{"report_id":"047571a8-b262-4243-a788-bfac1c8734d2","version":6,"status":"done","tags":[],"date":"2026-04-30T10:43:30Z","url":{"schema":"http","addr":"gz7j-2.qjxxlsw.xyz/category/rrcg","fqdn":"gz7j-2.qjxxlsw.xyz","domain":"qjxxlsw.xyz","tld":"xyz"},"ip":{"addr":"43.230.112.100","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"title":"人人吃瓜 - 出轨偷拍、户外野战、网络吃瓜精选合集 | 51吃瓜网","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gz7j-2.qjxxlsw.xyz/category/rrcg","fqdn":"gz7j-2.qjxxlsw.xyz","domain":"qjxxlsw.xyz","tld":"xyz"},"ip":{"addr":"43.230.112.100","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T10:43:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"api-dc-prod-002.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"gz7j-2.qjxxlsw.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"gz7j-2.qjxxlsw.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"api-dc-prod-001.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pic.mxlycf.cn","ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2025-06-18","domain_rank":0,"first_seen":"2026-04-30T05:30:24.577631Z","last_seen":"2026-04-30T05:30:24.577631Z","alert_count":0,"request_count":79,"received_data":14678170,"sent_data":36353,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.shenfeng.cc","ip":{"addr":"172.67.131.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-20","domain_rank":0,"first_seen":"2026-04-17T21:06:52.624123Z","last_seen":"2026-04-24T23:32:50.706577Z","alert_count":0,"request_count":4,"received_data":3487,"sent_data":2029,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gz7j-2.lzcfenuuf.com","ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-30T10:43:36.957947Z","last_seen":"2026-04-30T10:43:36.957947Z","alert_count":0,"request_count":65,"received_data":3322152,"sent_data":32625,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Parsley.js","description":"Javascript forms validation script.","website":"https://parsleyjs.org","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"api-dc-prod-002.cyou","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-04-23","domain_rank":0,"first_seen":"2026-04-23T19:09:41.770165Z","last_seen":"2026-04-23T19:09:41.770165Z","alert_count":2,"request_count":2,"received_data":568,"sent_data":1023,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ap.dc-report.cc","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-07","domain_rank":0,"first_seen":"2025-12-23T07:41:17.432845Z","last_seen":"2026-04-24T14:00:45.224976Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":524,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-04-26T22:40:43.159605Z","alert_count":0,"request_count":1,"received_data":830,"sent_data":1110,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gz7j-2.qjxxlsw.xyz","ip":{"addr":"43.230.114.100","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-05-30","domain_rank":0,"first_seen":"2025-11-25T10:25:22.580493Z","last_seen":"2025-11-25T10:25:22.580493Z","alert_count":2,"request_count":1,"received_data":270064,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-04-26T22:40:44.257175Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":659,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api-dc-prod-001.cyou","ip":{"addr":"149.104.32.3","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2026-04-23","domain_rank":0,"first_seen":"2026-04-23T19:09:41.772784Z","last_seen":"2026-04-23T19:09:41.772784Z","alert_count":2,"request