c6b12dfa4b59b0cb8f097cc97ba4dd6eb07371304c56946d84b80193574df431cb6a791f79c5bcaf57fcdbf3d9129471d7ba2","ssdeep":"","tlshash":"5de0c0832c10ccf25f5e09fdbfa36e97e038d1052131584e42fc0d3285698570a53c1a","first_seen":"2026-01-07T09:29:35.700692Z","last_seen":"2026-01-08T11:36:30.446807Z","times_seen":3,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/static/images/1px.png","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /static/images/1px.png HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1; country_code=cn; ad_index=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 68\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nx-backend: http://user_backend_pool\r\netag: W/\"44-r8sBHP5rkk8gLulUTxf2MbMqAbE\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZMi69vvchEAuU1ku7PdXY1QFGAR4dU1hjxuTsZc20q3CeVk92BVTyBRVhpgSygcYCAyKhTHolE7e5JjGysK%2Fdmp3y78IkCd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64fefbec5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":68,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced","md5":"978c1bee49d7ad5fc1a4d81099b13e18","sha1":"afcb011cfe6b924f202ee9544f17f631b32a01b1","sha256":"93ae7d494fad0fb30cbf3ae746a39c4bc7a0f8bbf87fbb587a3f3c01f3c5ce20","sha512":"81f251d1ca407945457425b681a96d1e7743706fafa47ace26f5f569e69337e9aaf726bff1a854b1a5a47a22e55c4bd285a4d21f695d126da631a1c891d10f48","ssdeep":"","tlshash":"f6a022c233808e3ccabc0233c0000320f832820b0c008808c002f0223c2b2e00a882a2","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T14:49:58.439998Z","times_seen":11029,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=C0930%20-%20Hitozuma0989%201","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=C0930%20-%20Hitozuma0989%201 HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"180-kL+eEWIHJ/uH3ESLV4DGBAgEyJ0\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Btr4Wt%2FYTzkcSLWlLA%2BQAQdnQahtM05%2Fx%2BVLYFrpTecA%2B5IfhrM3%2BS3511qcZ%2F0iz0gha%2BSU29l%2Fw42NpTORpV8Z4S8aHpUvYPGYqZ7s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffca0ec272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7d38bad23390c615a08ad9f3e62e2312","sha1":"90bf9e11620727fb87dc448b5780c6040804c89d","sha256":"8d4d07ae54d6fa0c4be0f9fc14c0fec06103229ec26d17d032c954e93276f606","sha512":"a96dc55f89d02b6e878d40634dbb739f014787a5344b6c27cfb75e3bc40374b9a6e286f941011a8fee630331816cc290019878b3b0a154116445540fa8faafea","ssdeep":"","tlshash":"7fe0f14216148ef29f984cd83bb17e47903cf00a44b04c0d01ed5a730459b57074f846","first_seen":"2026-01-08T07:26:42.664793Z","last_seen":"2026-01-12T11:48:53.069135Z","times_seen":4,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/api/json/main/14400/str.en.json","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /api/json/main/14400/str.en.json HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1; country_code=cn\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\netag: W/\"d94-RAe7Vm+D44uqd7oYxYsqoGiJ628\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kCH%2FXj%2FiIDc7Wb2u0QmSczRrxkfn%2FPrWtaOfBVN74dRBwmDnIXrOl2saDdbUao6OSHjxmmZqHVSY4gzm7uDaUaDeUlDkelVO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64f99ed85699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3476,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9b4f819393c0117c0dcd92ccabdef72d","sha1":"4407bb566f83e38baa77ba18c58b2aa06889eb6f","sha256":"ec206e10f0145ce040ac3696986526dbde022c6d6f0ed0acdb30a83068df7d58","sha512":"d25515f017d0f0d1e8a4087ddb19a50036464fb9f77eb48ce53fd8d778d7324b3df4d9e10d9488af99ae918b5dc8dbd85931f3c1732d3af986deab0a06d742cf","ssdeep":"","tlshash":"cd71ae720a769ca8c7c9ef8ae4c7e35f43ee17558ad8621dcc92cc3900dd6d0a218963","first_seen":"2026-01-08T11:36:30.450956Z","last_seen":"2026-01-08T11:36:30.450956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Popular%20porn%20videos%20in%20China","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Popular%20porn%20videos%20in%20China HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"14c-HMkkujvuVRcmn+Iov4AdblW+14M\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMO4jNmzclMbGXNkSNRWxLplLEXblbOGe96UlCE%2BRrry2PI6kITyrvoxA6XkeS2aEACesZdGFl%2FVx2YD3Bm7PtGjE8eCHC1o976UZ1CW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 41050\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb1cdac272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"73b9f808a0960c4892f3992bb5d8a3ba","sha1":"1cc924ba3bee5517269fe228bf801d6e55bed783","sha256":"056cb35bc7923f7ffc8d6a3c6f627d66f96f22fe6087b04bef3213f62baab4ac","sha512":"2a8c302ac3afd870fbf78bd2780b9cdf9ec331c0cbfe1016d29c1cd2077df4d701cd0332cd03c9d0605d28db833d409192f3ab3c6cd5611d2b4130ddea8bcd8f","ssdeep":"","tlshash":"b2e07dc764099db25f5d4bedbb922e8fe03c424904655c4d53f70df18b8153b475b528","first_seen":"2026-01-07T09:29:35.677179Z","last_seen":"2026-02-14T08:25:35.068452Z","times_seen":8,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Sumire%20Mizukawa","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Sumire%20Mizukawa HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"163-hq9vVxK8fSKnOgJ3UfqRWwXjEO0\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZf%2BN8mIauKukWWJGTyj5UN3JzOL4CqolzL9DmsbSiOCmSNZIm7D3sOAqngqHiO%2FTCzOONcgs69JmPuxRMSh%2FeN%2F%2BNSrji3uNrHXiIjr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe3da4c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8e37c23c6f8e60c2dbe8425e4fc18059","sha1":"86af6f5712bc7d22a73a027751fa915b05e310ed","sha256":"afb9039d25fc4a10309fd40522b40d2a8755c7736344a5d085afabe4f9ef21a1","sha512":"f2ee64e5f35a2b413abd386942cae80d30d0f00114d6240330c8ef93bbe7562b77de168cf0d4d21484da83c406a472830cb9909d5412a3cf00d3e1763ae15371","ssdeep":"","tlshash":"3ee0269628158db25f5f4aed7b926f87e038d2452435484e8afc0f32427a46b0ad786a","first_seen":"2026-01-08T11:36:30.454089Z","last_seen":"2026-01-12T11:48:53.024654Z","times_seen":3,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Creampie%2FNakadashi","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Creampie%2FNakadashi HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"16f-RpCVw25F5t8mWEpwGHkru9Ps1iQ\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4f91SdyUpGJPux3ZGIjVsFFw3hu4R50n%2FaXqAufjEqT1vHjIw1R1zBvybPI7JZqvKf13zvTE%2FpBK2UwkgNzKfQeAY0TOkfHe9q2CtFE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d83c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":367,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fc7f3a0bba0f75b5d084087d4c6433ae","sha1":"469095c36e45e6df26584a7018792bbbd3ecd624","sha256":"20ad19041fa4cac4dc054071c0c1326562f1f8c72b5837f048e54ab8c2cb7d70","sha512":"529c6c1f1b0761c532dda3df721f91ab01c83703d0c910049757464a533b9b3e1cfc3ec2c585fdd6c4bfdd4ed1da7ceaa48873204bdc7130fa38340fd3440091","ssdeep":"","tlshash":"4be0688218258cb30f584fca3ba36f82e07d810604640cde86fd4e35415a4e70f93455","first_seen":"2026-01-07T09:29:35.703579Z","last_seen":"2026-01-18T21:40:20.539962Z","times_seen":6,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/static/images/flags/cn.svg","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /static/images/flags/cn.svg HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/static/assets/app.css\r\nCookie: _slide_passed=1; country_code=cn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 01 Dec 2025 17:40:34 GMT\r\netag: W/\"c9e-19adb007e50\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=diJjeuvX3o6FEcBYv6XN9M5zSp6v9xGW5qxGEfozwZTOPzCxypcRqZZ8fkI5e%2FD2C2NnjFUPDJvF0k1%2FkjWY%2BbnSyjZ4Q8ME\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64fa7fb95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3230,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"861522eb82b1f3f2f9f297a117060b4d","sha1":"d453d54122e1b2fc743fb5a35cf832b10130ba29","sha256":"b183271684f3fac608c8a4f3ddc996be9b5fbfb51b2f0c94421fe72e9bbf96a8","sha512":"5c037030c2d255f3e36a77ce431c34c87093d3cce476fe636414c620ed167c13319c40f1d1e20786d0a3d4b31ba3df3d9ca02556ed2c1c061cd6499cbd101675","ssdeep":"","tlshash":"2c612040f1ae44c1c30e4218ade67e15835a7057c28b0c1ebefc1aa58f0e59277b67de","first_seen":"2023-05-14T08:17:05Z","last_seen":"2026-04-04T02:11:24.829248Z","times_seen":460,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Kaori%20Saejima","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Kaori%20Saejima HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"167-fk2BbP3odURKCpW4K1RjiEW46aM\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qan2B5xV%2BjBAS0cWUUnRarPyvBMO7GqNwMen2zmyZeXSSUcMq7wbCUeZp%2FCQAagQX%2F8sFAhpWogRc5cmsQGuJpwZPy9k6V9cKGRHbM%2BH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe3db9c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":359,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7e07522213f9360433b51d186e608454","sha1":"7e4d816cfde875444a0a95b82b54638845b8e9a3","sha256":"641d862027b6f8c6af4e9ef7619ff1ef28959bd8ed069bf200f749aa108a28e4","sha512":"708dca59f99452ce2c7d95df08cbd06fb38c3a50db913909e76740fff22b73721ba3aef510a95032741fa07b077fcda21c1e9358d521d3ebdb71281fa5479097","ssdeep":"","tlshash":"9ee0c0832c258cf34f5d19d9bf921e97e039c0153130084e83fc1d32416d9770a97416","first_seen":"2026-01-07T09:29:35.765107Z","last_seen":"2026-01-08T11:36:30.458372Z","times_seen":3,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/base/aHR0cHM6Ly9pY28uZGFnZS50b3Avc3RvcmFnZS91cGxvYWQvMjAyNTEwMTIvNjhlYjk5MDdhMjQyNi53ZWJw.cache","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.0.