{"report_id":"00863515-4da0-484b-88e3-ed265ce51679","version":6,"status":"done","tags":[],"date":"2025-10-25T18:30:39Z","url":{"schema":"http","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"title":"XToon"},"submit":{"url":{"schema":"http","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-29T18:30:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"tj.oktoon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"tj.oktoon.top","ip":{"addr":"172.67.215.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-09","domain_rank":0,"first_seen":"2025-10-18T18:30:30.566606Z","last_seen":"2025-10-18T18:30:30.566606Z","alert_count":3,"request_count":3,"received_data":69488,"sent_data":1652,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-19T22:13:58.096008Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xtoon2.b-cdn.net","ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2025-10-18T18:30:30.571189Z","last_seen":"2025-10-18T18:30:30.571189Z","alert_count":0,"request_count":26,"received_data":1910820,"sent_data":12136,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"t1.xtoon2.com","ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-07","domain_rank":142728,"first_seen":"2025-09-14T04:18:23.297132Z","last_seen":"2025-10-18T18:30:31.283276Z","alert_count":0,"request_count":34,"received_data":2131259,"sent_data":18561,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/jquery.lazyload.min.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89c45121934ed4664ff3ca811a008226","sha1":"848216f1d67cc7c6c6214db1a771f8c4653f06d6","sha256":"e576f12e82c468567e420386b68476ff7045815976395bc6baad1a822c7368a7","sha512":"61a33e6453c52798cf127e93c3163344cea18bdcf31eea042653903b4653b1e5408942d7b3e09b33ac73c667d1b0161d1438cbaee8d517518352c7c88a9bcc3c","ssdeep":"","tlshash":"1861768d7f527839f0567a9e831f3106663ed46f81814c54b0c9ece4ecec7951236d9a","size":3381,"data":"","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-04-29T14:26:27.400409Z","times_seen":4849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/script.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"caad685143590b687a09c8c9bc00f9b5","sha1":"218af98132a3a2d1ed78be015968c47f0ae3b257","sha256":"5772df947d07180af5db769a28d1532a075e1dcb2644b05fa2cc342c905570c4","sha512":"0aa61bed81fe9445fb473054902bbbf1b156ba3b0d777d21fa30f57248e76f4343b6a61a0f62a0234a895e9cb524d21d4d1f06e7e461a6937b3671af493945fc","ssdeep":"","tlshash":"0721f02af0721555547f30e99b2fb1083430502fe1579eb4b88e97d04f6d8e8a313e99","size":1124,"data":"","first_seen":"2025-10-18T18:30:36.134996Z","last_seen":"2026-01-02T10:25:34.229534Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c79049f1d3a4dbcf49a5c2c353c284a","sha1":"6047b783b3aee75af642dfaf7ca886310a87afd9","sha256":"fed75d78a0a00afc413f9bd433a3f8311f41a63d85dbee3d2f3d7fdab3d8a1ba","sha512":"7bdf1d643b755a5e5c0fbff4eee72164a2a8bee5b5d5edd350498c4ed81cf08a1390cae875b54255a8db0a6a188ecdebf375564eae222435b7e4a1d171478f3a","ssdeep":"","tlshash":"43e061245cbd1ffd526190bb0ffe5c19737b38091850c1016d544414aeb37c28650148","size":375,"data":"","first_seen":"2025-10-18T18:30:36.182087Z","last_seen":"2025-10-25T18:30:48.641313Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/index.js?v=2","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9805613c31f316469210ee1447c341e4","sha1":"52c757141c7ad151af7b6227d431e420046471f7","sha256":"5db4ebb01de1ba6d5ac68cf94d3920ab30ace7f84560adf534240008802e62af","sha512":"c0ebc28b28815f206c03ff344b85a660647d0ed8c3ffed8409e673aaf44a502d7cea5f4bb822cb5f130aa9a56a5ed2dd6325d92eeb1cac7333e6c96643da6110","ssdeep":"384:jK89b57tJpTVyMkdXdatjyLt36hihgE3zRhNW1YabZZDfJ4YZbvxfOkWi1KYt:m8LRGdatjyLt36hiZ3zRhk17GaOkWw","tlshash":"e4531e0875e7641b587b34b98fbf61002b294007d64dde04be1e6bd09fd4528ba62bef","size":61978,"data":"","first_seen":"2025-10-18T18:30:35.965751Z","last_seen":"2026-01-02T10:25:34.247823Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b1a1ffc283aed523b1d006427670119","sha1":"d64f9023d0512ca858fda080a6ea4bddd3742a1e","sha256":"a1c826a641085bfb93444c634f49934353e5b3ed22fbbdcf9957d957d9a0fa74","sha512":"be5fbccd6160a0c08efaead7f994379c8692ffcba2a6074c39c15827080b038d43c82bb4b0e6030f4008773457df98774ff6662943c30956abb6ebca382e571e","ssdeep":"","tlshash":"e8b092eb7a68a21946b2c368ad1b4122d92795a156027882e4d87698828a111966a198","size":109,"data":"","first_seen":"2025-10-18T18:30:36.185592Z","last_seen":"2025-12-02T04:26:57.980739Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"83b91b1cafa1f9d06dad683285e45c0b","sha1":"1e3b549190ce7a1676ae22a0d27860f4d0bcb5d7","sha256":"1b2c17ae7a9017b0a47431996ede698ad3425c606ebdfed7a12e0f640565e036","sha512":"3465e9544866ee36b31e1186a93baa968ccf2a734cdcd2ff3c3eaf6ba4fc9137cf8f13ed120e397269618d8dde59570414a65629fa3770b376aceee19a585e49","ssdeep":"","tlshash":"d821877e56e30230469fb07a5baf83d8343010073907de4a3e2c42da5f71db655baac8","size":1233,"data":"","first_seen":"2025-10-18T18:30:36.18921Z","last_seen":"2026-01-02T10:25:34.259947Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"786b3000b88291a85ec98d3e55530ebc","sha1":"9f43a8940f3208750cf83ab32d8aa9da58e6be43","sha256":"4fb3694b95f508c15cfbaad039cae9a90d2584e15290c73fc11abaf0d2552a63","sha512":"33669170f569a138383eeabc405a09605609b4999953c89c07d21aaad0ed2ef6a0e07d96c48f10522a62078f546fc4f22fd0b8cf1765a5ca4cd0e6b94af8d756","ssdeep":"192:HyLYPG2z3KAiOqXYq9M0miR/OTCdnGNxVrErBOdJb2fhmBfr:HyLSG2z3KAUYq9goOTCm9aBYJLfr","tlshash":"be22e9c5f90db87e822934fa052fbbc70525ad652091ad5293e0a8ec7d18bdd512fe0b","size":10034,"data":"","first_seen":"2025-10-25T18:30:48.599217Z","last_seen":"2025-10-25T19:19:43.05483Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a86c5e1588e9dfe657ccc0ee52dc36d","sha1":"739f021697be83e8b847cbfacaba0d51372eae4b","sha256":"b6929be81d081855ed333427470f7d78526a45731b35c9a3fb30dfae28fd3653","sha512":"79b6c05b068f1f7571e45c56ed10befe5903a049c1a7557a96de00abccaf24c18ffc86c30e1024b633526187ab1c74ba9a32057de467632c0581491d09401f9f","ssdeep":"","tlshash":"85319c25b9670526103371e3c37a26602a66f12bb052ee10bd7d41c25fc1974b3e547c","size":1654,"data":"","first_seen":"2025-10-18T18:30:36.192653Z","last_seen":"2026-01-02T10:25:34.262045Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/packs/mccms/base.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42cc243729f3004e2b5f01ea907b1388","sha1":"2f379d3e3d5b3644fe9598db1d73f1e67caa1085","sha256":"d918dad9f5376e40f840e208dcad9d854496d6e51681cf9a55a539caf617ffdc","sha512":"c0b4a1d0a0191bdb99c63b1f0b210937f5783eaa8f34026652baa7da4734a70f4896e157e7c37672332c0b2745d244a32b9772e4644619ee98ee28b99c0f5f02","ssdeep":"1536:AYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a98u:b4J+OlfOhWppCW6G9a98HrcB","tlshash":"d093d5d9b2d670528ab734a841bf110bb13a989bb84c8c60f46cd5d47fb4a4e517bf2c","size":95920,"data":"","first_seen":"2025-10-18T18:30:36.113457Z","last_seen":"2026-01-02T10:25:34.246239Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2019d89c15dbcd233fb5969ba65913c1","sha1":"6243fab4046c5acd9ad008d5ff643266d72b4a40","sha256":"4c60f1eb5760e7004634fca9ae17651a823668b0b9b08773a8b681ee1e256088","sha512":"d61b3f870b77550dff3b1909bfd4d8b2fde160d075c74f6e2e57a547fc596a81eac9529c81445fd4903315065167bd53ea0168a29d53d21eaf2330552c0cda13","ssdeep":"","tlshash":"f0e0c250b1625ba0b477123be77fc8904e0c590b8065d240bdeec8c21f80190f35a9bf","size":367,"data":"","first_seen":"2025-10-18T18:30:36.196199Z","last_seen":"2026-01-02T10:25:34.264448Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c71ffc911ecace1a35e1a2be000818f","sha1":"5085ac460913806d8c964b05d12ce5bdda1daf6d","sha256":"8ab231fe41fc0344b159bc57ecd4eb3e7b9b9f7f725bde62becb9dfe21144055","sha512":"a0d0e1f311bd96aa77fb95e714b3a9e842b7fee6385d47f0a46a3cec15c3bc10c00a1dd51b744b8ee05152b8a8b7d86a5f48a55ffad6215a46f4051068afb671","ssdeep":"","tlshash":"e4e0c200b1625f80b4b7123feb7bc5800e1d588b8047c0c0f96e8c914f89288fa5b1bf","size":367,"data":"","first_seen":"2025-10-18T18:30:36.199378Z","last_seen":"2026-01-02T10:25:34.265719Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a6d9184f4a949a86e1aeddc1cd24ad5f","sha1":"6a08e39832f4903abda3ae1300f6a8ba561f76a5","sha256":"0819808c3a89f3ea73e51bcf2826b32681f88935a2ad9eb4fc3b064655bfa082","sha512":"b89e5eac0d2af311da10422cdee0bd3e93cd4dfa6c6a41d05b124445df49b6cc73a761e4775ba6cde5ab59a6e9528a57532550f57ea3b03a2f4be76ec63eeb4e","ssdeep":"","tlshash":"5cc08c6d249d45b2422626e2c817411ac71c4a988e6c528cc824ae1800c9028a91b034","size":147,"data":"","first_seen":"2025-10-25T18:30:48.632744Z","last_seen":"2025-10-25T18:30:48.632744Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/packs/layui/layui.all.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0832d3906d2d7a9688ed9c095dcc23d","sha1":"8766e46bdb1d6a9422bf5902988e712c2e2017e0","sha256":"251a9e596ef2859fb0e92e13b4c619e95a131a93b55e48974552d312c75d9514","sha512":"dfed71a34cafde1277722bc8e6519267f3556b08103cb58576cddc80a1be4e62adec9010f4a4f58c14e384aedee1bc5b2d81eab4dc64994a6a0ac11c0c9d199f","ssdeep":"6144:2+lP9ufSF0Mz036TfMf5oQdQzsGywLNEW3sEg:J8wM2QdQzsGJ+","tlshash":"2744499c758574b3237360a6406f990eb1bb097daa0e8020f166d4f66cbdc485277faf","size":278470,"data":"","first_seen":"2023-03-07T12:56:25Z","last_seen":"2026-04-29T06:13:23.096051Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/jquery.SuperSlide.2.1.3.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84bb734b770c679ec43430735d9bc48d","sha1":"b018557189de970f733701cc6d37c8c8144cb433","sha256":"0130a150a6587dbbd32e764d263be37abd71a2153687eb4e535fdc174313e50a","sha512":"8e4e6f80a4112492d793b24feac563540370aeb81ef086b3abe30f8131eb5a7bf6d42a443228f249c896b589208aa800f1c9561ab466c8fc441bb4177363562e","ssdeep":"192:BaDKvAoHPHsgGuuauF56tpE9Er5MYB5c3TXP3ZO/mpUhClGS5OHxImISLTNSfYXA:Ba+vAUsgGuvlMYXcjfRUCESKREcS3KuD","tlshash":"9b32a65fb66275ce56a7b3f0107f940c232655a5fc8a8c60b1748380ad79a1c212bfad","size":11730,"data":"","first_seen":"2023-04-18T15:29:17Z","last_seen":"2026-04-28T10:13:43.424906Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/bootstrap.bundle.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40b9ce10d607dd7e8e85d5b4cd3d6165","sha1":"eece9dec39e70547d68eabe06fc8f1e196783930","sha256":"f5423981d2058bdbe23b755278c03efca225c5584f6e1a68c8ead806e4d268be","sha512":"8d394e5ba35a37896e17af16311636a0f87502c117b0af207b8ed3e0e5ff02eebfe86f76981723a8452d737a3217c4fdb78e3c5e56d8b02422f8ef5ca70466af","ssdeep":"3072:yQVwrYaWTHbdHYB8U40kU+MKeT8PmB+YM:ZnaWTt9U+MH8PmB+YM","tlshash":"3b1470093dfb2062492be57e8b6f414af2318047250ae9447d9c479c1fa9d3492ffbe9","size":207793,"data":"","first_seen":"2025-04-12T02:58:00.503927Z","last_seen":"2026-01-02T10:25:34.249799Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33af17ac18d6d3fde2a3ce8b654a5a53","sha1":"1eb14f28092fd1bb999466ebc01b74c20f6960ec","sha256":"45b4f56fa31b44b7bb3f4154eea99f67bd5116c1379b4b186460c4b04b353bed","sha512":"b72b87d454c2a5e0e4dd9e46767e8d5b9fa9c125366bd17376ad4ec53751f584bf11aa7373bcf2d3edb673290c3a18b758a0a1d039cff8f5c4de1e60521b99a1","ssdeep":"","tlshash":"3c316e18a4e109610bbf21ab2f9ea144352444079347ca72394dabd85fa0d3ae274fdb","size":1456,"data":"","first_seen":"2025-10-18T18:30:36.202499Z","last_seen":"2026-01-02T10:25:34.267054Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-29T15:31:43.206793Z","times_seen":334205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a474d1927d82d7f175f27d9f199494d4","sha1":"48d04bdd88209401ec11a995cab4bb42cf3f00a0","sha256":"b16cfa7dcec59d1ed2e4b9ee4874ae0a3addb7360ab947b956ccc960fb73d0ec","sha512":"fa23e012a50f3da093b3f0cb90b4459afe709242f4c0a148c911a7e589ed4b2a33977b7a32e8f782e1f2e96ae2a04722c080ac6d1e60c091f481554fe9bc9977","ssdeep":"","tlshash":"abb01276701c4d6f11291d15f10a2361c22c8ac2dd787359cc040278010a428102e100","size":91,"data":"","first_seen":"2025-10-25T18:30:48.603853Z","last_seen":"2025-10-25T18:30:48.603853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/jquery.min.