{"report_id":"f11423aa-620b-4c37-bc76-85b444916433","version":0,"status":"done","tags":[],"date":"2026-07-12T18:54:38Z","url":{"schema":"https","addr":"gaodg.s.softbd.cn/","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"title":"Chrome浏览器","dom":{"size":15823,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (336)","md5":"4f6902040946f9fbe7db3634fb0ff847","sha1":"7afdf7064aa6bfb1ab6f71fd4aafb397050b9de8","sha256":"a78d622872b5fafb09f8f6df4eb2d956615993fea40f7fc0a65f00008841a4fa","sha512":"7b46484e2d26e11926a17bdd995f8f44efe5202dda4d490ee712b2a7c504c92fc269d016bedd397dfc1cc80fa2517031b11d55d469c18c07cfee1cb5c1602ecd","ssdeep":"384:G5/6EQVitZqd3rZAkVtcBSogx4xOAwtAVETVg6VKt4U+TsbX:gOsnA3rZPLg+TA","tlshash":"5b629455938d146da502d2c871a5afc414fecc339a174cffbe722239d6cd9a887e3229","dom_hash":"domhashbb8fa447db36b0535fb3a3eaa0f42fc7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T18:54:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"doogel.jingyety.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"s1.pstatp.com","ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"domain_registered":"2011-12-27","domain_rank":2838773,"first_seen":"2017-01-31T08:50:20Z","last_seen":"2026-07-08T10:18:13.55997Z","alert_count":0,"request_count":1,"received_data":94352,"sent_data":503,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gaodg.s.softbd.cn","ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-11-25","domain_rank":0,"first_seen":"2026-07-09T20:13:56.349422Z","last_seen":"2026-07-09T20:13:56.349422Z","alert_count":26,"request_count":13,"received_data":553685,"sent_data":7557,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"scrollreveal","description":"","website":"https://scrollrevealjs.org","common_platform_enumeration":"","icon":"scrollreveal.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]},{"fqdn":"doogel.jingyety.top","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-11-27","domain_rank":0,"first_seen":"2025-09-13T17:41:24.284539Z","last_seen":"2026-07-09T20:13:57.004123Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":1111,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"s1.pstatp.com/cdn/expire-1-M/jquery/1.10.2/jquery.min.js","fqdn":"s1.pstatp.com","domain":"pstatp.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93100,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-18T16:43:14.738164Z","times_seen":21687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13c76dd68688e2ba0c728dbc6d4a34f5","sha1":"bfd2d1677cc4e8167ed9275b538c379c70f2595b","sha256":"ed5c87865f94ed89fd867d484cf843bdbf576e225509c2878f0dbbddc5174c5a","sha512":"148f5f02449470b8b799b16517b1eff260b39312b2a50d90a68b93dcbff2d1fc7bc4ba6ebd706b4eb9ce11ea27ea23865e51c32d19a28202399ade5781f901f9","ssdeep":"","tlshash":"fbd0a99f9bac720aa83b2060362f30d8266a24a50862680aae1db4004c9823d0513869","size":219,"data":"","first_seen":"2026-07-12T18:54:47.948331Z","last_seen":"2026-07-12T18:54:47.948331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"s1.pstatp.com/cdn/expire-1-M/jquery/1.10.2/jquery.min.js","fqdn":"s1.pstatp.com","domain":"pstatp.com","tld":"com"},"ip":{"addr":"138.113.133.18","port":443,"asn":54994,"as":"ML-1432-54994","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.527Z","timestamp":1783882450527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pstatp.