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:11:08 GMT","end":"Sat, 04 Apr 2026 12:11:03 GMT"},"fingerprint":{"sha1":"C1:95:F4:80:A2:D4:51:B4:6E:D8:A2:6D:B5:A8:31:3A:CB:60:95:9C","sha256":"96:D2:75:B8:56:DC:9D:9C:1C:34:1D:A6:96:18:42:22:1F:59:87:E4:75:D7:C6:A2:65:F5:B5:4A:E8:FB:24:3A"}}},"request":{"raw":"GET /base/aHR0cHM6Ly9pY28uZGFnZS50b3Avc3RvcmFnZS91cGxvYWQvMjAyNTEwMTIvNjhlYjk5MDdhMjQyNi53ZWJw.cache HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5108\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: public, max-age=86400\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Sun, 28 Dec 2025 15:05:11 GMT\r\nage: 937847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NvM6JP%2BB7QLbQwQPZ%2BsiEOxBBtyc9mXs468muaml7yJCsOqmuWUeBkZzKsi6%2FfmVYMbL9ZHX84MCCI7DTrZF5SdtsVeP0t5yUIoJyMI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bab65014f8556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5108,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cc9c0fdb683837db0ef0c90118869573","sha1":"2290ce083abd6a2ad93ca7a520c47392ae3c03c8","sha256":"1d0f2e64bf9f371e57bccee4e3d86c7ef5fa1b214f4af9ceab3c74791dc7792e","sha512":"0d9f0e989dbf1f110dfa18e2eef65d2dabfc26488bd8d1612eae9fdbd5d2c040547df6a89418e9da8f3cf6c3a5d34631b86ea3eb0732b2e0b87f0c6a52fbe746","ssdeep":"96:Q7ooaovtFHlR3yXSobCIeoqklaySDsLku3HwaHFXBzTKYirKXyU2s27S:cooawtJPyXSuCI9qklabsDdvCUC","tlshash":"52b16d2a92ae93d3d84329f8acb6f590154b751d3a25e13f60099993db308437327bd5","first_seen":"2026-01-07T09:29:35.726953Z","last_seen":"2026-01-12T11:48:53.070694Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"cache.sgvafs.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/static/assets/app.css","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:55.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /static/assets/app.css HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:56 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 01 Dec 2025 17:40:34 GMT\r\netag: W/\"1d5f1-19adb007e50\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFjs2%2BUtJ6VcicPsVhUSxHpvLfv0hNL2ZLxmXYI%2Bf9%2FgPkwxaul9%2Fn72JmO9KFFHXlv8M9Rn14SQrBVrYCXOYFUKv3xnsSpN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64eeddbb5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120305,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"61669365abfca20c0b7be1e3fc11a4dd","sha1":"563318fd056502ad8e637acadbbc1072681a3d9c","sha256":"819092f5358e528c8472460a0aa60d2a9b8e9ea5c4d364fdf351291235bd1e54","sha512":"c9c3118c25f623fed0f76624f535c338ada00a0fa15c28ced95f82529aa4aa529be7f0cf25f648e32a58265268c3320abf9811926df857913bc7265a500f996d","ssdeep":"1536:z63AD4FqB4hWzj7XaKlq4hRTIP8PL+fDW3XlVFjml2mjBI:Ko7lvL","tlshash":"6bc3b813a542613f782bc07775e3662db16fd042e3239bbef956b52dc0ca18527ba384","first_seen":"2026-01-07T09:29:35.668577Z","last_seen":"2026-02-14T08:25:35.039173Z","times_seen":8,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/api/json/videos2/14400/str/latest-updates/25/top-country.cn.1.all...json","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /api/json/videos2/14400/str/latest-updates/25/top-country.cn.1.all...json HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1; country_code=cn\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\netag: W/\"a818-16LbXn0sHVk6wKsPoJgL/HM2nh8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vr3BIOhklthPCZpWmIakZyDuD8HaMqQT7wGUrSKs79QYc9LVny7mVF7tOLRkfcrjklWwG%2BNxxwVzDdEPsvPwWnJ6drYRKZKg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64fa0f355699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43032,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5cae377b919c65e69a8469758979e933","sha1":"d7a2db5e7d2c1d593ac0ab0fa0980bfc73369e1f","sha256":"167b8b177de1bdb44a06388164ffe2961f4bc329b808138bb2d724f735f9d57f","sha512":"ab7211ba7459c1ed641ec88fa1aff6623b17355ce88f521f7249e4a4e9acc1b11008a3ef0f784cf727a1be514952b273a81c0c3af7e90a662e5a09e8913fef1f","ssdeep":"768:g2RGmFPkQKVQ2BFUAkvA3WXq356EUwYV77WmATursgFfu1QD4C4eUYriWMuPTtIm:g2RxFkfVjBFUAIA3Qq3sE4VH5/rRFm14","tlshash":"6013923a6c6748b8e2dbd5808dca951f44ed4361e504caaecdeecc6c41c4f4a2bd5ed8","first_seen":"2026-01-08T11:36:30.460776Z","last_seen":"2026-01-08T11:36:30.460776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Popular","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Popular HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"428-W0nZg2CDfyzY+xb+XgAULwCxkuo\"\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aYtzXrNCzEipXb0cVO6tVIdZgyHQldTlSkb%2FnChhlniehzg38t1mQCXD1s9B%2Bd3H4u63YY1j78I2J%2BEyjG4bQl%2BeOwnnwlIVduIu9rrH\"}]}\r\ncf-ray: 9bab64fb1d03c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1064,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0edde2f34e4ef5af287d44017c869fe3","sha1":"5b49d98360837f2cd8fb16fe5e00142f00b192ea","sha256":"2d56e620ba188fc80f08c990e23aca82819c1d7300a6050fa5b02d15783f1e62","sha512":"aba92fc2ad15998a1ded1c4c1c0c93d7ae06999b829d9e846c5fecc67523743c73d2d8526eb373f41669fa01e6d118a1a737d9d979291f15563dccddacd9c5c7","ssdeep":"","tlshash":"f3112b530239a73a86470b6336631c5977bc1b47f63284083ea0bb6e95ceddd365a10c","first_seen":"2025-10-28T14:55:13.553329Z","last_seen":"2026-02-14T08:25:35.099332Z","times_seen":30,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":34,"dns":3,"connect":4,"send":0,"wait":185,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Playlists","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Playlists HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"c5-SpTDVVyrW6xLmXz7TFXU9UtFUmU\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jah3g8hH5c95N4fE%2FkukL%2FWT1fRnaebRdhzIF0oW%2B0peSfT%2F01ghqYxyAsPTBgAMP9lq614hlDo3AKIqpJNRxfzT1nN3rlqYgvE53u8i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb0c8bc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c7fd2f53961aaff718c0c807aa4cc167","sha1":"4a94c3555cab5bac4b997cfb4c55d4f54b455265","sha256":"9d770375d985a3b1b90816a813d54160aca41019aa9e15e4e4ccc7e5ba8ec1b6","sha512":"fedfeb674b06fbd4a4973578d34158e4186c26bd2f92ca5c1867f92b16fe206a2d0de0d57d588704f79a6cd38fd330b452ad246161dcc3eb841f462c67683bf0","ssdeep":"","tlshash":"21d023cc14051c735745426d5f814e8764dd80d6502d34042bed1d0153c040d4540c1a","first_seen":"2025-10-28T14:55:13.490417Z","last_seen":"2026-03-08T18:05:59.611643Z","times_seen":31,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/js/lianmeng.js?1767872157860","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /js/lianmeng.js?1767872157860 HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1; country_code=cn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\netag: W/\"29f8-UnFvncLmFDWllvkW4+RS/vqd8+k\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=59IsW5lnS4jBVwoKXkjy5YoieOywWiObSEp4VBA4x%2Fw6muMmn1dE3donxsqSW%2FTjsQsljQqi%2F%2B19lGeoo1iDfq103WhNsyd0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64fabff15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10744,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4806)","md5":"d5327f60aa6545c82314fe67e9893eda","sha1":"0f0eedeb7e2ccc66fc03a558cf2adfc30b97ad6a","sha256":"8384e4df0afd179354e87032f06c64e004c2e391fee460957450edd936e28033","sha512":"ce2be00cf61fca12136e481b25625c29a00c4ae88a94dd7508d0c13314816ebfcebe7d27bab18aed6c7cfdad135dffda39f8c8b216a7e23259f0ea3fc124702b","ssdeep":"192:jJz8GzCgQ7lUjtvYHemXStChAPvI0r4Bz5AhqekolopkJ7oiQ0Vxw8eytVC4+3iw:C0WUlYHemCa2hziTWT+Sw","tlshash":"e2221b182de760380d53b0685b5b30c49cbd77b751ded5ac7a1ea6811f80c8d61f76b8","first_seen":"2026-01-06T09:01:29.239012Z","last_seen":"2026-01-09T20:05:59.711479Z","times_seen":58,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Agr-039%20The%20Sailor%20Suit%20Wife%20Next%20Door%20Chisato%20With%20Chisato%20Shoda","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Agr-039%20The%20Sailor%20Suit%20Wife%20Next%20Door%20Chisato%20With%20Chisato%20Shoda HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1af-3FZwUH8/E4//Yj7pA/L/IpGkviY\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=de8M36B4iZQAthXxMaMu8JjXbOAv0P7NOa3qG8jWL66IIMGhFCKt7tWhbGoXFcSe%2FaRi0eLZWws3VE2AZU4NYhh8V8VAYxDuPs59OLaV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ff895cc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"26b804c719a809bb5737157ed2e4b866","sha1":"dc5670507f3f138fff623ee903f2ff2291a4be26","sha256":"70f8352a05924b5bb99e151ec17a32f736c0e72b15e9bc47077e7bdc96ba2c73","sha512":"8497d232887cc51919e8b1ca7146ba9bdb6d6b15a5d6b9fd4a2784f2f181285a476106336848029438f802a1440d8c1f8c5eb274da31ca5f2bb07ec5d4d5fbd2","ssdeep":"","tlshash":"35e0a38bdcc70fb2299c017335e74e07f07cd3c440a1113963e68c912600119465bd07","first_seen":"2026-01-07T09:29:35.722728Z","last_seen":"2026-01-18T21:40:20.526599Z","times_seen":6,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:59.