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89475,"data":"","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-04-29T14:59:21.149031Z","times_seen":15296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c35d3ebdefbe06de86a2cccb1d07c31","sha1":"beb759b761de356fa605fe9ec61ddb284f9fea17","sha256":"0ed43318fefca9a8d5fb4528bdbe1102700b86a6dd8723d155e9454f588ac2aa","sha512":"6d9df74a4bca26004dc61446f475dd1ece74dae611d87bbd7e7983995f5d6ef0d81f5fcf64eac355499cec7ccf8088b6e4ab8b23472f0832b899b2c858e15c6c","ssdeep":"","tlshash":"4811c0b53a2a5534cac9418b317ef7a93e7260617b02a084c26ccc295d58e9714efcbe","size":902,"data":"","first_seen":"2025-10-25T18:30:48.64867Z","last_seen":"2025-10-25T18:30:48.64867Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"72b4dbc8dd6cdaae76c89b8e757ddadf","sha1":"aa4145e48557eaf988a88e80472cb02a68de1560","sha256":"676ea09adb0417564d9399cedb8df34814ab41058aed7592d0f52f4db83b6c9e","sha512":"9104c679138099ea019ea0af051624c874b75bca517ff5fd1a90d115b87ae7ca2dd44040ea9dbdbdf13000f747be1eb9738f5876a866855c6296e88ec4ed756d","ssdeep":"","tlshash":"7dd0a7961875853466dd014a1177f39566a121907711a14481c9cc1b6a11d9308a195c","size":217,"data":"","first_seen":"2025-10-25T18:30:48.650609Z","last_seen":"2025-10-25T18:30:48.650609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tj.oktoon.top/matomo.js","fqdn":"tj.oktoon.top","domain":"oktoon.top","tld":"top"},"ip":{"addr":"172.67.215.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97b41888a87c22615114d73c91cc70a3","sha1":"a9e02fdb328a29bd8753e7000d0afe6ef635aad1","sha256":"f2e8975ed834c578c50d3923ceb26de04d4fa44f74380f45f147585d909a874d","sha512":"0023e6fd1e095cb37ffd94393f583f9a1ad1fe18a03b72bd035d431401038b48cc9689e2bbf4b0bbee5b6082e77db6e2bdd55b4d5ffb1c45f86e0f330789c10f","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEy+XzsyWbuds06Vdda8EbdAAOV4ITzvBCQaFLa:AT+Z2fuULzsyWbbVdda8EbdAA0XvBv5","tlshash":"0263d5ca72c275398bca6074603f1187b17aada7144cc4a4f56ac4fa3c3891e957bf78","size":67460,"data":"","first_seen":"2024-05-09T17:51:40Z","last_seen":"2026-04-29T12:40:43.313875Z","times_seen":4708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/d79489a00b815daf6fb2e84aac223a6791efeb4c.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/d79489a00b815daf6fb2e84aac223a6791efeb4c.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52157\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 05:44:56 GMT\r\ncdn-storageserver: SG-631\r\ncdn-fileserver: 345\r\ncdn-proxyver: 1.23\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 04/15/2025 17:08:10\r\ncdn-edgestorageid: 860\r\ncdn-requestid: 67fd6a33c0d43b0ca652c620f4d840a6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":52157,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 480x623, components 3","md5":"6afe5089dd3dbbb1465f7cf0892d0a6c","sha1":"497f44d2d92420b6d883c6bf1a973dfa2b200404","sha256":"2ecfd0d4ff73da14e85729fa90266b00d5ffc22479b3ea1380d3793568da08fc","sha512":"b37711ae70f9927c8aa02f80cfd280ad4011b9b25fb96b1d74e0bd772e37bf9284c9da192427c9dcf21697b97f883a5208be4db00b37932823da29fdff1bf9de","ssdeep":"1536:xjgCyLJRo4j8N3L3EtWhN0Oq3vK7m547/EGy:+YK8N73sWh+Oq3vKHcGy","tlshash":"6a33024f854e74b0e84119e03269bdd994bb950f54d7f886a0398edf3cb70d61f3842a","first_seen":"2023-11-24T02:54:03Z","last_seen":"2026-01-02T10:25:34.221487Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/css/bootstrap.min.css","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/css/bootstrap.min.css HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Sep 2024 08:04:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FGZ0A3mRUM7SYvP%2BnBfgpbiEH6nr5kb%2BM9DB3cCNoWmXB0%2B%2FTiupPi9BagzmsSKIFCpWX%2BpMUn52PfFA%2BDHZf0PXFGzBqVV1mZCSW1o%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"66e5439c-38890\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c4e9855a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231568,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65335)","md5":"56397cf675ab440e616618c3a7de3df6","sha1":"53d9364398ff7cfb39c9a360c34ae6c3f4e7b863","sha256":"4b969a9933a4006f8042ff28acf7694903b586c48d3b22c8abe33f09d3588787","sha512":"1e1c63515448de0cbeb2d3572b212752e6848a0632b94b1876fefc8197b963f034697d827e74b9a3c7f6049cecc2036a90596bcdd0f9da9e4b45c4554f90214b","ssdeep":"1536:0A/tfP98ftdx7vO5wlP7979A3imnOHFsYdElV1VOpz600I4V9:BtfP98finOHrI1VOpz600I4V9","tlshash":"0d3482d6f590317d9ca7c1499681fefd866fa985cb120aa6f003772847cabd30962dcc","first_seen":"2025-10-18T18:30:36.067556Z","last_seen":"2026-01-02T10:25:34.156884Z","times_seen":7,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default//images/logo.svg","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default//images/logo.svg HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 14 Sep 2024 08:04:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8kptptWvcYoqTrd2KKg%2BkwUbgNXLHVTA1APTzcotDxvNFgsCJCS%2BYTMLRaBBdp6xUhdEGA5DvH0vw0hO%2B22RDBZ8T4n%2FotNoNGFkbQs%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"66e5439c-170d\"\r\ncontent-encoding: gzip\r\nage: 6273\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 9943c8c509945a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5901,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73871525e26803f10561cdaf25776636","sha1":"808ea7ee2c3768562ff078d4abb8da4c1b4fb280","sha256":"8ca39d8cb71d90f75841546a875a2a1748d67fc797c5ec860cfe7677ca290482","sha512":"6be0bf3951323eba713ccf4af8b8af97af906abee3b560292ce0df30559f5419227bd9c7f3287331a468ddbc3ef5a642d37d7932344cd1ae08dbe4478e19fc16","ssdeep":"96:Wv34ipv4vnUKvnu+r8vnuAcNwSScabbOCnC3QLDCPsynyvKPcvU1ISTpECXnyvK0:WJp2nUYnLqnWa/wRPsfsroiLdzPj5Ozf","tlshash":"94c1d0bb0320cabe91cc7b486fd1b58d3778e29af9a501c0eb531a569c091fb613dc65","first_seen":"2025-10-18T18:30:36.178442Z","last_seen":"2026-01-02T10:25:34.202376Z","times_seen":7,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/9cfad0b38b4f117591f25213cf5ae465b1f4aed9.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/9cfad0b38b4f117591f25213cf5ae465b1f4aed9.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18417\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 23 Sep 2024 22:52:39 GMT\r\ncdn-storageserver: SG-702\r\ncdn-fileserver: 827\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/01/2025 15:58:07\r\ncdn-edgestorageid: 1079\r\ncdn-requestid: 1dc0665eb8037d91a84aae210b2889fc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18417,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x420, components 3","md5":"f1a62d3e1eff9ad3903e62fc676eebd1","sha1":"2e3d84f84de96cfb4d1235fdb00a1aa87bf02695","sha256":"1d5f82ae52306bf79b1ab2f3761a4f94ac1b2156e6316fd8a3cf8732db0ce11f","sha512":"9cd4fcbcebf2739d8687e29b8ace5cbb207b730555e2ca9b5ec407bc1e395670c1c46f48f07efe03a9348afae9cd476dec1821bebd320f7e1a2c70a2cc9ac73b","ssdeep":"384:2Mw1TNjDbtNtAebMQGVJUvGQhTUkp627JxMo6HFoSBj5SP0olzlpaXNK9:2nhTAeIQGVJEGQhTpFdD6z15SfzlONU","tlshash":"8182d05fe02685591fa3890b8173114465940583afcbafb0eff9868b9230fb5dd13aec","first_seen":"2025-10-18T18:30:36.045266Z","last_seen":"2025-10-25T18:30:48.55331Z","times_seen":3,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/0d6bcbe975507d4e72ea45fb9a76ef26d51b0dba.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/0d6bcbe975507d4e72ea45fb9a76ef26d51b0dba.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30451\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 05:29:49 GMT\r\ncdn-storageserver: SG-712\r\ncdn-fileserver: 864\r\ncdn-proxyver: 1.32\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 07/18/2025 21:35:38\r\ncdn-edgestorageid: 1053\r\ncdn-requestid: d7a39ad134143ba0c7d4466988012c3d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":30451,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x420, components 3","md5":"f91c2e58030c9284e8e4533e4289d949","sha1":"e87ca77ba49a2bdaa270a75f045d4b1d44dfe17d","sha256":"7327aca1b28fa6211cba688162ac4d084cd625ab09643b5297abff427398ca55","sha512":"5bb8bba7647cfc21c70eee5ac913b6ae05504d41c102eb13a79b1b81468df5d11734939c470e6471aee86ae50cfb20f83de9f07f779f35b8588e2e6e9215b1b7","ssdeep":"768:2DmnwiFBUPZvXadBlwvOGgivp+z5YlxNa27FrWDPFo6KdA:2DmnwgtdBlwG6+z5Qa218/Ki","tlshash":"ffd2f2d3e3b5d8afbb660770e94989bba0c711819c5cd4f6493d69a1cf32c3581085de","first_seen":"2025-10-18T18:30:36.156367Z","last_seen":"2026-01-02T10:25:34.152384Z","times_seen":3,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/images/foot_logo.svg","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/images/foot_logo.svg HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 14 Sep 2024 08:04:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbcfO7yDLqlukhXrluwahqQKpRSsDcw7iL0BXrfDqZH4zmasysF6s8BWHmsVuW%2B%2BmJBjvH7%2BnOFixWgW7TDw3xwGRaMQsYqtDtjxKKs%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"66e5439c-1710\"\r\ncontent-encoding: gzip\r\nage: 6273\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 9943c8c509995a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5904,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1da026b4dbc5627a7f6d38be93e1ed0a","sha1":"c697c96cc73fea4239de3dc680409617e154e533","sha256":"bfb2022b513c14182d233492c8e5cb922ec0fb844d51c6143584c6baae0b8f94","sha512":"0937fbf6b7f6d4409503d3134b28542964d4c9b19fd1611f95851908767e85cc8c3e0048ea4c2b4d7056587643a83185f32d56440bcfd4dd71c3909f8158b0ca","ssdeep":"96:Wv34ipv4vnUKvnu+r8vnuAcNwSScabbOCnC3QLDCPsynyvKPcvU1ISTpECXnyvKM:WJp2nUYnLqnWa/wRPsfsroiLdzPj5OzB","tlshash":"5bc1d1bb0320cabe91cc7b486fd1b58d3778e29af9a501c0eb531a569c091fb613dc65","first_seen":"2025-10-18T18:30:36.080547Z","last_seen":"2026-01-02T10:25:34.195688Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/collaboration/telegram_pc.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /collaboration/telegram_pc.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8383\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 25 Sep 2025 06:10:09 GMT\r\ncdn-storageserver: SG-685\r\ncdn-fileserver: 1172\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 09/25/2025 06:20:06\r\ncdn-edgestorageid: 1049\r\ncdn-requestid: d78ecea5e2a0d682bdbdfa311af2e799\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8383,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1627x212, components 3","md5":"530c046c43d300752f00f67b0c2f89bf","sha1":"da6ac8f3bb77e8050569b4ba39df970e859281ac","sha256":"d2bf59a69fb2b8e9c3b74372677adda530b1f586532087d4e296d0d58b1a30b7","sha512":"8dcfd3dcabb558ecae758d22f70911251b26c6ca849f4eb33d49a54a8196ce48c0b173470acd6fb453ca37537e4f2597b7ec8b700cf811389f92f4f4d87447c7","ssdeep":"192:9jJpmdL2XVxNK6YFdaQO3Ejrb1S9WxVRp:9dMJOo3FcQmEZS9Wf","tlshash":"53025b657b300b48f758cb7e06925901731a2d70a46bfa4e0a0281908b7ffd026aeec3","first_seen":"2025-10-18T18:30:35.969896Z","last_seen":"2025-10-25T18:30:48.559873Z","times_seen":3,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":85,"dns":18,"connect":22,"send":0,"wait":28,"receive":3,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/packs/layui/css/modules/laydate/default/laydate.css?v=5.0.9","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /packs/layui/css/modules/laydate/default/laydate.css?v=5.0.9 HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 18 Jan 2020 07:53:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJJyn7qSFyau3ZjFbiVvn6IxGFeRBUS%2Btp15up3yM22oDHzMDGg9PFn%2BcYJHT0u83Sgcrq7WugwVPrsAri4YEZJIF0i%2BiqmMtcXRUsU%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"5e22b970-1d71\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c5d9c65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7537,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7480)","md5":"2d752e6969f2cb270bff641baebd8496","sha1":"6b012361104f67bac13389a53a3f4393c0e19a77","sha256":"26437b94d0f04ca9799425e7db20bb14e17cc9f777fa64b92ad05f87e2fddc21","sha512":"9145fb56618038a2ce33298af2c4f46cb378362888f580bfd588454702aed927d75e74ebbaa333e55edf634d172198ef6c56e4e7b5d084930b6a92477b6a99b5","ssdeep":"96:WOyYW44i4ijYTq472w7hlVYQ4K/Lk5bYsBE2rBOB:WO92fy0qK2wFYD9brBE2rBA","tlshash":"d1f1cb7161902cd4702fc326b4ac7cbaaef8dc02dae3165ce5b8621785c25b7a57d34b","first_seen":"2023-05-04T11:51:17Z","last_seen":"2026-04-29T06:13:23.072419Z","times_seen":217,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/f28190a8f53bbba5c73e46d8fb2e666f815c22b4.