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A9:6A:E1:A7:75:8A:53:CB:21:EE:80:98:D4:AF:64:06:5E:E0:51:06","sha256":"A1:BC:E6:8F:15:E7:B3:45:C2:FA:F6:70:64:64:31:70:82:BA:4C:BB:B5:CD:B4:1C:F8:84:E2:72:4B:EC:9D:5B"}}},"request":{"raw":"GET /cdn/expire-1-M/jquery/1.10.2/jquery.min.js HTTP/1.1\r\nHost: s1.pstatp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 12 Jul 2026 18:54:10 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Fri, 17 Jul 2026 09:28:22 GMT\r\nLast-Modified: Wed, 26 Jan 2022 04:18:24 GMT\r\nETag: W/\"61f0cb90-16bac\"\r\nCache-Control: max-age=2592000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nx-tt-trace-host: 01f922bf928eeecd040d27946b2e6e90a9ce6f64927da64dc3b9bf3c52fc78712265d78706589caf0a4c443977eb9a1104ae0b838a5a5156854907b82cf5c84fc973aa06cfef8aa07bb8061425fcc36df6288a1296d12af48b59096f0a0f9ec2d7fb056cd54eedb3a89c76e36b08145e8d53d49fd2e09cc8663ea4e2e39a1e2a1cd4ae7c88573013915aa4dd0a0e0d9227\r\nx-tt-trace-id: 00-2406202020216EA6A1A9C7B8B67A2240-186C13777F6D5E40-00\r\nServer: TLB\r\nX-TT-LOGID: 202406202020216EA6A1A9C7B8B67A2240\r\nX-Cache-new: HIT\r\nx-upper-cache-status: hit\r\nX-Via: 1.1 PS-HFE-01fHH50:8 (Cdn Cache Server V2.0), 1.1 PSrbdbOSA2fk135:0 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1vj92:16 (Cdn Cache Server V2.0)\r\nx-response-cache: edge_hit\r\nage: 1\r\nserver-timing: cdn-cache;desc=hit,edge;dur=2\r\nx-tt-trace-tag: id=01;cdn-cache=hit;type=static\r\nx-ws-request-id: 6a53e2d2_PShlamstdAMS1vj92_19562-19373\r\nTiming-Allow-Origin: *\r\nx-tt-supplier-id: 0_2\r\nX-Response-Cinfo: 195.64.118.152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93100,"size_decoded":34074,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-18T16:43:14.738164Z","times_seen":21687,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":248,"connect":18,"send":0,"wait":20,"receive":16,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/static/picture/hero-anim-top-right-2x.png","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.538Z","timestamp":1783882450538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /static/picture/hero-anim-top-right-2x.png HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Jan 2025 14:24:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"677e8a81-2a0c\"\r\nexpires: Tue, 11 Aug 2026 18:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jz%2BXPd7VvNahyU%2FtFcDKvmrwdI4hAGZM94Jm4qlF1Q60JU62KnZxhgrdvAUlI8cICAyaYoioaigRNCdSRgJdYPfCCjxqHjg90Jea4%2Fa143HGTkZ3IIjVxiRUnXiUpkvxsPgFkw%3D%3D\"}]}\r\ncf-ray: a1a241441e84b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10764,"size_decoded":11214,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"ff2ad56b7aea84b38e7b9e1b3cc6c244","sha1":"badda4972c6eee9266bbfe3a726607c58cb758da","sha256":"c7170546bdd6548fc503c35672b4aada7ef35709bced03f56f239910ac24cf78","sha512":"60ec4b0ab95a60bd593e43da8f8d519180b5af85ff65b3d42b891d790e69be65a7493f769ea22131ed4e0147d6e21cac4efac447ff48f18bac1a81ed60b8f7fc","ssdeep":"192:ZKolctP+qbr1Iemn//I0jpzS9AGddoKn+l0Qig2HTq:uPbr1mnftzS9ANK+nig2HW","tlshash":"1f22c0e00652e9e06a14aa81836bc110cbe29f775ff9a9ba62b73dcf87746748d11050","first_seen":"2024-12-13T16:41:22.576883Z","last_seen":"2026-07-12T18:54:47.930062Z","times_seen":37,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/static/picture/20220125101253963.jpg","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.547Z","timestamp":1783882450547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /static/picture/20220125101253963.jpg HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 08 Jan 2025 14:24:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"677e8a87-1c38c\"\r\nexpires: Tue, 11 Aug 2026 18:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=arwf4IrBuFOrYyn7HetNmJKwzx0ZfmuuVjZCs9vnZLMPQvr8Bdq9Wdb6jbmIq7ncnFtk9%2Bk6hDwmmyzNl1QY2Gtf%2BUawomoOnMwgCCYy215r2yFduyoeEKD8enNhS%2BeQXGkJXQ%3D%3D\"}]}\r\ncf-ray: a1a241441e80b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115596,"size_decoded":109365,"mime_type":"image/jpeg","magic":"PNG image data, 1026 x 777, 8-bit/color RGBA, non-interlaced","md5":"adb00f46c91d91521fb8da0a9db97e47","sha1":"65632141db4fda2aff1344b5ef5e48ae125b81d8","sha256":"cb88d32de85b87043a684e7efc57a0594f71d6dc4eda60135d76f1b08567a4d4","sha512":"9953a5c911a8f06fcd7910f4454307474e37ff143ebf547e5bc5073992ae9416ee1e21b684dafb08a7d171fd2439af0b8061906355d17d027bf364c6ad9ef2a2","ssdeep":"3072:S3VVW7DLpXNZQnDPiSpIKnvv4k770/S78lCIdHnv:57DxNZpSbnn4S7d78x1v","tlshash":"15b3f1a195eed7a9ca1b3b71d7c07b373b27c54010ea0b7cea70d636da90c5c4980ad9","first_seen":"2025-05-17T06:36:34.437296Z","last_seen":"2026-07-12T18:54:47.932189Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":505,"receive":704,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/static/css/index.css","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.529Z","timestamp":1783882450529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /static/css/index.css HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jan 2025 14:25:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"677e8ac6-879\"\r\nexpires: Mon, 13 Jul 2026 06:54:10 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5jAx43Pn2zv1%2FuEH6Fr2OenfNOctvV9XAr%2BnBaoXw92DykmUzGoP04zBC39%2BNzOuaRAiqhaNqK%2FnTuGph7NhlHAK4hXcs2oGl19WKijgL783Ktjhkt%2FXwY8B9z6UcG%2BFBJIFQ%3D%3D\"}]}\r\ncf-ray: a1a241441e7cb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2169,"size_decoded":1650,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e67ecb180f692060b531489d9b0706f2","sha1":"cf2e7928169653b0751313628452bed961220c40","sha256":"1a9170ff690e6b11ecdd0813e75fc1526336773fe9756ac036bdff9002796cc7","sha512":"3d67863e152159c779226b4c4deb1f45b0a83bf9e3182d0f34ab93172f36aae8fd53973c4fb2a1fd8d8278c0cb2dd80b81912d936c451dbf47990e5716214807","ssdeep":"","tlshash":"d341152f77251c46e217a8a5be381f14970fc403ae0e9db7a5b9796cc3c609459a334d","first_seen":"2025-08-03T04:34:14.710201Z","last_seen":"2026-07-12T18:54:47.933323Z","times_seen":4,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":35,"dns":40,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/static/picture/hero-anim-bottom-left-2x.png","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.539Z","timestamp":1783882450539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /static/picture/hero-anim-bottom-left-2x.png HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Jan 2025 14:24:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"677e8a81-1c95\"\r\nexpires: Tue, 11 Aug 2026 18:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rts5zX0p1bPY768bpGAJW%2FKG7k1a4K2M1VKKwnRrkup2nEMwx8xlf4GEDKiIuQ2T7Jn0n6HG%2Fn7BNBjlzYU9xjHSZX7cQYG6ZDz6stgejf2xSQ%2FUMePH9f2xFM0lWtwDG%2Bq7Wg%3D%3D\"}]}\r\ncf-ray: a1a241441e7db509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7317,"size_decoded":7960,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit colormap, non-interlaced","md5":"f6c2509630496650c34e433b12897d05","sha1":"48dcb2949f77aeef37c7525216985a26286ab889","sha256":"daa2ad595c85214d7c9e0409e9b67b1ff2bfe7fb28ffe1286afda58e324828f0","sha512":"c41c6a72e96e8643b47f511358202d0941519bffc3ba752e944afc5594506230538d8efa8f4d029024401e7afac91cda30c6e2fd5c61b5a1e2f5032b11373ff9","ssdeep":"192:5/jMQ0tYcF14Vy6HPdMI5iCE0aX3lG1wXWxzncok:VMbF1hImI5i9cGqQok","tlshash":"30e1af7bd7ba884bb50e480945104e930c2d4eed77d5d230d1f78a99342743596fe159","first_seen":"2024-12-20T16:38:14.029162Z","last_seen":"2026-07-12T18:54:47.934347Z","times_seen":36,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/static/picture/20190706125618443.png","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.541Z","timestamp":1783882450541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /static/picture/20190706125618443.png HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Jan 2025 14:24:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"677e8a82-2656\"\r\nexpires: Tue, 11 Aug 2026 18:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WmIH%2BoHETksKdLqNOsNJP3X44FBETyeGeVT4QN7EJgBvw552fwbx4TorTrsoYTTZCt5kWUUbH62a5RzkowmGn%2Bha3gorbRdLY6bWzyg%2Fpuwj4CfAYRr%2Bl%2BDddscRpczvMv8p%2BA%3D%3D\"}]}\r\ncf-ray: a1a241441e7eb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9814,"size_decoded":10589,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"df7c0ad33f2564427e217246fc288781","sha1":"c9ec192a901a3875324b089df2f2e38e4f88bcdb","sha256":"ebe809e08aeb02f9c464c151cb6a87d14f52447d7a5bb864cd47a2a25e7e7f6b","sha512":"41d393f30df59963a87bed081e29196a2d93593817b9932101ebc1e92c41b32cd779a15d0d354abc29ce6fc7e6e4f8e166bd8be3450c835a19fcd08e01ccef14","ssdeep":"192:9SHIIHUCD4waORrGQnkKKha74wAzv1dnvHqFl7EwSDfjQ4taAzEo4b:850wBrGQndKhi4DdnWEP5ar","tlshash":"3c12d151cc7a530ccd1b02fd4a4f958a0fb6c68013b91f9cdd64c12baa2492e7e77249","first_seen":"2025-05-17T06:36:34.417725Z","last_seen":"2026-07-12T18:54:47.935494Z","times_seen":11,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"doogel.jingyety.top/static/image/bg.png","fqdn":"doogel.jingyety.top","domain":"jingyety.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.944Z","timestamp":1783882450944,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/image/bg.png HTTP/1.1\r\nHost: doogel.jingyety.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T17:18:38.641517Z","times_seen":17343882,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"doogel.jingyety.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/favicon.ico","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:11.611Z","timestamp":1783882451611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:12 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRN1ZbkTPnuiJLhvz0erISJzi8UPNsgNGfzIbBkUbfI9gAabdJKFy%2FewD9sZVIqfPvu8fJV1p4pfz5ucikouqVJ%2BM9t2ce4mUSJSO2IekRLV4YHNg%2B4YSeo5Yhqn%2Bjcf%2FiKdOQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2414a9ed0b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":681,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-07-18T17:17:54.536413Z","times_seen":312938,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T18:54:08.748Z","timestamp":1783882448748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 18:54:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Jul 2026 12:23:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031; Max-Age=864000; httponly; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVMv1muNOphwnEYoQ4mkY65OM2eEFlw7SHDw%2FJAe7dOah5Y%2BrzuzwW8ubH4B7nJ11q%2F2JXtOGBlDpTGRJ8tbFwDWB9gu3RCx350oDWi91owGKevOpc11i08PnFBCKBPJVK3JaQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a2413e4856b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"scrollreveal","description":"","website":"https://scrollrevealjs.org","common_platform_enumeration":"","icon":"scrollreveal.