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/?t=20260108\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _slide_passed=1; country_code=cn; ad_index=0; Hm_tf_f895ld4tcvj=1767872159; Hm_lvt_f895ld4tcvj=1767872159; Hm_lpvt_f895ld4tcvj=1767872159\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nset-cookie: country_code=cn; Max-Age=86400; Path=/; Expires=Fri, 09 Jan 2026 11:35:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0EvwsTlQ8uyeTi6df8QPuTPx0DSLayXUkMSOmGffao98Qq5qubIfp56iJeEywtuqn%2BF9DfVCephp24Oe68ztk3vzxcTmcM%2B\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9bab65068b0e5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":21222,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (21222), with no line terminators","md5":"f7a57f07ac27a822ce4cfe4a864c8b00","sha1":"f5b68d043bf41b380693a887492c2bdc7324a0c6","sha256":"cb55535613e42e09550bbb65a12d5fc759535b868b92d6da97ad3a7f2a6fb8a9","sha512":"6a52fa653e4cbd01e83db699287087e5fbdda4afb3863695abeab0915299967210f5ec40cc6baa8b64fba94a9a05a46b7858537536a81295691e325217fc6712","ssdeep":"96:16yROy1rC6cYwOMdq+wVPPxCOM1l2l5lglOlElulIsCA0FTfaDtCCdug2YflgKCv:16yROFE1PxnO+Jug2I+pgikkpp7tx","tlshash":"8892cad1e393fe80bbed94499285ea494f331f4b83a11dd6f924b8c152c9320b3b8597","first_seen":"2026-01-08T11:36:30.464784Z","last_seen":"2026-01-08T11:36:30.464784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/verify/0aa9b8ff?t=1767870632673\u0026host=met072.sbs\u0026redirect=%2F","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T11:35:54.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /verify/0aa9b8ff?t=1767870632673\u0026host=met072.sbs\u0026redirect=%2F HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: max-age=14400, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2%2Bxvb%2BZChzoTGXdgZeyn1x3rvCkkO5Nf5SmB3Jb2Tgc%2Bbk%2B0IwgPnvEZEVzgfzvxhdtfN1Tr%2FXILa8feG72JBwPiOSvj%2FiZ\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9bab64e7d9ea0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5556,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"20fce6e3d5ff420fb6c2a24e70f66bbd","sha1":"9bf3bbf6858d17cdf54664f9d20a73a13e7d820f","sha256":"911e9098cb17990630339ee4ba2f3aed6934c0403d6eec317c89bb95898909fc","sha512":"e34216d215c88cb269912a483957ac2ec5994cb442fd5bab70ce7cd6ecacea61652773ecce117e2413b95a53801d7d5f8c65c40e45ae96707f7ef24bcbd52071","ssdeep":"96:2SyHTFpq0qhVcMuBByyTi2wI6HmtwIuG9rHNvUmcd:ieVDuB8jLm+yNZUmo","tlshash":"8db1e91fa6561409613383b4fb62e708fa7680432382c65979fd975b5ffc44a8673bc8","first_seen":"2026-01-08T11:36:30.466073Z","last_seen":"2026-01-08T11:36:30.466073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/static/images/flags/us.svg","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /static/images/flags/us.svg HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/static/assets/app.css\r\nCookie: _slide_passed=1; country_code=cn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 01 Dec 2025 17:40:36 GMT\r\netag: W/\"6092-19adb008620\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbJG3ohFuvCLNLhYSoMeM8HkYIOCiElAwvwLXYUsPlaaUM7km4KRHIZiuEAX%2F7ekjX7Obuj2PCVFQ2AmprUoPxBQ3R4bh9X8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64fa7fb65699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24722,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08055e46267282026bfffd4f23bffb6a","sha1":"b4075cd207577125021ffaa29658e0e013efc3d5","sha256":"8736e65cfea67823b812d919d1288303e277a375832a865bb0111190f39ab227","sha512":"fad8d3e4b302ddb8bf472784f53741799f9d1277b04b61858a6bd5c3549264f4951ecd6341c0494354ee52de1f62cadb49ce02b273a433b8189907d86fdccf4d","ssdeep":"768:rRcezlmh6R4qGi81AlDKQCpT5U2z1TuZxCgOz6/CcVjomcurlixzQU:rRFzlmh6R4qGi81AlDKQCpT5U2z1TuZq","tlshash":"8ab2cee552b40becef9684e9deed0c8d335e17f2819d8190b8aa358bcd76660ccc911d","first_seen":"2023-04-13T16:14:10Z","last_seen":"2026-04-04T06:30:59.707946Z","times_seen":2914,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Kanako%20Iioka","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Kanako%20Iioka HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"133-G3m6+CFPqNSk9xbAEKsXGN5Qsv4\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMrKSCawngRbHZo4n4G8W2Lj1x%2FXIQj5A%2FgnV580jtR7EH4xDBjw%2FljG%2B6cLlS3Ke8rxicQI5fA%2FTPL%2BpKM%2Btvb68cjzUGM8ZbNp69dc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d90c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":307,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"45a2365f43e767a9067036204d441897","sha1":"1b79baf8214fa8d4a4f716c010ab1718de50b2fe","sha256":"155ddb517323a08015ab81c83045a2ccb2ecb8450f743f5b67d0cbbcd724a710","sha512":"faca0f6cb4b517659a3c6f1a5fe21aa60467fd4a99bdb08c8f677e5c65cdc3c1d653e67f186838249d0b5233da1d3b6e601c7d43843ad97c74d96ffb55c41b2b","ssdeep":"","tlshash":"2de07dc208681d725fd846b53b419dc6d028c047502504894bfc1a2203a242946c3819","first_seen":"2026-01-07T09:29:35.693016Z","last_seen":"2026-02-14T08:25:35.065319Z","times_seen":8,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Horny%20Porn%20Clip%20Japanese%20Censored%20Fantastic%20Ever%20Seen","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Horny%20Porn%20Clip%20Japanese%20Censored%20Fantastic%20Ever%20Seen HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1a7-pU+n52YqCFuvwvXckRfDZeplRfo\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHDvCbPLG4QKStmBKPwVBHr6T1AktwGIygzXvApN4kvpb3wnQ5cfq9RVa7zLV6WUox8kwSRbu%2Bl%2FJBtDKJ1WwuDz65F3QCIDlJiptrp7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffca1cc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":423,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4bfd9122ca05b17fedad9f96aca86e2d","sha1":"a54fa7e7662a085bafc2f5dc9117c365ea6545fa","sha256":"369f8dcd440caf8846c7157f6d8caea72d31eb103e1ca6d1392ef413f51b5fe5","sha512":"a079d5f28ad1d0f0cc30ca31f13503cc59f435805589686687d28b2dad7f706ece305fb0abf912839df327562cdfc2903c9bced984614bc4fba988c49a24fa89","ssdeep":"","tlshash":"f5e0ab87240b1df36e0652e5ba922ecba0ad938354390c8753b45cbf534061b4b43242","first_seen":"2026-01-07T09:29:35.70988Z","last_seen":"2026-01-08T11:36:30.468556Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/site.json?timestamp=1767872158874","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /site.json?timestamp=1767872158874 HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/?t=20260108\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _slide_passed=1; country_code=cn; ad_index=0; Hm_tf_f895ld4tcvj=1767872159; Hm_lvt_f895ld4tcvj=1767872159; Hm_lpvt_f895ld4tcvj=1767872159\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:59 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\netag: W/\"5a20-mJsTwQ5yUStD0h2CSMt/wiYV4+I\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GRswgWfjnP0K%2FnmE8bAIT0hmBLwNH93qCRXchW1QJU7ITqdNrIOl69QeOIwZMuxGPXAY1DpujwV1%2B7geR97uRwj9moQ5gigg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab65014e1a5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23072,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (23072), with no line terminators","md5":"c62d05c50099dc36e9a95f11a22d1474","sha1":"989b13c10e72512b43d21d8248cb7fc22615e3e2","sha256":"6181dccc004f384c046c478eeca78c1a9123af8f2cc6b7adbecd69807f13dc99","sha512":"ffcc3c322f0a22c16d2018845bd86e8084558fffe0b6e6014912bbdf54fa7a631806c99c25bc5e840b56336b5fb38079d169c6081b90ce3295bd90fee38442ce","ssdeep":"384:OVpJ9hVpJ6YVpJr32IVpJ+CVpJLeB+Xv+A/pHP+qgXb/uY/vbqYeMd6jNd9YXdh1:2JDJbJNJ5JsYTgXbGAzaMd6jzYT5dF","tlshash":"21a2b763eb4a89fe73801a86cb8d0d43ede18744eac2272412d397f95cc6e64b54cd79","first_seen":"2026-01-08T11:36:30.469595Z","last_seen":"2026-01-08T11:36:30.469595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Popular%20pornstars","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Popular%20pornstars HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"135-Qhv7iQC3Woiwy328fvGzFenIdg4\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BlJce1aIFWbjhCooqLjtuxRA1iNxE%2Bm1J1h4yQHL6N%2BKeGNs7%2Bblrd8PRCn7KGLNJvxl6zzl3fxaHS4xd5tb%2BXjrG9ChCyBNqVuTqmr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb0c73c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1c20aa32f8cd90d385ec3be59f7d608","sha1":"421bfb8900b75a88b0cb7dbc7ef1b315e9c8760e","sha256":"5e3312e8b3cc1c3677dfa1202a816a18800b162ec1afe82fd3943f134debce09","sha512":"335353695bd527f41d34e222ff38fc21ab2211e4d8ae51863f7b137dd57987e40c3b161388db1605d384690554cb19fa347065a87d81273f7cabdf0e2ce3b247","ssdeep":"","tlshash":"afe07d8b25091cb39f4d83956b413fc7e02c41474061188b07e91d7143a1a9b0647806","first_seen":"2026-01-07T09:29:35.736792Z","last_seen":"2026-02-14T08:25:35.110836Z","times_seen":8,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Categories","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Categories HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"277-DHp+HmFIwSW82m50RjKcIFWc7lU\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SH2hQlSvRqIH9ZcbUA03TDfWe30J0fUpuCkpFPYa%2Fv0%2FYFshfuSGp57TjTYl4FOPvCo2mb0oigz%2B4B8dFQwIZaq97oqAaXvy52B5aIx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb0c7fc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":631,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf6baf9a1a3078fac6f2d34873d8679e","sha1":"0c7a7e1e6148c125bcda6e7446329c20559cee55","sha256":"be81dc77a6c2d6a5d767b61f50462f9b406be3dd184c689fa97631f896dab8da","sha512":"d4bda3f72cb3a4f81b413b24e08ba08bb17aab07def4c5f828b9f6b948278b9165fd6cb9dd6160eb7800386749267f99a545ef74df107f5a13663e39633e32b1","ssdeep":"","tlshash":"dff0218e112d89b45ac3471a25c30c5dbaac188bca776c486e98fe1e8b8dcd9010a40d","first_seen":"2025-10-28T14:55:13.370018Z","last_seen":"2026-02-14T08:25:35.093426Z","times_seen":30,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Top%20rated%20porn%20videos","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Top%20rated%20porn%20videos HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"139-jU52Wvu08lc57F4WCywnoxXK4wQ\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fqP3jWrWH6erTeBBju4ZFWI9oP2iKH1qNNKBA%2BHI8O79opi%2FK8gFK3XoMVRlSxfXfWOU%2BNk8wp1aL33Qt3mVVBVDQeHWPLPtR2NL5dK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 41050\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb1ce0c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"288a8a61ac33848eddbff20a1635d990","sha1":"8d4e765afbb4f25739ec5e160b2c27a315cae304","sha256":"5cd727d40d571d3d9fa7a29be18f04c8305d213cbaa833809ad358c36e60afc0","sha512":"9cbbed060b41eef684d8aa03abba07e252daa2fdc2070b92e6e8599673f715dad41062a996e5ad93da5b28c77237da61a4a2c1f4bf73dbc97626716e3ab49962","ssdeep":"","tlshash":"3be07dc614041fb21f4946d9bba1ae4ba43d825500714c6d03fd0d6147954370757424","first_seen":"2026-01-07T09:29:35.751218Z","last_seen":"2026-02-14T08:25:35.007213Z","times_seen":8,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node92.aizhantj.com:21233/tjjs/?k=f895ld4tcvj","fqdn":"node92.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.159.106.248","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aizhantj.com","organization":""},"issuer":{"commonName":"Leocert TLS Issuing RSA CA 1","organization":"Leocert LLC"},"validity":{"start":"Tue, 29 Jul 2025 07:48:12 GMT","end":"Sat, 29 Aug 2026 07:48:12 GMT"},"fingerprint":{"sha1":"08:E8:20:3E:64:D6:76:65:C3:01:5A:25:5B:CE:23:E1:04:FF:9D:3A","sha256":"ED:59:41:83:D6:B7:DC:EE:38:8B:4C:EC:A7:BB:DB:86:03:54:41:AF:C0:7D:3F:63:B3:8E:65:A6:75:6E:6C:1B"}}},"request":{"raw":"GET /tjjs/?k=f895ld4tcvj HTTP/1.1\r\nHost: node92.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS\r\nexpires: Thu, 08 Jan 2026 11:27:12 GMT\r\nserver: nginx, Aztj(node90-1)\r\ncontent-length: 11698\r\naccept-ranges: bytes\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\neo-log-uuid: 11022874453907705392\r\neo-cache-status: HIT\r\ncache-control: max-age=1800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35397,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"7846fa717757e9eb9a3d7f12c3f66859","sha1":"ff397bf7a4f65d1b5874a9db6ca274e9bcba5920","sha256":"2c49534d15bb71d13bb5d34e55c88c1d8432e3edaffaebab7cf0a56a0d18da56","sha512":"a193178a673b59c03962e575f313b2cef277a1552c4bb1f7ebabd14625e0d8deb2bde46f285f82649d263d3b3929d6ca8ea61464c073cffc6a71621a7068627d","ssdeep":"768:+sC5kuNkdE4rDE93/BvupsHs27ZyXnD0T:jCOykdE4rDE93/duYZknDm","tlshash":"dff2d7d632ca2536a27670a9d95fe50cf4b9aa1437d9ec44590cc0c46d208ba83ff9bd","first_seen":"2025-10-01T10:31:27.884549Z","last_seen":"2026-03-27T06:19:47.120983Z","times_seen":1055,"resource_available":true,"data":null}},"time_used":1560,"timings":{"blocked":768,"dns":40,"connect":21,"send":0,"wait":23,"receive":1,"ssl":703},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Incredible%20Porn%20Video%20Big%20Tits%20Incredible%20Ever%20Seen","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Incredible%20Porn%20Video%20Big%20Tits%20Incredible%20Ever%20Seen HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1a5-JrxtZbpoks1Y5pAq55Wk2VZz37c\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDNUw4VqhdN%2F%2FTABhlbqYDJBbcoP1Pr6v2yxTNlFQsZ%2F4Nch7m8a3eRplfu9t4nHf5YfE6L89GKZYtGMD3MYuzpvGi4brPLO2sCBcR%2Fd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffa9b0c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":421,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3bcd17d8c870d87eac44000b8a66e977","sha1":"26bc6d65ba6892cd58e6902ae795a4d95673dfb7","sha256":"a426c3b892b8c7cb4991c7a9381c86681cc4e2d9088a2e3940cd60a10fa6c010","sha512":"ef45ba42ef063a0856b3ccce9a3d54993cda14864c552b73aea25b39097d8c62067eb6e7ef66118f984e62d803eb2252602011e683e84d505cc48da0a9a395af","ssdeep":"","tlshash":"3de0234b14051ef2298805fdbbb13e47d43cde454a765c4da2b9096083c547b875b9d5","first_seen":"2026-01-07T09:29:35.775624Z","last_seen":"2026-02-14T08:25:35.047717Z","times_seen":8,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Ogata%20Chino%20Complaint%20Office%20Lady%20Apologize%20With%20The%20Body%20Vol5","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Ogata%20Chino%20Complaint%20Office%20Lady%20Apologize%20With%20The%20Body%20Vol5 HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"18e-GS/WvZKYxT42V59oEO0WU/CgUc0\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oh2%2FifdeQ0TCKecT16hsqnRQyf8mv%2FOGZnYiX%2FtMAGNuAEZ3ZHLbUfyY4M6k1yE1BWzjVVH73OOA1XM0LPEVEO5Y8hIxM2q5fwSXk1vD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ff9998c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":398,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bdd91e2f35a31c0af5b9659eb5504b5e","sha1":"192fd6bd9298c53e36579f6810ed1653f0a051cd","sha256":"a250b55b9b6faa2b2d53b9a219c1904a8588743022bc0372f88f8c0930f58137","sha512":"75c741331da4b7d8ddf5580d468c916ec744b5a308ef70a9e06f3e72789bf84a86d1b72eb165de8048a3676bb396e934e9759b0d203a66e165076aee447becf9","ssdeep":"","tlshash":"12e022cb28251c728fcc459a7b939e87a83dc04a9066588a0bfd1a71539f01aa1d2c45","first_seen":"2026-01-07T09:29:35.673129Z","last_seen":"2026-01-12T11:48:53.077515Z","times_seen":5,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=teen%20Japanese%20being%20waking%20up%20by%20a%20dick%20Part%202%20on%20Xasiat%20(18%2B)","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=teen%20Japanese%20being%20waking%20up%20by%20a%20dick%20Part%202%20on%20Xasiat%20(18%2B) HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1ba-EVuHSfempLznJJmk2G858pHexK0\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Ug4b7Yez3h6IU3z7963s88D4U%2F5%2FCkuYnyjFyh87tuxUhIixM%2B2dPMCcPA6cKDy2ESULBqlnURg4kK57nZss2jeSiJVr2eyfH02DEDP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffa9a8c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":442,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2816bd583696ac79825db83f1fae62aa","sha1":"115b8749f7a6a4bce72499a4d86f39f291dec4ad","sha256":"100a64cfe230ce8ce4d1101383d6145134369cbe2e3747913926813ef5b5d33c","sha512":"75d7dd2f4e39d0a5a68b6a64cdc472b6b3ad40f06c0c022696e232b032527bf9a11ef79912bb6346bf988936c3fbe70f54167a8238724a4e5925c02420fde4c1","ssdeep":"","tlshash":"8bf0abca680b2c722f4e93543a423f4be03dc34b08a9608952dd4dff5180b1a0a4b56c","first_seen":"2026-01-07T09:29:35.728212Z","last_seen":"2026-01-18T21:40:20.567264Z","times_seen":6,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=C0930%20-%20Hitozuma1018%200","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=C0930%20-%20Hitozuma1018%200 HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"180-glMW2hnxCxDnQwrVWXhXt5a7h7U\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9vXtM5PPud%2BmzdEyxT0LTE4%2BTGHi4U7qDMZcXM0ABBwdkwDQrNMuhRGz7D58HZeQgcazCaA%2B4JcdR9tXjoVYJmm6G3eTKoHMNkEpPyZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffb9f6c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a635259909012a560b38282976665fa2","sha1":"825316da19f10b10e7430ad5597857b796bb87b5","sha256":"9e353395ad5554134445713b032ddc5b1689361b1b28cb3c7ec39fca85561458","sha512":"2dd0cf61afc8d7d42efc794705310489cef34449d4b4f7eeff791950808207a8a57dd0f5a88e944d13ae8a15fd805f90867f1ecbd88c0163dbfe0b0b7de270b0","ssdeep":"","tlshash":"7de0614316148db2dfac0dd93bb12f4ee038900950600c0e97ed1e6245597d7179f815","first_seen":"2026-01-07T09:29:35.690606Z","last_seen":"2026-01-18T21:40:20.502469Z","times_seen":6,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/?t=20260108","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T11:35:55.