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/f28190a8f53bbba5c73e46d8fb2e666f815c22b4.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77148\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 23 Sep 2024 05:39:49 GMT\r\ncdn-storageserver: SG-712\r\ncdn-fileserver: 783\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 07/30/2025 22:14:55\r\ncdn-edgestorageid: 1055\r\ncdn-requestid: b01465046ea61ebd08acfdc8b10db506\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":77148,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 315x415, components 3","md5":"f90e7d53f68be177c57a9741e0b54071","sha1":"0d66cfbc00de4d96d03b2eb495cf3d4951065af1","sha256":"b52b5f9441873570ca0362e1245ca5fb0d6864f7fffc1882f72e8bcc6c620811","sha512":"67320106f9701bd6a4fef5e8f6a48d1b64c6a14b72588da9bdaf6a6c4ccab913bb6350ffd048af5c7ed4ed63ef553751728eb17de538738284ac5b4d26a3ad32","ssdeep":"1536:43uL6AhTVijvTcy9eggvLn5u8MmLxIlGu1oLcOSTtkyfl6MDTgH9G31TY:4eL6QT0rArggT0nI8ovSTtkyf6Hu1M","tlshash":"1773026551018becd5f097303b35b76338c5392202a94a572aacf2be76a65e3334e19e","first_seen":"2025-10-25T18:30:48.562055Z","last_seen":"2025-12-02T04:26:57.944799Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/webfonts/fa-brands-400.woff2","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/template/pc/default/css/all.min.css\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 118072\r\nlast-modified: Sat, 14 Sep 2024 08:04:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHFgRMnJOGsgBbCJAbL623eAX2kGgRFKl%2B4S7K%2BxeUPiWaISa%2BaDT19VpZdIJ58F6zXEFteWhdsEd5FpZfbTqLt1jNrE2taU8YAwRME%3D\"}]}\r\netag: \"66e5439c-1cd38\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9943c8c699ef5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118072,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118072, version 774.256","md5":"715d593456fa02fe72a008a72398f5be","sha1":"e948290773216dc1b50c2121314a8cf918c22b54","sha256":"c411f11975d26eb04cd2aa3c071181d4b18e489f1fb97060d4176a3531dfb36e","sha512":"1f63209c93a462c2690442c9cf1c3e5a67f2df7a67dfcda2cb81292a2dbb90641aa0ab81c25323a1f2d9f0fa09b3421d136ae5228c47e581c51912ba284de46e","ssdeep":"3072:3wqMZaMDlYfb+t0YI4WlLL7rE2ZjX+B+pdJpimtm:gpZNYfytUxH7rnZj+Szpiz","tlshash":"71b3137922e526408e9d0e3bbf7b6a6ec7f8719ddbd4c10aa7d18469001738ed8d842c","first_seen":"2024-07-20T13:53:50Z","last_seen":"2026-04-29T15:42:12.084746Z","times_seen":8204,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/18ff2739854d73112904939fe551e89437f3121f.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/18ff2739854d73112904939fe551e89437f3121f.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23434\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 04:50:00 GMT\r\ncdn-storageserver: SG-711\r\ncdn-fileserver: 867\r\ncdn-proxyver: 1.28\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 05/31/2025 01:18:33\r\ncdn-edgestorageid: 723\r\ncdn-requestid: 01204c6aa6d024aa62353d61d5cc6c6c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23434,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x420, components 3","md5":"3fe3bb6892f6a5bbc9e44142e4b4a343","sha1":"a62436f2db2f045727711e9424bb90e7b6fe5b89","sha256":"1b996a02166d7cb747100e66b6f71123d1139a11ff6930aac5182ab1d8f03d46","sha512":"fbd24d837c06611f641c2a20a5568aa23dc02066973137d19e93827db4fd97a4a691c94bb8345b23a705ee711d638537b1661a6803e998f2a484b10dd01dbfd6","ssdeep":"384:2Q09GhXdbycaZUKl0vzNUKHCZlB2XKt1l2HhEreAsVlq29tEUYbxay7fGSm:2QkyXduU1BZH22at1wHWi//qB9bxn7fY","tlshash":"75b2d0c6e2996b310fc667525c763880f2c9a7516b9103f6943d74a8e944c70ac1eaf8","first_seen":"2025-10-18T18:30:36.010788Z","last_seen":"2026-01-02T10:25:34.240481Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/index.js?v=2","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/js/index.js?v=2 HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Apr 2025 10:32:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fra%2FAtn90WsbgsKMGP2e9Ji1OrIT7BBvLiefPXxDxNXX3iTskVNk0a9JaZxanUTmqzZenVKOvy9ZFYWP9IX3NqXfO7LqnAu5ApuhL1c%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"67f3a9c7-f23e\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c4f9915a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62014,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5381)","md5":"9805613c31f316469210ee1447c341e4","sha1":"52c757141c7ad151af7b6227d431e420046471f7","sha256":"5db4ebb01de1ba6d5ac68cf94d3920ab30ace7f84560adf534240008802e62af","sha512":"c0ebc28b28815f206c03ff344b85a660647d0ed8c3ffed8409e673aaf44a502d7cea5f4bb822cb5f130aa9a56a5ed2dd6325d92eeb1cac7333e6c96643da6110","ssdeep":"384:jK89b57tJpTVyMkdXdatjyLt36hihgE3zRhNW1YabZZDfJ4YZbvxfOkWi1KYt:m8LRGdatjyLt36hiZ3zRhk17GaOkWw","tlshash":"e4531e0875e7641b587b34b98fbf61002b294007d64dde04be1e6bd09fd4528ba62bef","first_seen":"2025-10-18T18:30:35.965751Z","last_seen":"2026-01-02T10:25:34.247823Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/script.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/js/script.js HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 Nov 2024 02:06:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AoIz%2F%2FeS3mBEH1oXbcLicVHQ2Iy4%2BZW01r5Ow4%2Fa%2BXuqOUDxOydtXx5KTcdRyKRUTk0AgK53dKQxVDNdAalN7eiadX%2BTGswNqiEtT38%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"673166c2-464\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c509935a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1124,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"caad685143590b687a09c8c9bc00f9b5","sha1":"218af98132a3a2d1ed78be015968c47f0ae3b257","sha256":"5772df947d07180af5db769a28d1532a075e1dcb2644b05fa2cc342c905570c4","sha512":"0aa61bed81fe9445fb473054902bbbf1b156ba3b0d777d21fa30f57248e76f4343b6a61a0f62a0234a895e9cb524d21d4d1f06e7e461a6937b3671af493945fc","ssdeep":"","tlshash":"0721f02af0721555547f30e99b2fb1083430502fe1579eb4b88e97d04f6d8e8a313e99","first_seen":"2025-10-18T18:30:36.134996Z","last_seen":"2026-01-02T10:25:34.229534Z","times_seen":7,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tj.oktoon.top/matomo.js","fqdn":"tj.oktoon.top","domain":"oktoon.top","tld":"top"},"ip":{"addr":"172.67.215.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oktoon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 13:47:19 GMT","end":"Sat, 29 Nov 2025 14:45:52 GMT"},"fingerprint":{"sha1":"18:AB:F3:0C:33:3D:DF:6A:71:3D:BE:E0:15:E3:69:15:B4:98:8D:CC","sha256":"99:2B:16:B7:CC:3D:FE:48:17:D5:5E:57:49:D0:F3:1E:58:F6:E7:9A:93:E7:B1:39:77:16:26:67:BD:24:57:48"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: tj.oktoon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Sep 2024 19:00:05 GMT\r\nvary: Accept-Encoding\r\netag: \"66f45db5-10784\"\r\nexpires: Sun, 26 Oct 2025 01:55:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 16488\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brkNv1k%2FOLXTpMzR7vMZjierzP9Ptwh0APAqyUuxPWA98cNhI8p%2FzTeqLe%2FQz0tf8s0HmvuXzD8QiCP%2Bq%2FHbhZ1iFxnhW%2FB37Z%2Fwc50%3D\"}]}\r\ncf-ray: 9943c8c7fb7d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67460,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2854)","md5":"97b41888a87c22615114d73c91cc70a3","sha1":"a9e02fdb328a29bd8753e7000d0afe6ef635aad1","sha256":"f2e8975ed834c578c50d3923ceb26de04d4fa44f74380f45f147585d909a874d","sha512":"0023e6fd1e095cb37ffd94393f583f9a1ad1fe18a03b72bd035d431401038b48cc9689e2bbf4b0bbee5b6082e77db6e2bdd55b4d5ffb1c45f86e0f330789c10f","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEy+XzsyWbuds06Vdda8EbdAAOV4ITzvBCQaFLa:AT+Z2fuULzsyWbbVdda8EbdAA0XvBv5","tlshash":"0263d5ca72c275398bca6074603f1187b17aada7144cc4a4f56ac4fa3c3891e957bf78","first_seen":"2024-05-09T17:51:40Z","last_seen":"2026-04-29T12:40:43.313875Z","times_seen":4708,"resource_available":true,"data":null}},"time_used":704,"timings":{"blocked":344,"dns":57,"connect":1,"send":0,"wait":13,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"tj.oktoon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/packs/layui/css/modules/layer/default/layer.css?v=3.1.1","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /packs/layui/css/modules/layer/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 18 Jan 2020 07:53:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rOaNJC177JgURPFW4FZH7%2BcxHByHL5kdY9LFlsoeda0hE%2F9EaLz%2FEdc5pZ2uc6qKrzZ87l4S1LDcLW4sfcq4znwRbjgv4hwp7ZLht9c%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"5e22b970-3859\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c5d9c75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14425,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14368)","md5":"cdf467c11d77287b09cec22297aa06b2","sha1":"57e147ee3cf8a1ea2194bdfbad5e69083fa578bd","sha256":"ba2baf1bb08b0bff57cce75934bab7768c52567bf389479bed787004ae6e653b","sha512":"9c24a7c4d5d151652e246375c42f4ef2eb29a33dd9b4bad8c19ac2dd52086db91988d0f87c5d547f377499649f02e6ac4dbe4ee7a06d8a65cb2b445482104ab5","ssdeep":"96:Jp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:KWmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"f55231e144811299b0278721d6dc7eba32f88d43e5630daef2573c1f874c6dba2b6647","first_seen":"2023-04-16T09:58:27Z","last_seen":"2026-04-29T08:22:28.433231Z","times_seen":528,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/19387cd4af03977f7a3732135618fec12c0a49ff.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/19387cd4af03977f7a3732135618fec12c0a49ff.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52734\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 04:52:15 GMT\r\ncdn-storageserver: SG-687\r\ncdn-fileserver: 684\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 07/25/2025 12:25:05\r\ncdn-edgestorageid: 1054\r\ncdn-requestid: 3d7aef7decf6f65e23a9232de14688fd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":52734,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 480x623, components 3","md5":"02d138c46ad3fa3a8083c69e64809b29","sha1":"79788dacf880d75577e1ec463a19f621aa7dbe22","sha256":"33f9bfe849c4d5677ffef1f14b2dd7f3a4c75cbf5c5dcb50825b23529e3c79d6","sha512":"726416de671260f221c479db7589ff8c4f2cd7f7045e8d2bbe5a29ea069d5b3775b150679adc51d51e2fd4332ca91248b10933cc0571821cb131333eb68f7cb3","ssdeep":"768:Y1zhyvIP0sZ8Jv3L1oVzahujBKGz4jo/4jR8Mpm/fPkXfI1VaVMqi+OpBMU:BvIPQlLY/jEGzaK13kXfI1Ay9","tlshash":"e633f2e8f78267adb085c0ea864c019fba124cbd824a7ba2fd5e678250a51fd254894c","first_seen":"2025-10-22T16:00:54.60065Z","last_seen":"2025-11-30T16:51:34.655277Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/a28b9a0ca14f553d58c0200f1efc8981f6d01ac2.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/a28b9a0ca14f553d58c0200f1efc8981f6d01ac2.