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":15737,"size_decoded":4953,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"d6409e7048d6b8db7d953586541b4359","sha1":"ac1fbb028ff9362b71b1d9a5bc4883fd7b9ad1ba","sha256":"a6e46dcefecb338699cae7f959d5e7d5aa390e29e48d1103ed7d6d5484d77be0","sha512":"e3ffc1759a1418e7abc405acec1d72c52555a716d4533f8265aa4e70bc8c55901e3b69fa34d39140b0a5e12c6e0a0d6774ffb9d724408979adf5d889998f7003","ssdeep":"384:05U6ESVitZqd3rzTeG3pBpJB+AwtdeyoLyt4U+TszM:lMsnA3rzKsG+T/","tlshash":"13629355538d146d9503d2c921a4afc415fecc339a274cffbe72223ad6cd9a887e3229","first_seen":"2026-07-12T18:54:47.938113Z","last_seen":"2026-07-12T18:54:47.938113Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1386,"timings":{"blocked":-1,"dns":881,"connect":1,"send":0,"wait":492,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/static/css/show1.css","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.531Z","timestamp":1783882450531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /static/css/show1.css HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jan 2025 14:25:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"677e8ac6-37ec\"\r\nexpires: Mon, 13 Jul 2026 06:54:10 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0Mrp5mlWYzFQ9yNkIp%2B6%2FZYDh72LCO7YY66zAsNSx5jY5oHxtNkR3vNpQkzuCeFCmMm37kVHoNwyI9xsxDDXsV28fdKoj%2FcULcAqy1vh6HLHtF%2BCKVZA6FyOY%2BCka6iK5JMAQ%3D%3D\"}]}\r\ncf-ray: a1a241441e82b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14316,"size_decoded":3765,"mime_type":"text/css","magic":"ASCII text","md5":"48ea7a121345e9b661c0477667d2d77a","sha1":"24f13d372950791b881ceae3182f9cb807dbc13c","sha256":"da9b1bcaf50f665ee2ef9de57fdd786480410de057082cd49b0112eaa30a91ce","sha512":"5199e1bd608074108023dc205f1544c3a1c54d645ec07c65509a89737df0bb33c5815547e1709652be82b4897bead659c0d6ca066ac8683c86f23c42a0fe4f8b","ssdeep":"192:+C7fTM7g9WQ7f781GxfEyhjtKFe1BnhG+19T:JfTM2U+n/1Bgi","tlshash":"bc52324e878d5a68951b1f4a7f5d51268a7c1c616fcb4fab22d05c1ccacc0f3a362f49","first_seen":"2024-12-20T16:38:14.036205Z","last_seen":"2026-07-12T18:54:47.940284Z","times_seen":29,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/static/picture/20220125100831712.png","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.543Z","timestamp":1783882450543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /static/picture/20220125100831712.png HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Jan 2025 14:24:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"677e8a85-1d2b\"\r\nexpires: Tue, 11 Aug 2026 18:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PumhzOgbFIsdecbthkbjEA7lNvJPbcNT%2BQH94OnQ7Gl1aRlx2GYhrh2Oge4B590j7cpPuDPWCNCrsvOz038XNJVBjuP5smO%2FMVkUhJD94X5b3Wc3zTMkRAe81yNHjx%2FDU0KXA%3D%3D\"}]}\r\ncf-ray: a1a241441e86b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7467,"size_decoded":8035,"mime_type":"image/png","magic":"PNG image data, 614 x 413, 8-bit colormap, non-interlaced","md5":"b28dca9112389f423fdd322a762f20d8","sha1":"d9bf8b381c954be3fb66bea92041acf8d56c8011","sha256":"ef310b7009f16b738c56f7c397a8e66448ea9cdd0ee628fbdf996e346b658676","sha512":"70bed5a32d70e4618732eb53792a76fce9d4f5708265dfdc203d11b324dc1b4b9a2ba44bf94fb831947b98fb592b8eea87243b88afbbfeae2a5cfd3aeeaf85fd","ssdeep":"192:n5/vYHclVBaAjjWAkkKKFpcqMt3ab3EvgpVNXIi:5Xv/B/yAkkPchtKY0VNXX","tlshash":"fcf1afd788a01a84a7fef968c764c9990a7d22520de77fb25f0b5f2a445029f78d01d2","first_seen":"2025-05-17T06:36:34.423655Z","last_seen":"2026-07-12T18:54:47.941831Z","times_seen":10,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/static/picture/main.png","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.549Z","timestamp":1783882450549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /static/picture/main.png HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Jan 2025 14:24:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"677e8a89-2ae69\"\r\nexpires: Tue, 11 Aug 2026 18:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGGmv6YxzTlFnSL%2Bdt5gide2DjxvCfe1tIGNeDZwtp5BtPWBaR%2FuVAbv%2FAkcSzp2CmsFr1nNtr6le0q4sfeYG%2B%2BIfQOFyvg4pa5vJga24R1PkYwyNuyYx3X7Nw5YSVWYSmyVzw%3D%3D\"}]}\r\ncf-ray: a1a241441e83b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175721,"size_decoded":171207,"mime_type":"image/png","magic":"PNG image data, 1141 x 693, 8-bit/color RGBA, non-interlaced","md5":"7960e897ce9a829f3f66b833385c9a37","sha1":"cc8fd3697f4d48975f229a2f34db5e612386f757","sha256":"a07edc9ba0bc20f15b8deef45cf8367d3b4ec469a84df50453522abfaa551ab9","sha512":"26bbdf02150fc5770573d06229f430d5170b0f30d6905945bba589dcf28fa86028cef07a1fcce803ea6c6c00512b4e98635bc00de9d048fb14eefba21c90318c","ssdeep":"3072:u9jU2Aa3wmiPbSi/QONHUfkdkuu7iUOdx51NH49PSNjk4bVZITaX:ucaAbMGKkdkuu7ihzNS6jk4bww","tlshash":"9c04014ae3b6d9147febc038d99f6f8b32650053519e185ee00a7c352805fbe9d2817e","first_seen":"2025-05-17T06:36:34.419023Z","last_seen":"2026-07-12T18:54:47.944166Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1317,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":538,"receive":758,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"doogel.jingyety.top/image/download_ico.png","fqdn":"doogel.jingyety.top","domain":"jingyety.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:11.100Z","timestamp":1783882451100,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /image/download_ico.png HTTP/1.1\r\nHost: doogel.jingyety.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T17:18:38.641517Z","times_seen":17343882,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"doogel.jingyety.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/static/picture/shuihua.png","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.536Z","timestamp":1783882450536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /static/picture/shuihua.png HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 16:51:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a21ad01-15b0\"\r\nexpires: Tue, 11 Aug 2026 18:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUHeNjxsUyIHVNHL6ZCePoCEgjgUtlGMpsy5d%2B82PKRzH9u16XWD9%2FY8%2FA0MApfWWdmlCcfhLO3ZlxcMqAMyYQR%2BvB0IVeGlzUQyUcsfcvMEruO421L46pysBCct1w3Z%2BsOCvg%3D%3D\"}]}\r\ncf-ray: a1a241441e85b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5552,"size_decoded":6059,"mime_type":"image/png","magic":"PNG image data, 137 x 47, 8-bit/color RGBA, non-interlaced","md5":"5eb2f29c2cb42cc5eabccb9723c434df","sha1":"d2d8be9790b8ef112f4f2a921bc47a35ba484600","sha256":"55527b4b66f6ef0e90cdad8b251aa21fb9dc08a234d373c37c8d7c5706e8a48e","sha512":"234a03faa981a04df1645233145e4d874f10806159e752162f2636189b731528ef73b21b1acfa843dbddc42ea8866933e0ca7383c77bcaa1f2ff8b3f3f5af39b","ssdeep":"96:oYz+bzfiiaW++EUJ4Svt+6CAKZBw3ORQY1Tqe6RR8qLZhQF/52sIwCspRJ2mFQfH:ZybHaW++E5608vmqfrzhQFwzwxTJ2Nkc","tlshash":"0cb17d2e5ec03801294c35cae5e7a0ae200656f249d5b26ae2b7981739303f91eb39c3","first_seen":"2025-03-07T04:03:11.403512Z","last_seen":"2026-07-12T20:57:52.158289Z","times_seen":8,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/static/picture/hero-anim-middle-2x.png","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.540Z","timestamp":1783882450540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /static/picture/hero-anim-middle-2x.png HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Jan 2025 14:24:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"677e8a82-696\"\r\nexpires: Tue, 11 Aug 2026 18:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1nEOFaQIEY05hMEG1zAT7PBrOUJS1IkltfDGVz9MFKffbDxdr8pJfusNsw8AYVGFmX%2Fh44NtKE9TKmZlOK4MzQtqsCi32W%2FN2zFfH1LoIz%2FbvoApLBuq5l4WnKjlmlDCSAf4w%3D%3D\"}]}\r\ncf-ray: a1a241441e81b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1686,"size_decoded":2397,"mime_type":"image/png","magic":"PNG image data, 240 x 238, 8-bit colormap, non-interlaced","md5":"7d0cc6448e5798f291a297a0116a1b5a","sha1":"eeef8d38dcbe776cfbf5bce1e342f335de4a281f","sha256":"e9697c82759ecd6348921d5e52df957168f6d1ddfbc09b992a5e4d9969412f30","sha512":"3fc1704758a06dd7d2a24aeb19caa19a3941fae115fe39246bb13853a6553c90602791724763486df879eefc951df74798e1b6e154ceb7e650e84fefd8e124e7","ssdeep":"","tlshash":"9e31d85d47534a9e504e4f384b99ccc10a9623fc5bfa4ca2c4e38a19699128cc1c0823","first_seen":"2024-08-29T18:00:16.958229Z","last_seen":"2026-07-12T18:54:47.946151Z","times_seen":35,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaodg.s.softbd.cn/static/picture/20190706125636598.gif","fqdn":"gaodg.s.softbd.cn","domain":"softbd.cn","tld":"cn"},"ip":{"addr":"104.21.60.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaodg.s.softbd.cn/","date":"2026-07-12T18:54:10.542Z","timestamp":1783882450542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaodg.s.softbd.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 11:13:34 GMT","end":"Fri, 02 Oct 2026 12:13:31 GMT"},"fingerprint":{"sha1":"EA:BB:AA:BE:D2:7D:DA:B7:B3:F7:74:23:1B:B2:6C:B3:A4:36:D6:9D","sha256":"B9:4E:41:DA:11:39:85:71:62:9B:2F:CE:0A:D3:0E:1A:F2:5D:5C:AE:D0:01:EB:F1:8E:A7:AD:CC:A4:38:F4:C6"}}},"request":{"raw":"GET /static/picture/20190706125636598.gif HTTP/1.1\r\nHost: gaodg.s.softbd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gaodg.s.softbd.cn/\r\nCookie: server_session_29639287=2ce4549299ca1aa49cba0f690c15b031\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 18:54:11 GMT\r\ncontent-type: image/gif\r\nlast-modified: Wed, 08 Jan 2025 14:24:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"677e8a85-2b702\"\r\nexpires: Tue, 11 Aug 2026 18:54:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FXtcGS7TfVmkRqRQKb5KBKtfdxcGx8wyNCiuGP7GWm94cbkIvYZJz%2BDCM7bepKhAIzZR43gqZ5ZhqTbT05Qv6A4D5WpZRKAyQQNbQOlXkeUdtEEoFpur6s81yt1iGlFyNHvpw%3D%3D\"}]}\r\ncf-ray: a1a241441e7fb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177922,"size_decoded":174854,"mime_type":"image/gif","magic":"GIF image data, version 89a, 640 x 386","md5":"10808acf5600720383fe2c0852327b4f","sha1":"1350ef87168fa62079424f02ff20a03e78df06e3","sha256":"bc0d6d6c6cf1e51295bc267f4fd1a2c0ea3610770281c09ce9e575a22f8f907b","sha512":"80d66b3240562a5aade93e00f9af2aed1cdd28044e6127787fa2b5727e49f4627c6d69c221ec37067dbb0144022d56e4fa3b2737c8f8b8130b431a8f54987b44","ssdeep":"3072:fKzzJmxSQmLk9CvFO2maYgefhrVb8WidzAiKCPufWVl9aEYZSxuG0ZUlrsy:QNmxS8fhB8Wid8CPqWVlI+xupZUlAy","tlshash":"4c0412fd8323cd8af44b99a7105b0ff8a9d8c0f649c38d56962c62d0b59925e2453efc","first_seen":"2025-05-17T06:36:34.426602Z","last_seen":"2026-07-12T18:54:47.947208Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1270,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":522,"receive":727,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"gaodg.s.softbd.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}