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /?t=20260108 HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/verify/0aa9b8ff?t=1767870632673\u0026host=met072.sbs\u0026redirect=%2F\r\nCookie: _slide_passed=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rzh7d3BbTo8PksZlHULUxaf2NuTCUufZ3BEMgokT%2FHKdi%2F16LMSFWTpEEP32BtbfQm4fcuhLyUVL%2BJeax1ovX5U3mJgxwAnY\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9bab64ec2baa5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21222,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (21222), with no line terminators","md5":"3bc35f548573c9efa2cdb88653c166dc","sha1":"2ee744b8340be81b5c3bf25fd3ab127f79eb177c","sha256":"e1e5f0a594be3bfa2f0c81c722a771a529de57cca67d88af2b1ecd24ef1a608d","sha512":"4e6f48acb85fa2df9713f718e3796921b88796041f26f64efba6e0f89b103964147717fda26efea2e3b3937dc024ef68cdcb2fbfce73eb57b9acfd98576f82a8","ssdeep":"96:20yROy1rC6cYwOMdq+wVPPxCOM1l2l5lglOlElulIsCA0FTfaDtCCdug2YflgKC8:20yROFE1PxnO+Jug2I+pgikkpp7Sx","tlshash":"4592cad1e393fe80bbed94499285ea494b331f4b83a51dd6f924b8c152c9320b3b8597","first_seen":"2026-01-08T11:36:30.476738Z","last_seen":"2026-01-08T11:36:30.476738Z","times_seen":1,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/js/main.js?20251024","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:55.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /js/main.js?20251024 HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:56 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 01 Dec 2025 17:44:50 GMT\r\netag: W/\"4225-19adb046650\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHx0v%2FrMrd7oL%2B%2FylMFdFjaFirBV04oMTwUX5ZCEWbOtNPkjDZrdu30x3kcvadRBSnBGcfzNolxEnoS0QvQkF65HZUOLTg6N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64eeddc15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16933,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4b615060f6dc4c0933cceb68b4ca5726","sha1":"ca876a6095d0e61a0c5934e00a61a63159bd2081","sha256":"5811cfcdd0aa80605e4c78e2b9abebdcccb8e5a8285cbddb75859fec323da854","sha512":"54b02694a6dc545a9a7c3b0886b67bb2b47b783567cf9db2c3db080688e44acb32f49c368a051bcdff52a89be38ec9d7e4e41db8a47691d056dfab74b39757c9","ssdeep":"192:Uls/WRlsB1HBirJ8bJFalC9DPEHt/IcoXMCskWp/G5GzgymyXOzkBKqPT06CylrH:SsGsBBcsYC9EdNcIpPI6/f","tlshash":"c47264181bf7083199a3116e6f9b13487271e01bad4bcd4d7fac86c54f91e2489b2fb5","first_seen":"2026-01-07T09:29:35.715989Z","last_seen":"2026-02-14T08:25:35.066853Z","times_seen":8,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/static/fonts/Noah-Bold.woff","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /static/fonts/Noah-Bold.woff HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/static/assets/app.css\r\nCookie: _slide_passed=1; country_code=cn\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: font/woff\r\ncontent-length: 57028\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 01 Dec 2025 17:40:34 GMT\r\netag: W/\"dec4-19adb007e50\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPxPuVWW75udXMjX0HpWq%2BzMfs6Qds8eKBbJNlpaiHKX425lJZla1yBeh1IaPI%2Fp8y6Spo2S0pMpYsq1zW7Ej7K%2BL0ZgW2qp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64fa8fc55699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":57028,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 57028, version 0.0","md5":"412ff65e74c3586b4083c7c872cc2a65","sha1":"4775b9daa44b28df512bb4786fff87d2cf1f2f3d","sha256":"99f0bc80b8cdf3dfb1f5044679e8d4eec106d67422c53b53a9492028a3020793","sha512":"988b0a1616015f13486305e83d02c25cfffed84e83a472e5e395ebc284e88d39e26b8b64866d428f10dfa8751348ee8b8720aaeddac65702db0454d88e565104","ssdeep":"1536:RjtA1fb5cpWomYr+N644Bok/5IIQhleRE5ia:tS5cYomxwBok/eIWURE5ia","tlshash":"09430297795263a815134df0ed03b39baba02d2dfcc9d83b676402f6d1804eba428c1f","first_seen":"2023-04-10T08:45:57Z","last_seen":"2026-04-01T06:19:37.375088Z","times_seen":173,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":360,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=All%20categories","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=All%20categories HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"b5-7t8pZogumk43E7NWIIYMkO3sRYw\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzCJ0J17%2BCzJMO16in4fr%2FJpjkyek34jN8ISBgMumvIrFvQrjRjTq3bbtvviez0yHPhFvAs7Nvguq7rymG9pe6ygytwgdW89ODuMmhHK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb0c85c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":181,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6e8808ae95470f05192a5ad54ae51774","sha1":"eedf2966882e9a4e3713b35620860c90edec458c","sha256":"4f9cabe06725ff076a690ca7c3e5fe87bfe2aff7bd40ba5cb4f8c84f5f1d14ba","sha512":"bd41529f811a52c95052ad1a915c7913b76f59d5eaa26821ba209649167cfad2b1a454278998805dd4178deddd6af593c6b4b079ed165d4f5c2161748f958672","ssdeep":"","tlshash":"82c0128e100548b22b5853a519851e0ba49cc5a5d066a8c973eddd0547c981d4165c19","first_seen":"2025-10-28T14:55:13.485892Z","last_seen":"2026-02-14T08:25:35.079657Z","times_seen":25,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=HD","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=HD HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"9d-Dt4ccmkYAR/BBq2BYwsWKPLMBqc\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FmBrA%2FaOpdbxeO%2Fe2J73OU%2FZRpziUNbR2WN%2FyRwfblEGENOm9y1gwPg0DwGTTwx7AJZw3Ot5FmjbmthfsIvNWU9973HEyPALrTi1injJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d5fc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"faa1eab52588c6160a9b3113a3230ad9","sha1":"0ede1c726918011fc106ad81630b1628f2cc06a7","sha256":"d46ad330578d632fcb2e6ce24c1e630aa5bbd750caa72a9ce66daffc663d5693","sha512":"f20b8d4b5d12cf7357bf50596d05faf5ff0f04e95177842ce9a1792862ee637074cacce9d4c588b93553d20e1df6c1ec9cfbda14563dd5c031a6a37c1d1048ed","ssdeep":"","tlshash":"26c08cca004388712b48832a58c62e4ba8bd80d2807a284e23fd3e228fc580c84c5829","first_seen":"2025-10-28T14:55:13.476659Z","last_seen":"2026-02-14T08:25:35.128684Z","times_seen":30,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Best","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Best HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1e6-cW3feVsqT0VqWNj3SrL2eaWVkUc\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQ2z44xZeYgYNPGTWzYaIpWd%2Fq73XaD%2FRK2FcmK%2FF8fYRyEsM%2BWcFWsd547Hc2PcoJDOgi6nf%2Bj8qrW%2FkxjMV1YvxasmpBxfERWanoQe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb1cfac272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":486,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fff09720cf10e6dd0a966838cdcf1d79","sha1":"716ddf795b2a4f456a58d8f74ab2f679a5959147","sha256":"e696cf92f40a89562a921f222edc4a5d4911393871e1b468f4e8ed768ff676f8","sha512":"980f621352a808efde300f48ade8a7de6bb4aa03add12495e8198b8f38720b61cfad510628ea3a1b8ab47c2a7759797d911154fc789dd08b7dc8d05489a3616f","ssdeep":"","tlshash":"c1f09ec9202549b18bcb130763860c4756dc5581d036848547f17f0ecb47eec025a459","first_seen":"2025-10-28T14:55:13.509457Z","last_seen":"2026-03-08T18:05:59.116045Z","times_seen":26,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":35,"dns":4,"connect":1,"send":0,"wait":184,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Uncensored","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Uncensored HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"b1-fbZGRBNiavG3ICHin3KVEpFoACk\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWu7cAJd%2FZ15O31mHRedfKcF4Xg%2F3FZDyClBu7p%2Bn6XvUL0FZe11nty3jMPuF7yAa9RFXunq7Cidh6cbkxbrk0ES00COcEMi31nTgZef\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 230377\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d7cc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":177,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5fa1c85f343bf4ee3abc0ff32c24e4eb","sha1":"7db6464413626af1b72021e29f72951291680029","sha256":"0068a784558ff7b8b549b71e34fb3e75937b97724a842a8e21b3b4cf04b856f0","sha512":"98ea44089cc77778fb529c429bafaf3b6a2647e3c85eebd45b8e138be008775c1a5993080a90ef715ff646124a3b981dabba9c2a2a5cfea2400092e4e94f4c66","ssdeep":"","tlshash":"6fc080c810440c713f4d53151d433d07955c4197512efc4963f91f1757c984cc44d44d","first_seen":"2026-01-07T09:29:35.707917Z","last_seen":"2026-02-14T08:25:35.122559Z","times_seen":8,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/css/main.css","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:55.