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22301\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 23 Sep 2024 03:31:27 GMT\r\ncdn-storageserver: SG-516\r\ncdn-fileserver: 684\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/11/2025 09:47:11\r\ncdn-edgestorageid: 860\r\ncdn-requestid: aec5a33e52eab4ff9a46f5f980190454\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22301,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x343, components 3","md5":"10cf40aea1b06dbb69f20f927a5b9f37","sha1":"779a27e35bb1aa129c74372618970d2bb2aa2f38","sha256":"830a70f8d59b595032cc8fa4465198cd035b3d24ef15f9c8fe410ff1ccc5055b","sha512":"c1e823358ffad677e3ca29014b46b310965263e8f8289f9abc284660656805e8fd285ab9193814f06a78aabe9275f693a7c93c3bb9e623d72f27a98293cc7ea9","ssdeep":"384:ybb4fLomoI9msgAiqIw1/At4I4nsvo+mcx7VFOnimesU3maTdJCsMTWNXtvUyQmi:ybb4j1KV+elhWKuesU3ma7CsXNXBSIN2","tlshash":"42a2e01e3929be07cf439ebd379bb592bf9d209026017178c0a6e25d2cf5da94d48728","first_seen":"2025-10-22T16:00:55.008649Z","last_seen":"2025-12-02T04:26:57.943812Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/diy/a3ec64d98eb7716b7573b007a36c8c.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /diy/a3ec64d98eb7716b7573b007a36c8c.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50941\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 02 Dec 2024 04:40:57 GMT\r\ncdn-storageserver: SG-686\r\ncdn-fileserver: 851\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/02/2025 18:12:07\r\ncdn-edgestorageid: 1080\r\ncdn-requestid: 6126569592e7e1504892e867353cfa01\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":50941,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 375x500, components 3","md5":"1da3ec64d98eb7716b7573b007a36c8c","sha1":"e786675dcbcaa3cd00809da85938af0582e79e61","sha256":"8dc3a5c7e4fc59007a4d0e49c143b5125e18c7bd532f2df8f4a35e9e9d5f6a07","sha512":"fdd8994bfc9645bd52a26af98335524d1910967d4438310ac63b137fc487980f516ead9cb23b36e7a9a6bc0bbaf76b3018c106683047773118bd7e6109b59470","ssdeep":"1536:JT3+4OQLuj8YziG7v9VZgPopaydnbdU5c:JT3Qj3vvAopNbdyc","tlshash":"7f33f2c7a70042d8d223b9b83ae95fa2d77135604ca6f66c25d36d761d208cbb34d8d7","first_seen":"2025-10-22T16:00:54.903545Z","last_seen":"2025-10-25T18:30:48.5759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/diy/9f7a99eea044ee0b8471ce7dc0f837.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /diy/9f7a99eea044ee0b8471ce7dc0f837.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46533\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 09 Aug 2025 01:13:03 GMT\r\ncdn-storageserver: SG-516\r\ncdn-fileserver: 684\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/09/2025 01:15:39\r\ncdn-edgestorageid: 865\r\ncdn-requestid: 1c285f2a7e239a1958ce2d39cb758919\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":46533,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x623, components 3","md5":"799f7a99eea044ee0b8471ce7dc0f837","sha1":"d0831e30b52a1fe2e4cf758f2226ef044b17edc4","sha256":"6a0255149f6e8c3598fe259c729442e504f2f9275217b33ab15217b3eb2bb99a","sha512":"f884df04d98a3b7d65a9a0e58d8b2e126ec480314cdaff85ee36801c041cee0b563350eff06cd460a9c7afad8fe64761824ba6e9a6ea4d2a41d3f67ddaddef79","ssdeep":"768:n/7iQjb+2n0MxCubDVGutl6rQ59O8iyPqCCsEtS8AK+12EnAUhbElHTmIyhL7TS:n/xv+T+bDVGslZzipCCEnKVuB9ElavLi","tlshash":"da23f10d67480e95c758f97c935acb7403286d1bc323114f9cf9caaaadf8a5f4a587b0","first_seen":"2025-10-18T18:30:36.041183Z","last_seen":"2026-01-02T10:25:34.149239Z","times_seen":5,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/c40d69881c8e78a4f25e90f23b7324702aeb08b7.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/c40d69881c8e78a4f25e90f23b7324702aeb08b7.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49313\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 06:01:44 GMT\r\ncdn-storageserver: SG-712\r\ncdn-fileserver: 865\r\ncdn-proxyver: 1.31\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 06/27/2025 13:28:46\r\ncdn-edgestorageid: 1055\r\ncdn-requestid: 69238a54a0ee9ae0d557ea23b37eceaf\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":49313,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x623, components 3","md5":"7679b18248864d4a09f38366a6015f0f","sha1":"6f631102dc4c4b58d6dda41069e3d6028bd93bf5","sha256":"13abc1892237ac1645902aa993120f1ffe4e10995325bbf6a509e5a0798b07d9","sha512":"8797f09aab76f458c4dc0682b2a0425774a97e596e5678fd6edbaee1b454454ded6caa82200d228f9b5418a61f3412a74d07d859acc9bdd575ced858a076fab3","ssdeep":"768:DY6duIjeGFqltZUe0GXlRtEpOjHLh0NhxCFgf/K1xOrsiIN2q2uEsF:D5duXsqvDupOjOKgf/Karc2s1F","tlshash":"6823028ad55112f2eb5b6ff8b3189b7029ea7426ab13c45310cb26f901e40f14a336ec","first_seen":"2025-10-25T18:30:48.579093Z","last_seen":"2025-10-25T18:30:48.579093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/diy/6ce8c15dc99081a6492dcbb42a497e.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /diy/6ce8c15dc99081a6492dcbb42a497e.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50679\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 20 May 2025 00:51:41 GMT\r\ncdn-storageserver: SG-516\r\ncdn-fileserver: 1042\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/18/2025 16:45:07\r\ncdn-edgestorageid: 874\r\ncdn-requestid: 12942936ac7b186dd68dd8e451efcbe1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":50679,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x623, components 3","md5":"a06ce8c15dc99081a6492dcbb42a497e","sha1":"71fd8766ffe046346dcb23e4176ae8422bd668f5","sha256":"6e40f3b17b9103bf5e2d4b19d6dee174e8c2b5ecb708220b0f63cd56b12ae3b5","sha512":"097133f42a80c08850c66f2749258b9437869543d2dd4b7ff5c51cf1f187c235fb0763810e052eed874ccf1aa2918415f298a3460a7d9d4b5162c74816ad36a6","ssdeep":"1536:t6zYmpG+lvL+xHlGMiNhllTXZrxpvR9wxVLH:t6zpp9lvL+3GMKblzFvvwbr","tlshash":"1733f180f7615fa5ce57eef42ae88b18d235a774ad32b78e23c58d651d1c2f68104138","first_seen":"2025-10-18T18:30:36.055656Z","last_seen":"2025-10-25T18:30:48.581439Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/diy/fc0ec1ed3eafadfce945607aa7d14f.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /diy/fc0ec1ed3eafadfce945607aa7d14f.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20254\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 31 Jul 2025 02:18:48 GMT\r\ncdn-storageserver: SG-712\r\ncdn-fileserver: 515\r\ncdn-proxyver: 1.38\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 10/14/2025 18:38:00\r\ncdn-edgestorageid: 1075\r\ncdn-requestid: d2f0398931bc165e801c4b15f78c2781\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20254,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x420, components 3","md5":"8cfc0ec1ed3eafadfce945607aa7d14f","sha1":"c40533ea1a9591e4ab7beeb6aa93ee2fc507861f","sha256":"bef6e4a6eec52ba6bfa821aff978351017553e355e2b5cdb77147bff9780fb5a","sha512":"21457ed44720cad59e2cba99a232a6f706a7bd6b6a96770c9036a45082d8104f904eed14a1f703dbf889adc476f56adfb646534bc96f1f74769136e89f4e7073","ssdeep":"384:9ohUH22GBXGN7HapPKbYSrJxYZmtfEy1IYvMN9nvDoWKzSzQ4O:+UrGwHaBKLfYI2y15MN9vsxWzQp","tlshash":"b792e0257a17c320f82de7756ecdf206558223f0e85854de68c862904ee16e5affd933","first_seen":"2025-10-25T18:30:48.582371Z","last_seen":"2026-01-02T10:25:34.236569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/packs/mccms/base.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /packs/mccms/base.js HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Apr 2025 10:31:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mrQws8mmX%2B3VPqb3iuorn0%2FJh5xmwNxyjiDNwEMcqE%2BMTznpvb1FkBwg6SWUP8aTAkbN8dxmryQ4Px3vivbXbsnEJeBYR3p%2FLQkarM%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"67f3a96b-176b0\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c4f98d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95920,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"42cc243729f3004e2b5f01ea907b1388","sha1":"2f379d3e3d5b3644fe9598db1d73f1e67caa1085","sha256":"d918dad9f5376e40f840e208dcad9d854496d6e51681cf9a55a539caf617ffdc","sha512":"c0b4a1d0a0191bdb99c63b1f0b210937f5783eaa8f34026652baa7da4734a70f4896e157e7c37672332c0b2745d244a32b9772e4644619ee98ee28b99c0f5f02","ssdeep":"1536:AYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a98u:b4J+OlfOhWppCW6G9a98HrcB","tlshash":"d093d5d9b2d670528ab734a841bf110bb13a989bb84c8c60f46cd5d47fb4a4e517bf2c","first_seen":"2025-10-18T18:30:36.113457Z","last_seen":"2026-01-02T10:25:34.246239Z","times_seen":7,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/webfonts/fa-regular-400.woff2","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/template/pc/default/css/all.min.css\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25464\r\nlast-modified: Sat, 14 Sep 2024 08:04:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWnYhhsy6jK4LSb1r05keXhPERKUfUUJ69I1F4LvUoupM9qdAt%2FMkJ%2FSmfDECV4Zl40Tf%2FjyJBI0l6udhwLAHFloACJb8SctHMaoEmk%3D\"}]}\r\netag: \"66e5439c-6378\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9943c8c699f05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25464, version 774.256","md5":"2d89b49ac28614e9ccd9c81308b5120c","sha1":"46e272db3db1072791628679bc469112c8e41017","sha256":"c732f106e91bc618767fbac8e2c7b27e5c736d477b2bb4fb83f597a43198c33c","sha512":"ea52d931fe445178877aa558f6c7702b6f5836a938d51809605317f8c690356022745d4495aae3ea7018e8314a5e4c583fc58b28dded6309a2e1c37a89160bb7","ssdeep":"384:47kVrsDbxAmlq9YVDlI4zwZ0HupU6LnbbPT78/MktAxlkAhxA+iQ4QE8w:aCrsHxll7l4pPTnhjmI4QM","tlshash":"19b2e1bdb1ff69e474742512c5f42129760fe59aef31cb2a34a0e676f2460d826dc1b0","first_seen":"2024-07-20T13:53:50Z","last_seen":"2026-04-29T13:05:43.814434Z","times_seen":2910,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/images/jt.png","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/images/jt.png HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/template/pc/default/css/style.css?v=33\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 400\r\nlast-modified: Sun, 13 Oct 2024 07:32:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bx9E8hxI60yFbXQKN7Q%2B%2FjcNbYUlowmfHUL6kxtLweivujCqxGRifjUxhC5%2F8Y0qYVpmb9tTd3TyA8LjFDUiFIbfnIqDoDk%2FH4dc2vw%3D\"}]}\r\netag: \"670b77a2-190\"\r\nexpires: Sun, 23 Nov 2025 02:11:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 145136\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9943c8c8ba575a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 12, 8-bit/color RGBA, non-interlaced","md5":"d8cfc0741bb7b30f0677b2ffe7a534e1","sha1":"2bb1545894cd170949fdbf688c32d4dde89cbaf9","sha256":"ed22ce45d3f48db6eb0db8c686be74f064f98fabfd49b69319fe10a1f96cfb92","sha512":"02223b23742c910360473a2ba6795eb2ec4a905df67e818c306d0afa3579cc67f5042bc671ad8011349813e5f149b15a276cb4fedf22c753775b2aa823589115","ssdeep":"","tlshash":"c5e081fb134580b980380cb3326c24f021e002a8a881bb0b69295847ae64082048a315","first_seen":"2025-10-18T18:30:36.142284Z","last_seen":"2026-01-02T10:25:34.178724Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/jquery.SuperSlide.2.1.3.