_count":2,"received_data":568,"sent_data":1023,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-26T22:25:05.471148Z","alert_count":0,"request_count":1,"received_data":523600,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf8fa5196fad54d30e05b310f7e75d02","sha1":"08032754b37c52b42d14b2afb31e7ae2e271d8e8","sha256":"e0b9f5b9bc9613f852de9a3f835983e13551d87145fb0d591315692227656917","sha512":"44eab09c9041853757e5149dbd13433f23127bbe79e74c371fa32d2e06c58421d9b6f33f75b1bfa21c54bd0628d8e8ad4aa3b93af804be19c73f2fc5d4f9135d","ssdeep":"","tlshash":"5c11f06623554cc24ee4b5d37b8b689d2d2561000229b4b9e9568d91cfd9dc4012bff5","size":1099,"data":"","first_seen":"2026-04-16T21:13:44.873678Z","last_seen":"2026-04-30T11:57:47.655122Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/axios.min.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"99714d221df650b50da3b7bf97e2987d","sha1":"493b74178a63429fff2aab081b3a1ca73d362085","sha256":"8ad11c4cb079bba93156727270f510292eedcc0716c6f21725074a59ec8b9b96","sha512":"2520851e12838a54d14577bd6a4fc5276f1d729389c7341a09ddd783c33217a5c58ce0e1cbf60c08cf075b44c50dc90d1d651ec16fa47ef8629f8de12ad27103","ssdeep":"768:Wjp+L+sl7x97+om+oCICTUOD3cQ3F1C+SqImCjL/hQBf/MEVgnyzB/c2OiwBaGcj:Up+b0GUOLMPLJQf/CEB6iwOj","tlshash":"2c33b6cd76d6f06243a77174802f610bf23aad16a44d8460f224ece6bcb854e9337f69","size":52247,"data":"","first_seen":"2024-05-21T19:06:10Z","last_seen":"2026-04-30T12:39:53.73904Z","times_seen":33370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1a7f8805bfaf711f28437f8ab936ca9","sha1":"6f6d4f865195ee84d2cb4349f785ac3e2529decb","sha256":"1c47e66880af5210a71b11dae6f3b7fd15259b6ca025b933604e17850d06d774","sha512":"20aebba0ad67acc54c70b1f7d703fbf3538dabef5b0de519cb75baaadc117eddd3dbb475a669bf0a2b049ed2d54c55110c79c950e1c5ef934947dabc2da0ae60","ssdeep":"","tlshash":"a201241dbae31458b61337389b3f4389787015032428db88f84ce681af60c2594feaf9","size":683,"data":"","first_seen":"2023-03-13T16:33:51Z","last_seen":"2026-04-30T12:39:53.866048Z","times_seen":30591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"17ef3489fc49f91cb65909deb6a725e5","sha1":"57699807bd282f82ba755fd72d9a6e74110041a3","sha256":"08563bd3e7d4836939aedfc1b4d18b09a8ff5d0cf96439dece4fe2c23e5edc62","sha512":"bf8df3efcc4ff4421fe617360f8791c3f5fb953d4e2d326e39beadcacbdddc7145b62633d4aad546ae10366672fe4767bd932d84d11e43962fbe30e3845fe304","ssdeep":"","tlshash":"0fc02b8c210e0c7041fb2b40cbbfbe04b0423314d4e26d33891923445d30f13d744c10","size":153,"data":"","first_seen":"2024-05-29T22:00:38Z","last_seen":"2026-04-30T12:45:41.166637Z","times_seen":8460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1589f1c06c4872197b8ba2d9d5b86073","sha1":"d59a221430503f1421946bb846de34ddfcce0146","sha256":"612cb45d34a0501d9fc838c00bdbf4f787ab130a453e9ed40522b30f55913f76","sha512":"4c5adaa9d870477a6c5842684928b80c4642c0807cd39d96821e5b1bae97c156e3d8073226a169fa17fa6c99ab0819dfab9e56b8f3fb3d488d5c3e9bb561c915","ssdeep":"","tlshash":"724122694906922966451078ad0fe74137ca932bbc4cf701f2ecda087f6ea2de4b5ce4","size":2082,"data":"","first_seen":"2026-04-26T19:02:36.71283Z","last_seen":"2026-04-30T13:11:45.103699Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e50ebfcefd6cb362885dc70437b0b101","sha1":"e6e5d4b64aac6e38387e236b4b02315fe29fab79","sha256":"f1f9bf4ad7f37b1525d117e49369dc6d7116efca1c61f2de3c9b2b837bad2d2b","sha512":"0ff4be125d40b9d058327b4a9878a0a340609b5bfddf9134d12f57e8efa05b2ce3625f97ea0c16e574b3