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:56 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 01 Dec 2025 17:40:34 GMT\r\netag: W/\"1173-19adb007e50\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gg7aH5kQs0HBIfLrwQDnq7gN0xCvua%2FMvoioCw8RVPZ%2Fy9koQN%2BFPt4lBAMYxxe2T84FI9zRarh%2BPPs%2FgnoKi3cJC8cMDdsc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64eeddbd5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4467,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"143c5676237f14eaf6f6a183f556dfa9","sha1":"b70b305180d1ee99d6731138a01f8dc69eb5a790","sha256":"1ec85917586977941608410933af92865da527d795d3d42d653936200bab3765","sha512":"470cb506777cd87b95d586c8d5de099485da1f9d03ab0a9a654d8c581f576d9ecb824a80baf24dfe65346193c1db9da850175d1d418cb5a8840287e8b9a16bf6","ssdeep":"48:cL6TKTbzBSKTKw0Nz0tdPRias6WMffrRKA89CNTX5duSQSut1v9pKqMkfOSnnQzb:I6OTBZhPRia3LfUCvGDVp+km8k/roi4i","tlshash":"12917346840137417133e7281f72024be679a51f9b8732f9398d51694fbd8e4c5a2fee","first_seen":"2026-01-07T09:29:35.704409Z","last_seen":"2026-02-14T08:25:35.120444Z","times_seen":8,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Angel%20Sweet%20And%20Sky%20Angel%20-%20Sky%20Asian%20teen%20With%20Hairy%20Pussy%20Pounded%20A%20(18%2B)","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Angel%20Sweet%20And%20Sky%20Angel%20-%20Sky%20Asian%20teen%20With%20Hairy%20Pussy%20Pounded%20A%20(18%2B) HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1e1-yu/O6Oim93fRzcwpEX07aMfI8D4\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n37RYYV8W0hFCC4pqtQfvy7mkge%2Bm6i9VMA%2Fat2o72Jn2HBf7So7%2FIwLMYWJi1F%2BHA%2FcuzPu8MzJJTC0yQXVFBSOd7y78ClUsWJOBKF5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffa9c6c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":481,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"20b3e656de793d3fadef4043ceff668c","sha1":"caefcee8e8a6f777d1cdcc29117d3b68c7c8f03e","sha256":"70694626eb674a4f6f3f74089bc70aa2304113dc39ab23ecfa73b231ebc57acf","sha512":"7e93e8984e00f2002cea4e8d129f65a65930cd4306acc08132ef39e3c1b668bf6672a6d168e1ef7006881eb6046b09031dda24a2430619e78634d95a832a1272","ssdeep":"","tlshash":"5af027cf001a1eba3788c2575b53af56907fe9534428460842deacf96ae47ed8752411","first_seen":"2026-01-07T09:29:35.743337Z","last_seen":"2026-01-12T11:48:53.011507Z","times_seen":5,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T11:35:54.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 11:35:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nlocation: /verify/0aa9b8ff?t=1767870632673\u0026host=met072.sbs\u0026redirect=%2F\r\nvary: Accept, accept-encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QbscJPZAVIYCShakxUjFUOhz9S26KIYYenyiBo8cME2f9KfRDW1BbIIZysibzZmzFcDOoV6s75PtF5arom%2FQA4SE3F9ZNRWZ\"}]}\r\ncf-ray: 9bab64e57fdf0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5556,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":554,"timings":{"blocked":92,"dns":71,"connect":1,"send":0,"wait":370,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Yui%20Hatano","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Yui%20Hatano HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"d1-ioujgF/wRiOzxgO8WF3tsNX+8gE\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BuRD2BYaGcqmc7EFXVMl2WFldpBvxO4G9YlujUu9TpVZNfLH2RHA4e1w4dBn6%2BEZ6GW%2BE9S87sSJDPklQQDm0fJX%2FDM2jLBtcpjxZd3N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe3dabc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe5419d33dcd83f1d03a6f6f571871a7","sha1":"8a8ba3805ff04623b3c603bc585dedb0d5fef201","sha256":"92a15d6f1eb32fed72e293881475a43c8be514c4688fe57999968166d9ad9412","sha512":"1beb9496c5eef65330b87f8c2477eb3de2b6555b11f2e30ae5a244f486bf52db89b2b90c86bc345b38cde55d317c90b59b5502ef5f0d5df4ff5e647347e1fa1c","ssdeep":"","tlshash":"5ad023c410217c734f65435f65c21d4bd03cc153e035d40c3fec1e1b418440c4545c9d","first_seen":"2026-01-07T09:29:35.697804Z","last_seen":"2026-02-14T08:25:35.081177Z","times_seen":8,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Reiko%20Kobayakawa","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Reiko%20Kobayakawa HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"170-WjPuCZl7JUhVl8Bz+mdz4XgXMgw\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uVyVb7qkPIEj%2FVhF5C3R583%2BZ3%2BGdg9F1P3RajFlGEEfQe5RcMfhugS%2B9Esw7hEUlwAmnhfn%2Btl3yHM37U%2FtzUBGhbsReZmV18sgNZXd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe3db3c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4c4f51beca7bfd7fae86c2582bedaba8","sha1":"5a33ee09997b25485597c073fa6773e17817320c","sha256":"e83ffa8737fc89b0bf292d7f52a0a04f8853789126a29f30a7d8d65d4bef2d60","sha512":"4ed33060cce3da8a2a49e1d293948b890f5d39785259e476492b4af57fd7450432a78a894ebb39860821a0498428c5e9b34abdaac88326e484535c581c057d94","ssdeep":"","tlshash":"0ce068c218208df28f5c8ae97b925ed7e028c0061065084e4fec083241f992b07a7869","first_seen":"2026-01-07T09:29:35.675505Z","last_seen":"2026-02-14T08:25:34.98124Z","times_seen":8,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Female%20Teacher%20Semen%20Story","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Female%20Teacher%20Semen%20Story HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"144-8lSpJSFK/L0UMsJD6sodD7yuUC8\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DlLky5vht%2BIi2EhWwrn6%2BS7YVY2m6tgHC2dPNx1Ux%2F9L1IWvbVgwiyxHAv6JLBUdCQWYgw1bOwqWRfe6zckRGSj%2BOeY8RKusOb%2Bq5V%2Fi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffb9d6c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":324,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"06f6eea307132cfdbd7c4673a1533b84","sha1":"f254a925214afcbd1432c243eaca1d0fbcae502f","sha256":"84fe5d89d294ac860314ae1b541e59b3030907ffe5a032038989d116b82d89fd","sha512":"b0f2de14eddbd155b96400f7c8b0edef1fb9eb5f425dff65ef69e07a6251d98ae7042c6b3a8d8243863cfa124bde312a9bf13dfb189f3321436de123d3c992c8","ssdeep":"","tlshash":"58e07dc718000cb25f88165e6f532f4fd82cc24a15760c8d03e82d7643ba95a87cb415","first_seen":"2026-01-07T09:29:35.685826Z","last_seen":"2026-01-18T21:40:20.622546Z","times_seen":6,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Uncensored","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Uncensored HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"b1-fbZGRBNiavG3ICHin3KVEpFoACk\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQE%2FGGx%2Bs1wLyXL%2BS1BnOApxfeQEtz2ccSbe0ZLwlJM8NqDUoFkYHIwSiexB2RXDrDM7t1wn7kkWEyN5hEvxM0khYD4bk%2BlLYrcyEwZt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb2d09c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":177,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5fa1c85f343bf4ee3abc0ff32c24e4eb","sha1":"7db6464413626af1b72021e29f72951291680029","sha256":"0068a784558ff7b8b549b71e34fb3e75937b97724a842a8e21b3b4cf04b856f0","sha512":"98ea44089cc77778fb529c429bafaf3b6a2647e3c85eebd45b8e138be008775c1a5993080a90ef715ff646124a3b981dabba9c2a2a5cfea2400092e4e94f4c66","ssdeep":"","tlshash":"6fc080c810440c713f4d53151d433d07955c4197512efc4963f91f1757c984cc44d44d","first_seen":"2026-01-07T09:29:35.707917Z","last_seen":"2026-02-14T08:25:35.122559Z","times_seen":8,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":32,"dns":3,"connect":4,"send":0,"wait":176,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Ai%20Uehara","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Ai%20Uehara HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"153-pRMd/ySyPtnKrk4ISQIC8F5duR4\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YhvT%2B7f9vUs7TTVagDriupWcEKCGpKhkhRSoS%2BhgugItAY6VYz0mFTeLiM4wpi8mZzvu1Wxsp6X3YnTbYnecXsLro2JRadkvLrqHlOtn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d8ac272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":339,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b3a18a9541fa21df1cb110215c4b6bef","sha1":"a5131dff24b23ed9caae4e08490202f05e5db91e","sha256":"10dc654ca3a26b863482e73abbd1ca95b94fbef8a6868769194d770062c38471","sha512":"00c4ac49f2a8b722ab5c719304c2edd05ba2f24a005c520bf1ae12b4ce32b599fc5a65819ec39033d1cb49419619b9a72b0a2341a7d36ac365eaf3bfda8f7bfb","ssdeep":"","tlshash":"71e0204728549c736f5d4ad57f926e86d03c814604744c4ed3fc0d71426a56b0ba3416","first_seen":"2026-01-07T09:29:35.739039Z","last_seen":"2026-02-01T23:40:17.531484Z","times_seen":7,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Censored","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Censored HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"224-zaM8lISqHTdHVVw/hl4hBYrHfr8\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Q4X9u%2FpaqvSNtj0ZHEPBe6s6BXqmhzpdfjFXwoCG%2BxFcjyA1gd1ti%2BbC3rkjl8ZGZjEcOyay9lFZycv0VlLYX2wVJdapyaAU44sjPCU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d63c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":548,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b2946246fcbd5fc30910ca2e14ebfacb","sha1":"cda33c9484aa1d3747555c3f865e21058ac77ebf","sha256":"6c5fe3321091cbd98c492139ae065f97b743c01f6b687c65f3cedf14d469e69c","sha512":"e5bf2840dd258fa9b9569ef98d3dff6c45a0e2d9080c029d7c8bb47c225027226697ef3055e7baa96351e92506563a8c76b2446eab450e57bcd6d595a6e6d8cf","ssdeep":"","tlshash":"b4f0814324245d325f8d17553f931c87e4bc018b853698095ae47b294689dee0e87809","first_seen":"2026-01-07T09:29:35.710782Z","last_seen":"2026-02-14T08:25:35.100698Z","times_seen":8,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=MILF","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=MILF HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"9f-Ecab+2ckJPla1Z030vOiINYt37s\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1pZtCLPtocDvZEGlMSSoCgLz5%2BjzGwbJ1ZyL9Pf6sDo5vuKqbsZ%2FdKNQBw98KwsRQDob4EWNUiO9AzSj3nsE0ID1GvIMENqMeYaXoolF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d77c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":159,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"17ef2f59e50835f952f9c71abf098102","sha1":"11c69bfb672424f95ad59d37d2f3a220d62ddfbb","sha256":"c0a9d87bc4458ef06c9eb3f88b71c6913b2527287c6f72f98f1887a9bcbe4769","sha512":"934c8864c5a11d2f4d9978d46b42edc2349dafd38907b55da442ce9982e67d312b7a1540da74604287873d20e70320eef20d01c9f890e044e81a75b0b88eb6d7","ssdeep":"","tlshash":"4dc08cdb10080c712f4a832958923e0b94ac80b6802f6849a3f92e0687c9a0e808885a","first_seen":"2025-10-28T14:55:13.320344Z","last_seen":"2026-03-08T18:05:59.223088Z","times_seen":31,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Yumi%20Kazama","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Yumi%20Kazama HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"c7-5eoytCH33TZyY/cY4o6J5KDIrNc\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDYV6ZX4Ke%2BREsYWTfwBEW3AC04C3OO7GFJyC4rPddH5b4Z6k9KVjEAsDetEPESYM2%2BK6CCG0pLDoHnQcWPWrHHly1YyEdyzLNoQd5YW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe3dadc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ba4ba678ec9762cbc316658183d5555b","sha1":"e5ea32b421f7dd367263f718e28e89e4a0c8acd7","sha256":"8944519659025b99a70fe73b11541b7528d0acb3e66fbdeac5f3229c619393a5","sha512":"ca592933f6eb177a41b61a073348b59603ee556142e70aa5ea879ac2a2ccb49662fdec78926691119c6ae86b8776563d59ef96121a7b8107bbfa1ab038a73881","ssdeep":"","tlshash":"62d012c919c71db15b9883995fc12e47b06cc0d6e17a38895bfe9c0a56d982d4184d16","first_seen":"2026-01-07T09:29:35.67409Z","last_seen":"2026-02-14T08:25:35.125201Z","times_seen":8,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Nkhb-013%20Edit%20Part%201","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Nkhb-013%20Edit%20Part%201 HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"14a-k5YKX1ky9y9+YN54/22QAeTDnAc\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7RszwksTHlCzH7lOkSziHE8vdAicO4gAJLkRn21xc21G5JSOsxBhghVA34dSI%2Fnwavzo9cuscLODfdN5DVY6enaOhFFeEzGSk%2FoegIAW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffca0ac272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":330,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b2e6a0fb1c4bb4d5f29f2065b589ec77","sha1":"93960a5f5932f72f7e60de78ff6d9001e4c39c07","sha256":"b7e1b99a31b46ad37d7688771fd6b5a5b4ebe50103f61077a779629077ef851c","sha512":"7a519584eede6f2d07a8f4f6e47e45e5fac0b4c91115649a42877fb76775fa4c291dfc5bd220dc9ef299875292a25e436f0bc511fa61ceac1d16acc005f7f817","ssdeep":"","tlshash":"b3e02d8720082c728f4deb6e6b592d47c03c800712a3080f83ee0d20ca089178a338c2","first_seen":"2026-01-07T09:29:35.712962Z","last_seen":"2026-01-18T21:40:20.620692Z","times_seen":4,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Albums","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Albums HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"b6-mlGNr+YVe6ufCfscrb5EAl7q/XU\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQN%2FB8kEdGCkxMiSylGNgPVa2PeQBOifozYVP2%2Bm6EdjH1gcqdRaRjTUc3b53mMyNcQ9dzP5LrB0tW7tw9GrtnEV2M4wWoO8ybnfEB%2BI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb0c99c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"65279da52d2523598f79cf9df0aa81eb","sha1":"9a518dafe6157bab9f09fb1cadbe44025eeafd75","sha256":"31107994b7b091b14e9dd61ba1b990249c1fbb15c138e796472e12036272aeff","sha512":"ce7c331c02e95c219bce4bb3b63a81aef8993acc899ade575a0d0e33e1cce95e9f7f92c4fece16dec0a1a13806917e4f3ca4dc906dfd764dc418097cc1cae1ca","ssdeep":"","tlshash":"f5c080ce1c05adb35bdcf6b95a831d47e43c90918439984de7f91e534ac5a1d0648c1b","first_seen":"2026-01-07T09:29:35.705338Z","last_seen":"2026-02-14T08:25:35.073759Z","times_seen":8,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cache.sgvafs.top/resource/aHR0cHM6Ly94bnh4LmRnYXYxMS5jb20vanMvanEtc2xpZGVWZXJpZnkuanM=.js","fqdn":"cache.sgvafs.top","domain":"sgvafs.top","tld":"top"},"ip":{"addr":"104.26.0.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://met072.sbs/verify/0aa9b8ff?t=1767870632673\u0026host=met072.sbs\u0026redirect=%2F","date":"2026-01-08T11:35:55.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgvafs.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:11:08 GMT","end":"Sat, 04 Apr 2026 12:11:03 GMT"},"fingerprint":{"sha1":"C1:95:F4:80:A2:D4:51:B4:6E:D8:A2:6D:B5:A8:31:3A:CB:60:95:9C","sha256":"96:D2:75:B8:56:DC:9D:9C:1C:34:1D:A6:96:18:42:22:1F:59:87:E4:75:D7:C6:A2:65:F5:B5:4A:E8:FB:24:3A"}}},"request":{"raw":"GET /resource/aHR0cHM6Ly94bnh4LmRnYXYxMS5jb20vanMvanEtc2xpZGVWZXJpZnkuanM=.js HTTP/1.1\r\nHost: cache.sgvafs.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:55 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=60\r\netag: W/\"27c8-SXopyxq/ilISXKW7clFZgxZZg2g\"\r\nexpires: Mon, 13 Oct 2025 15:10:12 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nage: 6768886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWSv4Bn69QtZvXbj1abLJ3A3KjIx7oP5O0pKHnMBVBAPR3rIs6uEmX9swdZadfPko4Q%2FJFCeFgCnkRFh0Gsvozur%2FpDq%2BNEXRkYAJ%2Bg%3D\"}]}\r\ncf-ray: 9bab64eb6dd10afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10184,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2134)","md5":"4448d0ef59fcf5174d5c2592c07665db","sha1":"bb0bb7cbef8f9d8b44b9e12309d895567542718e","sha256":"c7c938f1097ebb4ebd688d907683428581db12c23e856f1d9f05bfe2edfc0238","sha512":"0b19d16cf5e49c2c3a53060f8e1206f1eff39407fd5a2cacec693e962a3bf84c5c60d7018cab015247dbad1901414fcd94eba162fed8bfcd7f6d3c98d62563aa","ssdeep":"192:CKPS5dNyHxk48GdcjvOqTduNTNd3ddcaTteAYPMGwI8QYcTL8YUTMo13gMyHYWVv:zPoIxk4xdci3vs7wI8QYcTL8YUTMKQL/","tlshash":"ab220f5a6aff2125d16bb4665e0f911a3a31404f244bde2c3cec91d0ef9487c16b2ef8","first_seen":"2025-06-02T15:45:03.145124Z","last_seen":"2026-04-04T14:17:41.841435Z","times_seen":1278,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"cache.sgvafs.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/js/tongji.js?1767872157860","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /js/tongji.js?1767872157860 HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1; country_code=cn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\netag: W/\"ff-Z7yCY/X42kGAoL8VtkmJV4znLhM\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6Svbj1XUkHRMLRnk8T1aH1%2BjTg3G%2Bic2aww2A9ZvnXGwRNgkgQNtkH0QUGXd7htgq0xipBe3tA2jJVvSdW3r4S9Aiq9oi0H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9bab64fabff25699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"a15f24b1e969c8bc58c57274df2fc3a9","sha1":"67bc8263f5f8da4180a0bf15b64989578ce72e13","sha256":"5dde320a8e6a63985c8e70109e9d4c409c9e76efc9b6ea104f9e6e6ff2a9ce29","sha512":"09081186e977108782847040f31c07accc8ea29cb53125dabf921152888663d68fa4c854821fe4be6cb580a0c253aec59f95f72558798aed0a0e13b0fb649a5a","ssdeep":"","tlshash":"bed0974f3cc008f9f3ab00a809afc24ab023502828cec10188ccc5da9d20de40aadacc","first_seen":"2025-10-01T10:31:27.761092Z","last_seen":"2026-04-03T17:43:35.49238Z","times_seen":992,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Jrze-009%20%E5%88%9D%E6%92%AE%E3%82%8A%E4%BA%94%E5%8D%81%E8%B7%AF%E5%A6%BB%E3%83%88%E3%82%99%E3%82%AD%E3%83%A5%E3%83%A1%E3%83%B3%E3%83%88%20%E9%9D%92%E5%B1%B1%E6%B7%B1%E9%9B%AA","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Jrze-009%20%E5%88%9D%E6%92%AE%E3%82%8A%E4%BA%94%E5%8D%81%E8%B7%AF%E5%A6%BB%E3%83%88%E3%82%99%E3%82%AD%E3%83%A5%E3%83%A1%E3%83%B3%E3%83%88%20%E9%9D%92%E5%B1%B1%E6%B7%B1%E9%9B%AA HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1f8-FRpnLVILCU3DYi21uDvIh8UuFQc\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZmOsr4S2MSAlPV9BKcXD1Wn7RnKodoKrVCKPMprEbPtL6PhchaFeak4xa8%2BJDeVUAwUHKnwHB2Bi9k27FSanQQOlmGpKYlCjwz3YCsmd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffba00c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":504,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2e10e37b23b4baea521264e462971f46","sha1":"151a672d520b094dc3622db5b83bc887c52e1507","sha256":"99e3d25a9eca69c59a52f27c46821ed65a114a446cbc24d5bb9791043e9c3213","sha512":"4fc194d24151fb3634ea1e058db0d65c7f925d7884a687755efcdf6ecc9733f1de794fc56c11a71c2a64d384455240027a666ba3f61c681589a0bcf525c854e1","ssdeep":"","tlshash":"64f0c9b9163e8ef23fd948af3b636d8bb034e2809529092700d54f2115538a20a5bf20","first_seen":"2026-01-07T09:29:35.713934Z","last_seen":"2026-02-01T23:40:17.545956Z","times_seen":5,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/js/translate.js","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:55.