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/js/jquery.SuperSlide.2.1.3.js HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Sep 2024 12:55:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76TvJUpLD%2BRAxUEn73NOi6%2FAKG%2FWreHR1vIFu9XLInvwQTxBBsjbFTHqctAUnu3mZeJF0biuhu8UdqEqh1yMay9ThAybzsJt7QgXRfg%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"66dafbce-2ea0\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c4f98f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11936,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11261)","md5":"84bb734b770c679ec43430735d9bc48d","sha1":"b018557189de970f733701cc6d37c8c8144cb433","sha256":"0130a150a6587dbbd32e764d263be37abd71a2153687eb4e535fdc174313e50a","sha512":"8e4e6f80a4112492d793b24feac563540370aeb81ef086b3abe30f8131eb5a7bf6d42a443228f249c896b589208aa800f1c9561ab466c8fc441bb4177363562e","ssdeep":"192:BaDKvAoHPHsgGuuauF56tpE9Er5MYB5c3TXP3ZO/mpUhClGS5OHxImISLTNSfYXA:Ba+vAUsgGuvlMYXcjfRUCESKREcS3KuD","tlshash":"9b32a65fb66275ce56a7b3f0107f940c232655a5fc8a8c60b1748380ad79a1c212bfad","first_seen":"2023-04-18T15:29:17Z","last_seen":"2026-04-28T10:13:43.424906Z","times_seen":362,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default//images/katoon.png","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default//images/katoon.png HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 13 Oct 2024 07:32:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2u8hj1gtzrxuKklxuaYfx%2BAiBtaNYiWDmtGMrMqTmJH5aCGqZXDCzkhFUrueDcjeN3T4vyGL1fsmYjK2BpP7YkdrG5bpsbkfJnCqmw0%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"670b77a4-1d3b9\"\r\nexpires: Sun, 02 Nov 2025 01:18:54 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1962682\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 9943c8c509955a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 252, 8-bit/color RGBA, non-interlaced","md5":"ca0bf56ae28088749a2ee8ed5451f668","sha1":"bef3bbd2d216abd79279c01debb2779cbb2f3f72","sha256":"bfef7d5cae81d0537fbcabb955d46fcd60d0a6910ad129225c6e180cdf1bf60c","sha512":"2f32c1e64bc7f07288d3fe2dc1bb8e80330dbf62597f951b6877a57b8211d8378d088d6ff534064b0ed1f73e8d066120f314da332edaee200f748a01c7d2f63f","ssdeep":"3072:GLLqNh/0qhqRQS2u9HIcOhdqEsKhdMe3F7bUXO3bhg:GPqb/ORQeocOhd8KfMgl/K","tlshash":"61c312971a44579be29f8396c9ec057d225c1bc27e506580fba4fcd63bbc6cb4273680","first_seen":"2025-10-18T18:30:35.944692Z","last_seen":"2026-01-02T10:25:34.238719Z","times_seen":7,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/images/bg_detail.png","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/images/bg_detail.png HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 24 Nov 2024 16:20:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8PR3lryEtQOVdhjaLaor2rZLHCFm8NZP9tLCb7j5gMMvh98Jj2g4srktrxCqRhWSR5skHPf1u5rsXUjUUGff2O0cO7dcsykjWzTU8E%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"67435268-f33\"\r\nexpires: Sun, 26 Oct 2025 06:51:25 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 2547531\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 9943c8c5099b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced","md5":"b97eee5b2c63adc82d39faf90460bba9","sha1":"30ef1dfa80dad9f2a947a89394d11b5e3988a633","sha256":"3ae6ab897f064665488f312c629f77b7fa49c2f6c52510affaf004fcc4f99e14","sha512":"f1e65caa21edbb814e1f5b6e9e5d288a5890fec84bc3b5fca27a947395c2776d09672e076564be3ca7e9e24d3baa2c3dcc180810e115196385501c2c262b6852","ssdeep":"","tlshash":"fc8104ebd99824d12c3e1969a80199c4fb3fc07f845ef8d9cbcb7a3e2d50c66842d546","first_seen":"2025-10-18T18:30:36.017166Z","last_seen":"2026-01-02T10:25:34.253942Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/collaboration/racasino/1627x212.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /collaboration/racasino/1627x212.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 812269\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 02 Aug 2025 06:38:50 GMT\r\ncdn-storageserver: SYD-386\r\ncdn-fileserver: 559\r\ncdn-proxyver: 1.39\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 10/21/2025 10:42:28\r\ncdn-edgestorageid: 1079\r\ncdn-requestid: d54a6e9bd9b2f3a118525bd9a5f66b59\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":812269,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3254x424, components 3","md5":"338164804534441a8e30a7162bdaf174","sha1":"7de65e598ea498cd155e367c9a3ec268a512b86e","sha256":"348b6690034ba3469ed3100f1de601cca4c34d9e0c0622c57a0cf11f686e309b","sha512":"34ddac44de3e099b8ae8ab56d482fa8c55ea8088b779616876df385d452b4905563289ce37010fcbf128d666de88f7a739228fb2b60dfe200e0947a6402c1565","ssdeep":"24576:Rdj5KL2NQ3mOfvlBlpsPeTym0qXbOECHD33moG:rj4LJDfdBgPeTy741CjmoG","tlshash":"4705237b9cad9d82a7640eb9494c07d6765ccfcc54b44af370e3b4a7e00689a601cb99","first_seen":"2025-10-18T18:30:35.931115Z","last_seen":"2026-01-02T10:25:34.220044Z","times_seen":7,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":92,"dns":18,"connect":22,"send":0,"wait":31,"receive":133,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/packs/layui/css/modules/code.css","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /packs/layui/css/modules/code.css HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 18 Jan 2020 07:53:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2BxK3xIUJHo3Uf8JqF%2FsZYK%2B7pkRQyTPLs5BKQceAMCGowLLl9RW%2B%2BggiB30GdtscvCrt1U8635lJDfJNHWhYVjaQQtC9S4rPs2M1WQ%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"5e22b970-427\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c5e9c95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1063,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1006)","md5":"c1209e950573712edda8abb2e9998c70","sha1":"3db8023da10d132a9aa022d11763d6064bfc7cf1","sha256":"cd4c4518e0684d548e90cf3ee37f04b9ab0b08d04569a8dfd8d97ff1e257d9e8","sha512":"a385d982d64b17c313d6eaa7f3abb058a954ffe8eddd27012a1f72d5340591871e89b256c1dbd7586f916ec63fbba4495cb64ebaba8f0fe706e0f29599ebf15c","ssdeep":"","tlshash":"4911cc3ba38120197547f22560ecb8bc603c71e7e5ea0e2bff412babc404c61143634b","first_seen":"2023-05-04T11:51:17Z","last_seen":"2026-04-29T06:13:23.06941Z","times_seen":211,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/9e97a04e3a630b6f207beab3f6ba24222d51e4c4.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/9e97a04e3a630b6f207beab3f6ba24222d51e4c4.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35492\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 04:55:04 GMT\r\ncdn-storageserver: SG-684\r\ncdn-fileserver: 867\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 04/07/2025 17:32:46\r\ncdn-edgestorageid: 1047\r\ncdn-requestid: 8fbe093d6a29dd534f391fde13df2fb9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":35492,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x324, components 3","md5":"93ff7e5eb8f6f1bacc281ac43fc07d63","sha1":"3f989ae0ddd4a7bc6cff2306a50c0cebdf3edf7e","sha256":"21eda33c065a101640f428d4c65e90133daa92ac1b974aa9eac4c5321ed51ee7","sha512":"743137b702599cad042e92bc5e1f34b21cb9f95c67119eff0e5323cf36cefdaebaa91cc1c4f1de61b04d0f172e11bdd1a241dc1e964d5e390fa2399c6bc9df02","ssdeep":"768:ksb0w/dTMKDJ406wm1IPg+Lc7FDDmZiifdekav7gvzx+AVe0:ks4wnr60Pg+I/mbdekaib","tlshash":"7cf2e10d3b6529b0bd4ab6a54cd81a7219d117d3c5b3f22d23e00ee08dbb6533b5e0e5","first_seen":"2025-09-03T17:32:51.911485Z","last_seen":"2025-10-25T18:30:48.591039Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tj.oktoon.top/matomo.php?action_name=XToon\u0026idsite=1\u0026rec=1\u0026r=575664\u0026h=18\u0026m=30\u0026s=17\u0026url=https%3A%2F%2Ft1.xtoon2.com%2F\u0026_id=e9927bcfbe6d452c\u0026_idn=0\u0026send_image=0\u0026_refts=0\u0026pv_id=jaQW8C\u0026pf_net=22\u0026pf_srv=1779\u0026pf_tfr=171\u0026pf_dm1=405\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"tj.oktoon.top","domain":"oktoon.top","tld":"top"},"ip":{"addr":"172.67.215.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oktoon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 13:47:19 GMT","end":"Sat, 29 Nov 2025 14:45:52 GMT"},"fingerprint":{"sha1":"18:AB:F3:0C:33:3D:DF:6A:71:3D:BE:E0:15:E3:69:15:B4:98:8D:CC","sha256":"99:2B:16:B7:CC:3D:FE:48:17:D5:5E:57:49:D0:F3:1E:58:F6:E7:9A:93:E7:B1:39:77:16:26:67:BD:24:57:48"}}},"request":{"raw":"POST /matomo.php?action_name=XToon\u0026idsite=1\u0026rec=1\u0026r=575664\u0026h=18\u0026m=30\u0026s=17\u0026url=https%3A%2F%2Ft1.xtoon2.com%2F\u0026_id=e9927bcfbe6d452c\u0026_idn=0\u0026send_image=0\u0026_refts=0\u0026pv_id=jaQW8C\u0026pf_net=22\u0026pf_srv=1779\u0026pf_tfr=171\u0026pf_dm1=405\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: tj.oktoon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://t1.xtoon2.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 25 Oct 2025 18:30:18 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: https://t1.xtoon2.com\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fNvwKSK4uyLpvOuUddcSW60JEIZzjwxs%2FpLjMmXZsL86%2BNqgmfYyn3dHmHPIXtQjW%2Bn%2BoVzK6qAHr2O6%2FBYw9QNz95m6LTP87J3uDmg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9943c8c91e63120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"tj.oktoon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/images/19.png","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/images/19.png HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/template/pc/default/css/style.css?v=33\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 27 Oct 2024 09:36:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87EeXPym8DaaxobMoHoz21P%2FVJ%2F9sqUD7%2Fsvz00eSDD3WXi4zCpxAc%2FPgQJYNj0ktoSzTOI27ZJmLjVJCn3HSw%2BqvNIciJksHGf8Zrk%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"671e0980-a34a\"\r\nexpires: Thu, 20 Nov 2025 19:45:45 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 341071\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 9943c8c6b9f65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"16b1d1e015460116e89f20858b2f119a","sha1":"05b5f2582892de9a96feee260387aa37c7b4c0a6","sha256":"9a4e49e0597b589cc3c80eb5a5c202bcc09cef48512fb486a3182bb543fa128a","sha512":"e981d733b4c905c0c7f41e116667674286a50e01764a5b935482a046ec907af20e3825441b9b18df0e114b3e381c6d9eb501cc314946c23b39c8635f2c9f9635","ssdeep":"768:K3pUbNpL0PvQbsELk4w5spzyV0OgCgPAaBDpLVB/pxD+klcXB26tiN:EURpLj9vw50zgkbBdVVppdmXg64N","tlshash":"4913f19eeb5b31cb12398f2128bfd6bc968214e6b8d813e29011c7573469e762dc0579","first_seen":"2025-10-18T18:30:35.949879Z","last_seen":"2026-01-02T10:25:34.231838Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/931ea5dbe70079b0f858131e78fb12a1c124de4d.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/931ea5dbe70079b0f858131e78fb12a1c124de4d.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57718\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 03:09:27 GMT\r\ncdn-storageserver: SG-631\r\ncdn-fileserver: 515\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/01/2025 15:58:08\r\ncdn-edgestorageid: 1077\r\ncdn-requestid: 7f07bc7a11b7d56db53374b167565603\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":57718,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x623, components 3","md5":"21d2cc63c037a5f730762825c4a464f8","sha1":"bff010612ad923aec79d454313f70975e84a08d6","sha256":"6cdc981774efffec3a53fffca4e0d8e888cf4f0772a57c5a667bfd6dfeb8de73","sha512":"f84584d46b5fa4fbd38b4b4f519baf17bb37377d1fb545b3840b73f73229f9d5aba791b350b708972ddfcb9aa9db7d9ab54abbf8a8a4848e94bfa03048be5bae","ssdeep":"1536:0LSebtXkosIUzSDyhE2i+7OO04xnS94v2HrDzwjCHPeQYn:ENBsIMnh2+7RubDzwuveQ0","tlshash":"3443f2466e70c222170f93acfb80cfdafd5de05d0de958ac1a11e6cab5123b5e4583e6","first_seen":"2025-10-25T18:30:48.595429Z","last_seen":"2025-10-25T18:30:48.595429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/diy/c1ed4a8f4080144031f27eb8df7d95.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /diy/c1ed4a8f4080144031f27eb8df7d95.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46378\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 20 Oct 2025 01:25:25 GMT\r\ncdn-storageserver: SG-686\r\ncdn-fileserver: 778\r\ncdn-proxyver: 1.39\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 10/20/2025 02:33:19\r\ncdn-edgestorageid: 874\r\ncdn-requestid: ac138e51f1d81ad608412310dbf43d3b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":46378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x623, components 3","md5":"c9c1ed4a8f4080144031f27eb8df7d95","sha1":"cbaa5ede406883a6a47f8ce59579bcad7059dbd7","sha256":"12e48e2d8c5e9aa1ae54bf493576a735ff7c323088105dd65710d85772066665","sha512":"d91ba2c8a31cd094f11e6dbaa21c18b7f4425bc360c6223b0444d3e3dd2acbfda77fddfa74fac2226132b5dec551eae6845bb1f0230eacc971471cd666268c58","ssdeep":"768:1bUKOoFyzOqm50rABXGNOW5s9Y01PlkZOlP6CJkpuH64uMNfXJhJX2RIn3kO7Wk+:1UzOqm5hBX5YMh6wFH64uMN/JhJX2RqG","tlshash":"1a23f165f722b6d4dd02de729ff753a180335f425dbb2f2e4b02029ee22514a149de89","first_seen":"2025-10-25T18:30:48.597402Z","last_seen":"2025-12-02T04:26:57.948113Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/c88755b0cddc/main.js?","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/c88755b0cddc/main.js? HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870; _pk_id.1.adc0=e9927bcfbe6d452c.1761417018.; _pk_ses.1.adc0=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-length: 10034\r\nserver: cloudflare\r\ncf-ray: 9943c8c95a755a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10034,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10034), with no line terminators","md5":"786b3000b88291a85ec98d3e55530ebc","sha1":"9f43a8940f3208750cf83ab32d8aa9da58e6be43","sha256":"4fb3694b95f508c15cfbaad039cae9a90d2584e15290c73fc11abaf0d2552a63","sha512":"33669170f569a138383eeabc405a09605609b4999953c89c07d21aaad0ed2ef6a0e07d96c48f10522a62078f546fc4f22fd0b8cf1765a5ca4cd0e6b94af8d756","ssdeep":"192:HyLYPG2z3KAiOqXYq9M0miR/OTCdnGNxVrErBOdJb2fhmBfr:HyLSG2z3KAUYq9goOTCm9aBYJLfr","tlshash":"be22e9c5f90db87e822934fa052fbbc70525ad652091ad5293e0a8ec7d18bdd512fe0b","first_seen":"2025-10-25T18:30:48.599217Z","last_seen":"2025-10-25T19:19:43.05483Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/cdn-cgi/challenge-platform/h/b/jsd/r/0.09838037261687511:1761416048:pqOjM0qghuusZNVMGqfJBZxFBpBkArApMdV8u_3jPdQ/9943c8b8ad100afa","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:18.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.09838037261687511:1761416048:pqOjM0qghuusZNVMGqfJBZxFBpBkArApMdV8u_3jPdQ/9943c8b8ad100afa HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12077\r\nOrigin: https://t1.xtoon2.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870; _pk_id.1.adc0=e9927bcfbe6d452c.1761417018.; _pk_ses.1.adc0=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-length: 0\r\nset-cookie: cf_clearance=VV6WDaWPvlBh0eMwSeWnDRI0Y8.J19ZkmWUwKadifR4-1761417017-1.2.1.1-2I.WBgu9z8X1vEbXgJzzaNTJviJakIi91OrM__OMT8cB4yAVKldYvvfBJos2uSfM7vOaLYkitLh4uKoig89zhhnKsKLlGwfSGQZf31OZx6J9q4kXIGWy2UIxYerBaAbISrGrfocrkymp0JQq2vxjQcQ.k1FAUmrjeM49yJqVG2V678Kj1FrNJ05CCxufEFnZolvekgZJXeA4TpyYx4FwYM72KxWOeFjp9ouYfvfZEww; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=xtoon2.com; Expires=Sun, 25 Oct 2026 18:30:17 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9943c8ca6aa45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/bootstrap.bundle.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/js/bootstrap.bundle.js HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Sep 2024 08:04:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=POvavysiL54PHYNohRmSdtCfvj6NUi60Q3x3bgpe60EjlI9pPuLxHTWQVJNxObjC%2FQzT8eYvCLloepoWmpuMOrPyo%2FpG2dsC%2BJbk4M8%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"66e5439c-32bb1\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c4f9925a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207793,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (620)","md5":"40b9ce10d607dd7e8e85d5b4cd3d6165","sha1":"eece9dec39e70547d68eabe06fc8f1e196783930","sha256":"f5423981d2058bdbe23b755278c03efca225c5584f6e1a68c8ead806e4d268be","sha512":"8d394e5ba35a37896e17af16311636a0f87502c117b0af207b8ed3e0e5ff02eebfe86f76981723a8452d737a3217c4fdb78e3c5e56d8b02422f8ef5ca70466af","ssdeep":"3072:yQVwrYaWTHbdHYB8U40kU+MKeT8PmB+YM:ZnaWTt9U+MH8PmB+YM","tlshash":"3b1470093dfb2062492be57e8b6f414af2318047250ae9447d9c479c1fa9d3492ffbe9","first_seen":"2025-04-12T02:58:00.503927Z","last_seen":"2026-01-02T10:25:34.249799Z","times_seen":9,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/images/bg_loadimg_3x4.png","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/images/bg_loadimg_3x4.png HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 15 Sep 2024 06:43:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TFF2t%2FrFxk9b1N0Lo4ZhaSRQfGY28OKYheJAPIc9XfEFPPKvT%2FgE%2FItcGsDr8LEujj7lR9Q5f8rw4mIcv12wN6ZxoqjVk1msq7rCaXs%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"66e68211-1e31\"\r\nexpires: Sat, 22 Nov 2025 18:58:00 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 171136\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 9943c8c5b9bc5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 442, 8-bit/color RGBA, non-interlaced","md5":"50148fdf550364947ab9600a51f3f3af","sha1":"da987f0cd9b07a43b769674d653b3e11755a7dd1","sha256":"ed890eb1a38d0deb9fe67fbc6ae9614fa87985cb9a424f20c12ca47927327a1d","sha512":"25685e9e7e299323c51277d57f38d9ba0f1b3976c334ee97594028951908bf2fb399dbf2ba8c48097f2fb12e399e24a4169cbac6aba11775e6842ba860e2aea0","ssdeep":"96:C2KKmgYYBjuXiU/M9gunvf1uhonH9OfTZ33DrMTSx8QwO73a:MZ/M3nvfpH9OfTZDgTSx8Q4","tlshash":"24f1868347a54be437c6c3e42b93fc6491ee309b9f19b5eeb3b892b85e820433935515","first_seen":"2025-10-18T18:30:36.003688Z","last_seen":"2026-01-02T10:25:34.187098Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/webfonts/fa-solid-900.woff2","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/template/pc/default/css/all.min.css\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 157192\r\nlast-modified: Sat, 14 Sep 2024 08:04:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s15N3%2B3YNS0%2BHzxx7BozMwkiN4TGhC1GaCDyZeveCm9njjj%2FZRFaQ4hzC3FWbeLaplQhWN0aT1JLTKtCzelAtoGpDHjZMuObRyEpKlQ%3D\"}]}\r\netag: \"66e5439c-26608\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9943c8c699f15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 157192, version 774.256","md5":"237f4a0afbdb652fb2330ee7e1567dd3","sha1":"69335cd6a6ac82253ea5545899cccde35af39131","sha256":"1f0189e087fcefbf654fad74a3a06668b782c01353a61d5c0b7f0bf23e33c020","sha512":"27e8e1f91507179c207f93a19485738ed5d372a977eb27d44a4ed163013097d38b117c7a5bf4336ecc9862ca514d78ffcd2b8a07e304bbfe1b2cce9c087baa38","ssdeep":"3072:Qeqp46DjdHdb7UT/IGFc27+78oGmfIXe0pGRDH9tQm1pbYqup:Q16n/IqpoG2IXZYTtxrbdO","tlshash":"5ce3125bf5e6dbe5525e6d64fb5478972b1030823ee11cf12ce2206eb889317399e08f","first_seen":"2024-07-18T18:39:32Z","last_seen":"2026-04-29T15:42:12.079996Z","times_seen":11784,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/index.php/api/rend/message?callback=jQuery224042224497878519396_1761417017274\u0026t=0.4196872358018351\u0026_=1761417017275","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /index.php/api/rend/message?callback=jQuery224042224497878519396_1761417017274\u0026t=0.4196872358018351\u0026_=1761417017275 HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:18 GMT\r\ncontent-type: application/json;Charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7nYanD6p2TLebVyg5v%2FrPFulGUg8YT9%2FQrLTZa%2FsPc%2FSS2dnxUbPVk01Vb395zPWihGnrArAuorTtlkexbx1GAr3RfxXkZ%2B4%2FkMj98%3D\"}]}\r\nvary: Accept-Encoding\r\nx-generator: Mccms comic(http://www.mccms.cn)\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 9943c8c7aa1b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"a474d1927d82d7f175f27d9f199494d4","sha1":"48d04bdd88209401ec11a995cab4bb42cf3f00a0","sha256":"b16cfa7dcec59d1ed2e4b9ee4874ae0a3addb7360ab947b956ccc960fb73d0ec","sha512":"fa23e012a50f3da093b3f0cb90b4459afe709242f4c0a148c911a7e589ed4b2a33977b7a32e8f782e1f2e96ae2a04722c080ac6d1e60c091f481554fe9bc9977","ssdeep":"","tlshash":"abb01276701c4d6f11291d15f10a2361c22c8ac2dd787359cc040278010a428102e100","first_seen":"2025-10-25T18:30:48.603853Z","last_seen":"2025-10-25T18:30:48.603853Z","times_seen":1,"resource_available":true,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/076660f2bd81c1306af921e9cebfd3f8f4d38f6f.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/076660f2bd81c1306af921e9cebfd3f8f4d38f6f.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51973\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 26 Sep 2024 16:08:23 GMT\r\ncdn-storageserver: SG-630\r\ncdn-fileserver: 745\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 04/07/2025 12:27:34\r\ncdn-edgestorageid: 1076\r\ncdn-requestid: dd2b34738ab354f120bbf29fdfe2cbd6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":51973,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 480x623, components 3","md5":"e7644bb9553641d39f2f1f806218cbb8","sha1":"8ca0ad20ad6e2ec9eb4a6b569401d6cf6f004dc5","sha256":"bfc935ea8c145a9bdef86194f9e4c1413dfbe8e8db3200474b3d56d6e0244b79","sha512":"d42b85d7e03d7d5d420e634b6cd2cfccf469ccf2b86e75e5d9afa7d0885b87ab80140d488fc1f8b1e7d48ec335e9a44c662dc2a496eed5ce5549d5b2a0fe7a01","ssdeep":"1536:Kfs6zK25bkHIPtd4ddqMr5EySm0rAgIH6ql2W:k/R/4ddp5EySm0rAg8lp","tlshash":"0233f20ca1660f64ded89de5b217a7e3e277192b9025cb4f142015e55e7cda0e4a3cec","first_seen":"2025-10-25T18:30:48.605979Z","last_seen":"2025-10-25T18:30:48.605979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/diy/f1286c6c0861e43d2c1031e14b2a59.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /diy/f1286c6c0861e43d2c1031e14b2a59.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53032\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 20 Oct 2025 01:23:08 GMT\r\ncdn-storageserver: SG-711\r\ncdn-fileserver: 235\r\ncdn-proxyver: 1.39\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 10/20/2025 02:33:18\r\ncdn-edgestorageid: 1334\r\ncdn-requestid: 002f4047923b77ead211f9952e132f40\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":53032,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x623, components 3","md5":"cbf1286c6c0861e43d2c1031e14b2a59","sha1":"33acee12300df89910629328a786c12f3488dc79","sha256":"be211b7c1d54f9945e3ef6d65e06530b26961b73b84da26e3f1e075b7bfd8c3c","sha512":"18e360e8bf569b630889dafabd344a583cba48ecc3209816116a4d2e900a311370959a9d3764f31d25675b0fac25dea1a4a41385270c71328a4c7bfc6fc36b00","ssdeep":"768:X1hWJemghuldZC5K/7HyVvX440mrI/DlyK/QDowqw4fG2HnHZDJKOOM5aJdYcD:oReuLQIHyVvXAmrI/pbweRH5DsJdYI","tlshash":"42331224314529d6cb1dc6b846a2563e2f79b2b417fa8a7c839264d5d70ce947622cc3","first_seen":"2025-10-22T16:00:54.98528Z","last_seen":"2025-10-25T18:30:48.607972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/9f2c80c64a4d617dcc9bc355f8beacdd958f41d4.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/9f2c80c64a4d617dcc9bc355f8beacdd958f41d4.