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /js/translate.js HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:56 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 01 Dec 2025 17:40:34 GMT\r\netag: W/\"1909-19adb007e50\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6AwTQGtHLnz4rOJtfgxeNvaALVsMDMyV%2F0ttIEtyQHeGFFk%2Fr%2F9tELQHcYfQlV2YzDnigWQNtJ3Yzepfy%2BBozI1JRt8pnKo2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64eeddc45699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6409,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"8516f204e7e896f116a69f661616e2da","sha1":"d084e960498a4017a0a3144c0043b75755e99602","sha256":"4f316355f206385bb9703fbf8af4b0326fd99a3d34d6138572971d9875567313","sha512":"35b569263a92453f5ee38dd3163a5a1baa1d36166baaae2c252f0f4534bba270f9990809bb5fc86b6ee22355c9a3447a234c676a8206cade388e446f20467ff6","ssdeep":"192:I5h95oRr5oRsIk/iVtli+swfli1QwJ6/2si:I5hDKNKhtlDswfl6J6/2si","tlshash":"65d174583025612a48b773bae7d3504dfd3d411b3052caa87e9d86441fb1e382be6edd","first_seen":"2026-01-07T09:29:35.694029Z","last_seen":"2026-02-14T08:25:35.027596Z","times_seen":8,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Brunette","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Brunette HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"af-MBS/ylzdNsNqdKMdL8i2cM1FCUA\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ST6BgH2j1n6snN81lNYD19%2BHiiiC0nVl0WrxKNzUFrq3tDTuQ7ox%2BlVhGAmZ8bFdyUU%2FFNxhy%2FOPkkha8LUg6%2FG12n3xyziQpk9goYSQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d6bc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"80e9b501cf6ba7dc2c9b97e539c5ede2","sha1":"3014bfca5cdd36c36a74a31d2fc8b670cd450940","sha256":"c0c77cc76b1763f98d7a427768d51868ca7e70482eedac7d89cfebe50ee60ce5","sha512":"c9a941abefd7d89b7b4e546745ff7bbb7e44aa2ceec5448fe30c1682f358a195522f1ca92143945c6ab6286f3113b9979bfffe7e45b01f1bb51965c22d5d886c","ssdeep":"","tlshash":"5ec080cc00d6ecf13749435618c25e0bd45c4291412b284d53f97d5787d5c1c404c847","first_seen":"2025-10-28T14:55:13.570898Z","last_seen":"2026-03-08T18:05:59.609121Z","times_seen":31,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/static/images/logo.svg?v3","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /static/images/logo.svg?v3 HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1; country_code=cn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncontent-encoding: gzip\r\netag: W/\"6ac-1kFHq731dxyIfiPjkkZXfADfW4I\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdD2qFs8c50ModGSPfV4pP2RsK1DPQI9Yn1PYQaa1Pnd39lWBEmz%2BzXyZct9xixzobySo%2FnyRRwlB6f1SJOuFg%2Btz7ElWnjB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64fa5fa15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1708,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b866edc45f250d51ba180be0d96c4051","sha1":"d64147abbdf5771c887e23e39246577c00df5b82","sha256":"2603991f195fd99302ed5bd30479667c3d025b45e637d3dc924f27400731318a","sha512":"9eae28e240b303d54553bd0ce29b271d5a7555f04df1251682d2d55ffd1f5199773fe57534a1acadca8424e8f5cb046b10c892b8b70fc625dc02786ba81ed4ae","ssdeep":"","tlshash":"2531d1a57b096b6c094bdaa88f7160a02b4ad1eaf7da11c181ce97385cd38d4f686d60","first_seen":"2023-05-17T14:44:18Z","last_seen":"2026-02-14T08:25:35.033058Z","times_seen":58,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Hairy","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Hairy HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"17f-SPAD48H6/ZEcmXDP1MM4lU7+F7M\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UEyMjdM0Me4HKBLc%2BxuvMmQe4jJ5Rxbjb0kV4MxrrzqfuY0mBZ32zVY6HOKaF4m%2FHvylXm%2BOgPFn7GE9sBsMKZC%2BGQVRxAzhlJQT4dzi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fe2d71c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"26ff06a9cfd76181901ecc7e6d6469be","sha1":"48f003e3c1fafd911c9970cfd4c338954efe17b3","sha256":"481ae9f20c729e937c2e258c0665a5da7cd1a5d0075676186aea392a5d0f7f8a","sha512":"5df92ef815ac6d0ccbc9c91ee54587d1b084ef0cafa320b077f5e0e89fcd9d477f9dead230b307b06397d072dfb3a4e118ce4ec0bce4ae5fba244afda172c3c1","ssdeep":"","tlshash":"15e06888156149b70b0a072e66930f16b0fcc3d3c33668082be53a1e9f9acdcc1c740d","first_seen":"2025-10-31T06:58:30.780834Z","last_seen":"2026-02-14T08:25:35.094932Z","times_seen":19,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Chinese%20teen%20Captured%20By%20Enemy%20(18%2B)","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:58.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Chinese%20teen%20Captured%20By%20Enemy%20(18%2B) HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"16c-sWh5mNwix/TfKMrei+SW3KcMmag\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMrWreIbJ00MmvRNs8ZzlPDlP5XYpe%2B9uhT4sJxbO6hlOAcD7X2ciqE6njwxH6OB2DP6uDpkJ0wr30vHHVlNp%2F51QAepI8Xi0mL5yvrQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64ffca11c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":364,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"46a6140c64684eefe893fdd7cee091fb","sha1":"b1687998dc22c7f4df28cade8be496dca70c99a8","sha256":"be67e997d5d6a95553fa69c3720ba3944c664dfdaa0fa511df0dd5c23fb35c5c","sha512":"01cac0f75b923cfdcffa560904179dc8a3e224bae130c8318bb9b6e4ae98f4f8011c54b675b957402573bfb44d17a80881b19205ae7a1fc73681bdc693bbe489","ssdeep":"","tlshash":"b9e0c0da01094cbb0feccaad2a073ecbe838c0cf20210c0a87f518b117c165b4386450","first_seen":"2026-01-08T07:26:42.523455Z","last_seen":"2026-01-08T11:36:30.496939Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"met072.sbs/static/assets/app.js","fqdn":"met072.sbs","domain":"met072.sbs","tld":"sbs"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:55.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"met072.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 17:13:04 GMT","end":"Sun, 05 Apr 2026 18:10:42 GMT"},"fingerprint":{"sha1":"44:80:74:0B:E7:DE:1F:F8:F9:47:7A:A7:01:01:48:9E:82:04:72:F2","sha256":"56:E2:B2:0A:18:F9:D1:7F:91:C5:E9:CC:25:B7:9B:04:BA:68:07:30:64:05:89:CC:CB:07:FC:E8:98:3A:F0:38"}}},"request":{"raw":"GET /static/assets/app.js HTTP/1.1\r\nHost: met072.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://met072.sbs/?t=20260108\r\nCookie: _slide_passed=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:56 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 01 Dec 2025 17:40:34 GMT\r\netag: W/\"60032-19adb007e50\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nx-is-spider: 0\r\nx-backend: http://user_backend_pool\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGVWSecwmHFJEMSWPN1SK92dvGvwDSIF94tfnbP4uJxjh2VeC48%2FS%2FS6eLKwZ2T3SK%2B7LWvtS2Q0jq8Ut5mcIZZxIxLtpPx3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bab64eeddc05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":393266,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (463), with CRLF line terminators","md5":"61140ff7294ad568b9e03b4a8f699edb","sha1":"be33fc2bedd96922a3b5a1de7ea18e6934cdf4ae","sha256":"46720924a329cd61928a24b50fcd9896400866f9a7e5c5e87e476c306a28136f","sha512":"4f5f4d210ee5a4b5a99f6a9cd6ebcf1d1a02fdfa6ceafac834d7e7b4bd95459d12319275539d4e068cb9182a3e435a76cd20e343b96fd4a2b1c5210fcfaa6c14","ssdeep":"12288:bxxmhsxWAPMTrvBdYUSwQgsiMkFBFGziwrtLqCVfErUoEolZb:1dpfUlZb","tlshash":"2484c61f9960447ac1f3e3759a674e0af626437f6240086b3dbc46481f7ec39e296fa4","first_seen":"2026-01-07T09:29:35.676312Z","last_seen":"2026-02-14T08:25:35.092022Z","times_seen":8,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":350,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fy.playergo.top/lang?lang=zh-cn\u0026text=Popular%20porn%20videos%20in%20China","fqdn":"fy.playergo.top","domain":"playergo.top","tld":"top"},"ip":{"addr":"172.67.70.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://met072.sbs/?t=20260108","date":"2026-01-08T11:35:57.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playergo.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 11:09:17 GMT","end":"Sat, 04 Apr 2026 12:09:10 GMT"},"fingerprint":{"sha1":"EE:F7:17:F0:43:35:4C:92:45:6C:04:EB:E1:A4:2B:66:18:4C:38:E4","sha256":"14:F1:50:92:10:0B:35:1E:9D:4A:F4:CA:A6:EE:F4:F1:B9:2F:41:0F:F6:0B:C9:B9:50:5E:4B:FD:2C:CB:E7:D4"}}},"request":{"raw":"GET /lang?lang=zh-cn\u0026text=Popular%20porn%20videos%20in%20China HTTP/1.1\r\nHost: fy.playergo.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://met072.sbs/\r\nOrigin: https://met072.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 11:35:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"14c-HMkkujvuVRcmn+Iov4AdblW+14M\"\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=reqFK4WhOuhArXY9qQwndQk%2BW3mepbEsPZddsjskYngn85QzOAoW3Ox8WzSWTTuVqeS6o8xK7NDlwEvsWQnGS2H38uZwf%2FkV54tORTyn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bab64fb0c68c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"73b9f808a0960c4892f3992bb5d8a3ba","sha1":"1cc924ba3bee5517269fe228bf801d6e55bed783","sha256":"056cb35bc7923f7ffc8d6a3c6f627d66f96f22fe6087b04bef3213f62baab4ac","sha512":"2a8c302ac3afd870fbf78bd2780b9cdf9ec331c0cbfe1016d29c1cd2077df4d701cd0332cd03c9d0605d28db833d409192f3ab3c6cd5611d2b4130ddea8bcd8f","ssdeep":"","tlshash":"b2e07dc764099db25f5d4bedbb922e8fe03c424904655c4d53f70df18b8153b475b528","first_seen":"2026-01-07T09:29:35.677179Z","last_seen":"2026-02-14T08:25:35.068452Z","times_seen":8,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fy.playergo.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