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24820\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 03:09:26 GMT\r\ncdn-storageserver: SG-687\r\ncdn-fileserver: 515\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/01/2025 15:58:08\r\ncdn-edgestorageid: 1077\r\ncdn-requestid: 48ef93c285acf1f3e4381358c172039c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":24820,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x343, components 3","md5":"806f19c1057a4049cbc0a3b79eae8872","sha1":"160112e92bb813397cbb8061a087f5eb71629144","sha256":"1b19822c739c1298b025876c032aa952e8e4c50b6164cf86025088f55a0dc67d","sha512":"16bd16cc253cb00fdf8c67b4e9dd09bd2051ad5f0e92d5a6cd47879c15aff3fc3207aad78ac8966d434e9751fd8796348844b457f118e2cb7f68ad9a9589122f","ssdeep":"384:yKQreEEekUsKu9FxAlL+x2CL2z5QO5tZTMT6mUCAM6pUxTOr+WTYZztlqxO5:yK0eEoNol6x2md+Tk6Cv68OKWMZJ5","tlshash":"84b2df4bfb21bffaef6cac6f37b282151b4680145200a939294598efd714c79c899f24","first_seen":"2025-10-22T16:00:54.343631Z","last_seen":"2025-10-25T18:30:48.610194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/c88755b0cddc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\ncf-ray: 9943c8c84a3f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10034,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/css/style.css?v=33","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/css/style.css?v=33 HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 13 Jul 2025 10:41:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KudCZqdTqyWOz%2BFRGb6KzW%2BDIJCJRKwq5lXSL4dIiEJW%2Brg4x0PXMHljo9SOYn7iu5yMZSneRfFhOb6hjqi9lFcm7xeUGMMdHvGPPfM%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"68738d73-622b\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c4e9885a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25131,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0d6ee7af49155dd94f2b5e00fb671852","sha1":"c7e294e2b3808f46e6e726b608e10c3e640a33cf","sha256":"53bcc75ec6bd687768a4ede736c7fd5d99c7dad3f8853cf3720145a2a4a1c1c5","sha512":"69e09fceeff29c11af486da8c147edbe1d157c1d6e4e669bf42969e5ff8088497401a20405e0560b73b269987636ef532a8614b870976e426320cce2dc2ac367","ssdeep":"768:lJoFclC7FrtBFieFTUra3boFPHF/+Z7FausFSFQ0vZ:lJoylC7FrtBf1Ura3boxHF4wP0Tx","tlshash":"b8b2549bd6b506047827f15c7e92c7d8233d8443aa0fcbb877e9255c4f856f82262b8d","first_seen":"2025-10-18T18:30:35.986088Z","last_seen":"2025-10-25T18:30:48.613002Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/ee5766d0e783d83666a7a751fab6227dae06b8b6.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/ee5766d0e783d83666a7a751fab6227dae06b8b6.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52408\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 05:02:59 GMT\r\ncdn-storageserver: SG-561\r\ncdn-fileserver: 867\r\ncdn-proxyver: 1.30\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 06/19/2025 12:45:30\r\ncdn-edgestorageid: 1047\r\ncdn-requestid: 62ba8f830cc1acb93b3872d567e95c1c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":52408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x343, components 3","md5":"96521457204f382432e65e8ce66ae013","sha1":"d36a6056c10a267aceaa2c933ed3417ef970cc8a","sha256":"9b1987a90de3ec3ac08d00beb5e5d1a1c47d03bbb61dec21cb73792532235e98","sha512":"b57cee696156b8ffd74bb7df59a48e65b6cb885825aadf85bd917141e3de403733eb98731e59b7ab47b39517b2b06703b94bbd123a62f486a5cf3346440a75d3","ssdeep":"1536:LcmRW1N/+fjf/HolbNlwKv3Gzh8p573OmEAN5VxFXa:ImA9G3ewkGzhm73Okvq","tlshash":"c73302127ccbfbd2df1d073e5a440e3aa47989594fdca9845e08d3a1d8c518e8ae74ac","first_seen":"2025-10-18T18:30:36.138341Z","last_seen":"2025-10-25T18:30:48.61403Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/c90b34d0ce59463988ec8979203f7ab972386670.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/c90b34d0ce59463988ec8979203f7ab972386670.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25665\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 08:26:01 GMT\r\ncdn-storageserver: SG-712\r\ncdn-fileserver: 631\r\ncdn-proxyver: 1.31\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 06/28/2025 18:22:54\r\ncdn-edgestorageid: 1053\r\ncdn-requestid: 0fe92bbdb3eb0612305eeee2473697b2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25665,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x420, components 3","md5":"21d25152a6d8a3cd5f3fd8d8692da281","sha1":"2f76d94f673f2d7efcca7300f07b291f786ce651","sha256":"2b8d5f8bb2f9b0c7b0096d788748309be7322015ef4d25f6e11ae8c70f2f690e","sha512":"a2910a6df59a9cc6e837de7f3a11153040be962e4c84f916d3e0dcd69aae0ec573878334e4ab9ad6547e6ff8cda21b902a1bd432618cdfcd83a705bacdfc4d6f","ssdeep":"768:2AIkVCG8e6Zx+eja5FPFzIlIN60sO2EID1Ae:2AICHktja5FdsV0a5","tlshash":"dbb2e0182fc36ae02f6a5630370ee92cce91d71a279367b4e021c1c6c199d7a72e39c5","first_seen":"2025-10-22T16:00:54.708804Z","last_seen":"2026-01-02T10:25:34.191183Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-25T18:30:15.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-generator: Mccms comic(http://www.mccms.cn)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=alTN3Og1UTgMpOWvUs5f6IbLoIQdzSByuT1dDYBxiADvywOG5dH%2FtGFri%2BnpASFJNWi1pNoLjGoDKquxoEyTxEBaWGLsYHf3O%2B0E\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=11,cfOrigin;dur=1757\r\ncontent-encoding: br\r\nset-cookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870; Path=/; Expires=Fri, 31 Dec 9999 23:59:59 GMT\r\ncf-ray: 9943c8b8ad100afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":359171,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e4d383eff24c6165ab6d68a029c61984","sha1":"95cb72542180b1ec4505efb2c2f090d475e0d021","sha256":"b56d23ae95c8b595cf1d5576d5dd33475f93fc67da118b70a0503c68d70f47e9","sha512":"af8f8c2f9d4493bf2ddbe215aaf14fd56cef07dd0e6b6e32c8a1135730b4c55a38c268b058a7874b02efd5577417fd67f07f8f09f58ebc2872fa62b8f8b7fce1","ssdeep":"3072:1jPGECQX9wQ534I4I4I4I4I4449jwjFKO6ORNmA:xX9l0t2YA","tlshash":"587410e63cf845f654a793f528297b69fe81da03da134884f1fc4ec04f96c66884b62d","first_seen":"2025-10-25T18:30:48.618248Z","last_seen":"2025-10-25T18:30:48.618248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1821,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":1779,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/packs/layui/layui.all.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /packs/layui/layui.all.js HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 18 Jan 2020 07:53:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMEWB7YmmWMruRPjbLqAnEsMswb%2BwxFGus9D1aHzhAAcR4baGw3803KI0RDy2G7MNsM61uXCkHOmsMV5S84iDU8sBhK8KesMMWmnudQ%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"5e22b974-43fc6\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c4f98b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278470,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65131)","md5":"b0832d3906d2d7a9688ed9c095dcc23d","sha1":"8766e46bdb1d6a9422bf5902988e712c2e2017e0","sha256":"251a9e596ef2859fb0e92e13b4c619e95a131a93b55e48974552d312c75d9514","sha512":"dfed71a34cafde1277722bc8e6519267f3556b08103cb58576cddc80a1be4e62adec9010f4a4f58c14e384aedee1bc5b2d81eab4dc64994a6a0ac11c0c9d199f","ssdeep":"6144:2+lP9ufSF0Mz036TfMf5oQdQzsGywLNEW3sEg:J8wM2QdQzsGJ+","tlshash":"2744499c758574b3237360a6406f990eb1bb097daa0e8020f166d4f66cbdc485277faf","first_seen":"2023-03-07T12:56:25Z","last_seen":"2026-04-29T06:13:23.096051Z","times_seen":182,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 06:18:58 GMT","end":"Tue, 20 Jan 2026 07:18:54 GMT"},"fingerprint":{"sha1":"C7:F8:82:22:3E:BC:9D:F4:7B:0A:EF:A0:EE:C2:C2:D1:34:7E:55:1D","sha256":"EA:85:37:F0:6A:CB:4D:61:4B:3D:2C:58:4B:FF:E5:CE:3C:33:94:71:D8:11:77:5A:C1:99:2F:94:1F:D2:FD:F1"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://t1.xtoon2.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9943c8c5deca56bb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-29T15:31:43.206793Z","times_seen":334205,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":17,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/6a4d2e369a3beaaca3105b24145b7b839fc46a9c.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/6a4d2e369a3beaaca3105b24145b7b839fc46a9c.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 85353\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 05:37:05 GMT\r\ncdn-storageserver: SG-631\r\ncdn-fileserver: 561\r\ncdn-proxyver: 1.30\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 06/26/2025 09:37:38\r\ncdn-edgestorageid: 864\r\ncdn-requestid: d6621e597dbd886cd16f7c7827018b7b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":85353,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x679, components 3","md5":"13807ce05372a30dad692e271d1b51b2","sha1":"0dc70e01f1d9e6c74b84bb0b7e6c7fd7183bc865","sha256":"dcf28fc695581e0ed9d191864b1e906af4a6fee10053627cb0c4b255f49c98c6","sha512":"4275afad5e3162371f0548a7e45b2ef97b9112238256d7e276c5ba0a11566f6e01365bb96deaf8f9418a617b8d6d69813c115ced46d6f24f58d07a7d028974b5","ssdeep":"1536:sYzYxg3fJmfGvVm7Xvdpi2ERO6Nb7UkyGCXMFlweje1pymu5atw:8gvM+vVm7fvi2WDwTEFlw3u35x","tlshash":"56831229689072446f2c41c733bb9c251042ab561fb1a8bec25f38e877c8f74598c69f","first_seen":"2025-10-22T16:00:54.870881Z","last_seen":"2025-10-25T18:30:48.62378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/favicon.ico","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870; _pk_id.1.adc0=e9927bcfbe6d452c.1761417018.; _pk_ses.1.adc0=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Sat, 14 Sep 2024 08:04:44 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"66e5439c-1083e\"\r\nage: 6449\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zrfpn9iUiQa%2F823L2cYLTCOgonf9c2NtqhJdbSjji8%2Fq6n10JvPAvHd42i8sdoECzYEdjcapZICYCcBXoOL243HpWrp%2FYKRX5T%2B%2BwAs%3D\"}]}\r\ncf-ray: 9943c8ca5a9e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"fb0942655ca6278c2c2aab6993c676c1","sha1":"7f18cd7a6f8bcf4c6ad01f1f8528ba5f95d4fc1b","sha256":"74aff363cd33a89575c61de2680a5db242faffb0beda164a6feede208dfcf762","sha512":"003a29f47a84b3be49c417af3f267c0ac7626f698e36718ea0d25e4e9388a7e2834a6959ced8f809d0d105a80e5dc873e81a8738685fc6cd090e836475fdb00d","ssdeep":"96:U3qm1Lr2FNN3yRFLsbumO03m250X7YhbOgn9lFOdFPQqUCfwsawfeu1aTt7:U39LKF6b8Zb0XO5nVOHPnUYrjW","tlshash":"7b636770b6b0e658c4591afb4c19ccfc607dbd126a06dac63bb4fb9eea38d01dd10586","first_seen":"2025-10-18T18:30:36.106249Z","last_seen":"2026-01-02T10:25:34.25184Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/cdn-cgi/rum?","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:18.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1018\r\nOrigin: https://t1.xtoon2.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870; _pk_id.1.adc0=e9927bcfbe6d452c.1761417018.; _pk_ses.1.adc0=1; cf_clearance=VV6WDaWPvlBh0eMwSeWnDRI0Y8.J19ZkmWUwKadifR4-1761417017-1.2.1.1-2I.WBgu9z8X1vEbXgJzzaNTJviJakIi91OrM__OMT8cB4yAVKldYvvfBJos2uSfM7vOaLYkitLh4uKoig89zhhnKsKLlGwfSGQZf31OZx6J9q4kXIGWy2UIxYerBaAbISrGrfocrkymp0JQq2vxjQcQ.k1FAUmrjeM49yJqVG2V678Kj1FrNJ05CCxufEFnZolvekgZJXeA4TpyYx4FwYM72KxWOeFjp9ouYfvfZEww\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://t1.xtoon2.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1Ie3ZudK9pZzWRDI3czbuy6it3Hhw6zhjq9GpPZlJBpm3nJVUHRexVVgrAkzVG7G%2BrUHyLNKKZfQT6peH8ZmbZubshBZzfea6nyqyA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 25 Oct 2025 18:30:18 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9943c8cacab25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/jquery.min.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/js/jquery.min.js HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Sep 2024 08:04:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2PBiYZKEUAJt68%2FYfvd5DVJ8BLbBWV9jyRVlQEsPySUaAEgOPaRuxPokDa7fKfn9krOOV4%2BAfwL%2BEcWAmrv%2BQxtotU03nbRbhra3i4o%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"66e5439c-15d83\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c4e9895a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89475,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-04-29T14:59:21.149031Z","times_seen":15296,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/js/jquery.lazyload.min.js","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/js/jquery.lazyload.min.js HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Sep 2024 04:39:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ngoBGBMW0R0sTLxCqBa0qDMh0omuqmkIjKT%2B%2FDk1y0S5tPH5vvJP1VjtsFSa4lU5UcarIzNLnM6YWut1v51pwBu9LlbDmDDuCaahtSQ%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"66e66517-d35\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c4f98c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3381,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3309)","md5":"89c45121934ed4664ff3ca811a008226","sha1":"848216f1d67cc7c6c6214db1a771f8c4653f06d6","sha256":"e576f12e82c468567e420386b68476ff7045815976395bc6baad1a822c7368a7","sha512":"61a33e6453c52798cf127e93c3163344cea18bdcf31eea042653903b4653b1e5408942d7b3e09b33ac73c667d1b0161d1438cbaee8d517518352c7c88a9bcc3c","ssdeep":"","tlshash":"1861768d7f527839f0567a9e831f3106663ed46f81814c54b0c9ece4ecec7951236d9a","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-04-29T14:26:27.400409Z","times_seen":4849,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/images/bg_home_banner.png","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/images/bg_home_banner.png HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 07:57:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYmuH8OCwxFsHPU3S%2ByMdrGI8a1s4fBJtYUGnSVxHoUl9oS9hYaZFezThn%2FJwFvY4p6474GIyrcZwBdwtFZf7WvfyI0xiqzUzJDRd0I%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6762806f-1867\"\r\nexpires: Fri, 14 Nov 2025 11:52:07 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 887889\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 9943c8c5099c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 375 x 500, 8-bit/color RGBA, non-interlaced","md5":"ebf66c9636a0f6134908290ed08b25e2","sha1":"895b306a06665f5fe2ba603af2aff50bba643650","sha256":"eda4fcf38f221d4bd99ee075d85261fa20b829bd6cd7ca318e1b40f97e380a43","sha512":"a494668933550f3bbc2c0f3f43a60def6e02649b3fa64f8f4a2a917efafa5a1be14bbcc90bf028bd74df2ff23914753ef1ecb52e7c97f04ed13d5f07b4c5b21e","ssdeep":"192:0kRVkRVkRVkRVkRVkRVkRVkRVkRVkRVkRVkRVkRVkRVkRVkRVkRVkRVkRVkRVkRF:VYYYYYYYYYYYYYYYYYYYYYYYYYYYY3oa","tlshash":"add13668f8ec5af7b98e0e8547ad4031dfe30af4f750a4479613458c90f9785a8339e2","first_seen":"2025-10-18T18:30:36.094783Z","last_seen":"2026-01-02T10:25:34.224953Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/index.php/api/user/info?callback=jQuery224042224497878519396_1761417017272\u0026t=0.7744559665341864\u0026_=1761417017273","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /index.php/api/user/info?callback=jQuery224042224497878519396_1761417017272\u0026t=0.7744559665341864\u0026_=1761417017273 HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:18 GMT\r\ncontent-type: application/json;Charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UlpU1JqyEWJpQfEbGe2%2FtaVVPcwh5FdcnKB1DiFzh2rABJSoIP%2Fo00%2B4Rw9dY1%2BQZS%2BZ3wUr52sHS59PedgDBXlZRLiRmTb1ZtytzP0%3D\"}]}\r\nvary: Accept-Encoding\r\nx-generator: Mccms comic(http://www.mccms.cn)\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 9943c8c79a1a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"a6d9184f4a949a86e1aeddc1cd24ad5f","sha1":"6a08e39832f4903abda3ae1300f6a8ba561f76a5","sha256":"0819808c3a89f3ea73e51bcf2826b32681f88935a2ad9eb4fc3b064655bfa082","sha512":"b89e5eac0d2af311da10422cdee0bd3e93cd4dfa6c6a41d05b124445df49b6cc73a761e4775ba6cde5ab59a6e9528a57532550f57ea3b03a2f4be76ec63eeb4e","ssdeep":"","tlshash":"5cc08c6d249d45b2422626e2c817411ac71c4a988e6c528cc824ae1800c9028a91b034","first_seen":"2025-10-25T18:30:48.632744Z","last_seen":"2025-10-25T18:30:48.632744Z","times_seen":1,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":700,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tj.oktoon.top/matomo.php","fqdn":"tj.oktoon.top","domain":"oktoon.top","tld":"top"},"ip":{"addr":"172.67.215.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:20.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oktoon.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 13:47:19 GMT","end":"Sat, 29 Nov 2025 14:45:52 GMT"},"fingerprint":{"sha1":"18:AB:F3:0C:33:3D:DF:6A:71:3D:BE:E0:15:E3:69:15:B4:98:8D:CC","sha256":"99:2B:16:B7:CC:3D:FE:48:17:D5:5E:57:49:D0:F3:1E:58:F6:E7:9A:93:E7:B1:39:77:16:26:67:BD:24:57:48"}}},"request":{"raw":"POST /matomo.php HTTP/1.1\r\nHost: tj.oktoon.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 562\r\nOrigin: https://t1.xtoon2.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:21 GMT\r\naccess-control-allow-origin: https://t1.xtoon2.com\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5quJ7t6fG5j0pV24rKMyH5AWm6TrQo%2B0AvbIXl40i3nMUECFEcs8rDn7UzgOjGtK%2FbBgBDS2%2FUdqvOSrvvjLo%2FgBu6oLj%2FEq62OU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9943c8da3e81568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T15:35:16.745016Z","times_seen":14379833,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"tj.oktoon.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default/css/all.min.css","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default/css/all.min.css HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Sep 2024 08:04:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vYrH4XmfSJMK%2BwIr7lk%2BsH6QLsdWnGjSA2hZ5Dmde1b9twQAOa41icbnpUZM69RN1NI09C8OIOi%2B4StgquFmAYKkdq7LkG%2Fr6SAP4Qc%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"66e5439c-17906\"\r\nexpires: Sat, 25 Oct 2025 21:02:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34061\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9943c8c4e9865a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96518,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58966)","md5":"fbf1f3445f2554bce753c92cf6851b41","sha1":"3c73ff1cd7b97c189f139367dbac43dcf5d2c70d","sha256":"e5e202e3c899507992952533f57b634722b69b34241d271963559d31aa33ef81","sha512":"29cdf6def18112acd39a8b801029d571ec90ab2a9db128aa2d021204bdbd6945b853f33ba523c0fe0114650aafd5cc31e0e9d8c53c6f7b950c839193e8be0926","ssdeep":"1536:E6M1MvMaMfMRQk709/bQZMfjSFOlyPG9dXgRw0J:H709/UGGFwyPG9dwRw0J","tlshash":"559373f8e44c05d97732c44bab55b37c65b6f738d5810ca9f02f590c2ad26a822caf79","first_seen":"2024-07-20T00:27:59Z","last_seen":"2026-04-29T15:42:12.078096Z","times_seen":10436,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.xtoon2.com/template/pc/default//images/19.png","fqdn":"t1.xtoon2.com","domain":"xtoon2.com","tld":"com"},"ip":{"addr":"104.21.21.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtoon2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 02:09:52 GMT","end":"Sat, 27 Dec 2025 03:08:10 GMT"},"fingerprint":{"sha1":"58:57:1D:38:24:4F:2A:B7:3D:D3:0D:60:D5:B8:DE:03:DD:FC:99:B2","sha256":"9C:89:AF:42:3A:8A:49:51:5D:8E:09:CF:DE:CD:B9:ED:67:5D:66:6E:8B:27:A1:F7:83:2B:C5:63:E3:0A:31:2B"}}},"request":{"raw":"GET /template/pc/default//images/19.png HTTP/1.1\r\nHost: t1.xtoon2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nCookie: X_CACHE_KEY=bbbe7ab6b3dfdfc6b97d933f99512870\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 27 Oct 2024 09:36:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R1zS1c%2Brs6OlAM79w8XTOZBmM13iDEhCAEpTofTsc%2F%2Fp6qlECk3ke36PZ6XqynlPhGnWb3wDneQMJvlFF0kyuxoSfly2C7W5Jys2v%2F8%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"671e0980-a34a\"\r\nexpires: Sun, 23 Nov 2025 08:20:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 122968\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 9943c8c509985a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"16b1d1e015460116e89f20858b2f119a","sha1":"05b5f2582892de9a96feee260387aa37c7b4c0a6","sha256":"9a4e49e0597b589cc3c80eb5a5c202bcc09cef48512fb486a3182bb543fa128a","sha512":"e981d733b4c905c0c7f41e116667674286a50e01764a5b935482a046ec907af20e3825441b9b18df0e114b3e381c6d9eb501cc314946c23b39c8635f2c9f9635","ssdeep":"768:K3pUbNpL0PvQbsELk4w5spzyV0OgCgPAaBDpLVB/pxD+klcXB26tiN:EURpLj9vw50zgkbBdVVppdmXg64N","tlshash":"4913f19eeb5b31cb12398f2128bfd6bc968214e6b8d813e29011c7573469e762dc0579","first_seen":"2025-10-18T18:30:35.949879Z","last_seen":"2026-01-02T10:25:34.231838Z","times_seen":7,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/diy/a7b6b31866ad28d4b58f331a533e5c.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /diy/a7b6b31866ad28d4b58f331a533e5c.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34423\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 28 Nov 2024 07:39:46 GMT\r\ncdn-storageserver: SG-560\r\ncdn-fileserver: 864\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/01/2025 18:16:40\r\ncdn-edgestorageid: 1079\r\ncdn-requestid: 5ca81d916e56aee9e62958f99e3a8960\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":34423,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 375x500, components 3","md5":"55a7b6b31866ad28d4b58f331a533e5c","sha1":"8631090a51ab9e2e88e98324e6a4bc04067eff69","sha256":"37f36217a37d38d08a319fbb9afcbdbc40c755cedc45986aef970a228065d9fd","sha512":"1be2d387bc4c2b33513138e8e6bc48d0c1fddb736da76a66285c7dc7a2c809e22d63d84639a79f1da7edecc3c3359ffc0b8298110c86ab07bee7efb9f3dee6dd","ssdeep":"768:zHa+3pMVLQux8XJaMQRppljK3gjDd2EXKk1xQCWEO84:zr3pMVzx8XJaMupplYgjh2EN1xQCWz84","tlshash":"cff2f15df75ec1c9d7d4e3f86060eaac7b32247ef6b2c3dda204a964428021097592f3","first_seen":"2025-10-25T18:30:48.63622Z","last_seen":"2025-10-25T18:30:48.63622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/4ec5ef35b642460ab2d7bca585176f1223751f47.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/4ec5ef35b642460ab2d7bca585176f1223751f47.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49688\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 05:02:00 GMT\r\ncdn-storageserver: SG-630\r\ncdn-fileserver: 561\r\ncdn-proxyver: 1.28\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 05/29/2025 10:03:50\r\ncdn-edgestorageid: 863\r\ncdn-requestid: 3afa36babe4a6fb66a08b2a46353c822\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":49688,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x696, components 3","md5":"47a51e2cdb8573987cba6efce95f739e","sha1":"6173154d16db70206888036ad567274ea249b0a3","sha256":"a667d4227cc782c0f56a8358d56b54f3e89d09b658d11d973bfbb93352bf415a","sha512":"64dc609f46b52095479a43ebdc25fb4369a74804e1ca58f13b5140b453856f5b8abd9e1b46f07c2b278cbfb28a4ff71015ffb06ab2b5f0c5ab2800d48b066e4b","ssdeep":"1536:HF7xDiF1+EE9FOshHTe4wDdc5ybi/mEr2:enEHLhHTe4wDW5y/b","tlshash":"c723f21f9f2308fa425d15e8fff90b70a8293272a8c91de7b1760f66046cbb858454f6","first_seen":"2025-10-25T18:30:48.63839Z","last_seen":"2025-10-25T18:30:48.63839Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtoon2.b-cdn.net/x/dd375831d0067b717c060ad4337a35786bb7e247.jpg","fqdn":"xtoon2.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.37.231","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t1.xtoon2.com/","date":"2025-10-25T18:30:17.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /x/dd375831d0067b717c060ad4337a35786bb7e247.jpg HTTP/1.1\r\nHost: xtoon2.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t1.xtoon2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 18:30:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53693\r\nserver: BunnyCDN-DE1-863\r\ncdn-pullzone: 3044352\r\ncdn-uid: 65799da3-ed3e-4fc6-8889-83fe930f88c6\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 24 Sep 2024 05:36:56 GMT\r\ncdn-storageserver: SG-631\r\ncdn-fileserver: 899\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/02/2025 18:12:07\r\ncdn-edgestorageid: 1081\r\ncdn-requestid: d81026164b60f132b4facf797f5d9d33\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":53693,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 480x623, components 3","md5":"17c5c13417e32135233c0ccf1d7afcd1","sha1":"41ee06b6472417c6cdab759c46eed7d19c5adf78","sha256":"d98af88c3151a769ed373c6c1ec615d4ecb951b80ab18d4d5f5c575b96bcbaee","sha512":"cfbc7d87ffb17e7e3a5a3c5cfc86def65f5e4bab53f06084ed949fc147351b956fae658f18165b10333766fc5c10412c3356e4cd4647a01da179584e551a9095","ssdeep":"1536:4HO/PX1yhsb55Gz9NMWeuKWgH9j4R3x5r:4cPX1yA5g9Nn2j4R3x5r","tlshash":"7833f15c0759ae0c0f779aec8cbf0ba52c13a6bd5940e63e1058ce3a29f5463e58c7d4","first_seen":"2025-10-18T18:30:36.123993Z","last_seen":"2026-01-02T10:25:34.211652Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}