fef4602d377552a5bb5c1e2ec49a66a1b96f3b70d7d6","ssdeep":"","tlshash":"cbc0929c80e3e080a55a2229729e838929f2800b2a96e72bbe1c81486f0059e45385b0","size":144,"data":"","first_seen":"2023-03-08T09:43:22Z","last_seen":"2026-04-30T12:39:53.867997Z","times_seen":30546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6de2fbcc7c834ed50e2f1873c53e4bf","sha1":"fd1d138a7d9d30684557a3664a258d8afa0458ce","sha256":"a8d080afbdb9d28572091a90097ded0beddff3cd784d1c3a9f6536a07c9cbebc","sha512":"8fb29c65e7ed7a437c4afc152cd73019dad0323b62bff02b9c66cc29fa8ecf1d22cb316077e3c77387b73fce7e2321b43699d4a9f2af5946192588c76162d668","ssdeep":"","tlshash":"390176fb78a267b04bbbb03e33ffd345393560031801d9527d0c48a06fa4ea4202aac9","size":751,"data":"","first_seen":"2026-03-04T08:58:20.595878Z","last_seen":"2026-04-30T12:45:41.169216Z","times_seen":8707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab2bcd63fc80d89c823d8815c5f01f59","sha1":"a1ceb22ff604efcbd264d6edef9dc3bb3ea8f52b","sha256":"abecb9bd9743e60dec11eef7f4e0c9bc7075216816e5aad1264247ed87336a6c","sha512":"ed51da49aa702d521d96da1ae1c90fac7f6f28c43859ed639ed2482bee284f90239f2b8de8c2d16ba743fcea6cf839818a3c448e2ba7ec44145035f6627d6317","ssdeep":"192:UDKhafGfAG/QN8QgVa5yvpLkq4mDycdJH06y7zN/0ov/JbVhZ8WRqh9fd5gMlpJv:Uehm1ERBzW0b9px","tlshash":"d4321e0c9ef3546da123703e5b7f5248727981035208cf153e5ce290af61976aaf6bf8","size":11906,"data":"","first_seen":"2026-03-13T10:31:56.759888Z","last_seen":"2026-04-30T12:48:20.843528Z","times_seen":8366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f644ded6bfc5d620f0c03a6978e7921","sha1":"3b83566660b779a041666866b7c81a28959ff40a","sha256":"003ca60c4cf5c0c65a3a2349a9ec7031584bbfb841829c5802b07bce41bcda61","sha512":"bf86cd65413307310fa5915f31d655c5630128345318effaba6d91f1b534fba5dd8b7cdcff7bba38781544fef2b36182ccf52b6dedde1b5713464606b318e023","ssdeep":"","tlshash":"5bf05005d0d386ebd9bb3b1216c74b843ba2698b7ec67f22719cd7499f004ec5478ac0","size":607,"data":"","first_seen":"2023-03-08T09:43:22Z","last_seen":"2026-04-30T12:39:53.876691Z","times_seen":29954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/js/user.js?v=14","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d95cebf26c81a43cc2db9bb3dd2bd4c","sha1":"734e62d7f43f72a137ade8e66e38f693b6256bae","sha256":"1d534de6c385ea7ae90712551fcfea20e61bab348af7745882685635c4f17feb","sha512":"9b60e85ae53d50b4dcc763e6146314244c8651ab93263f2137a135982eaf0b223e054c9fb735dc8ecba2d98c2ae4df2146588c34e321bca7f9846a109210cc77","ssdeep":"192:G4pcNs9UU7MENyT7ACneMrr4bUDUrMVCr1JB7yifGQ/FoWjxk0vwnaI3QUGMugCA:G53Kmuj/J6KUBn","tlshash":"c562730ab1f905624b5361b06b9b2204713195072a0add1c3e3d9bd82f5ed79c2e7bef","size":15918,"data":"","first_seen":"2026-03-26T09:29:38.978452Z","last_seen":"2026-04-30T12:45:41.112459Z","times_seen":7842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea8e7fe5c48608241d91f848527e6c85","sha1":"144333dd95b62488a8c62297ec14c41435400844","sha256":"003d6f8001ec59ef7738debf6f5490d5bc9cf60eabd3523f6a9d731bb9c8c68e","sha512":"e93131448fd373373e64173ec39e5f37533bbedb167f86f8316266599c918d4a1b631f9db6ff79f920f69e29c9444ddbeded6c2dc8a21b28813ea65f1857e40b","ssdeep":"","tlshash":"a9c02b03331ed05d24a4f03a6906114e70480a8f04c063033ecc49e5cb0867f210a310","size":168,"data":"","first_seen":"2026-04-30T05:25:56.815408Z","last_seen":"2026-04-30T13:11:45.107127Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"36c5b99772d821752789e963ed9a3023","sha1":"602e8f9dca590d4922a2905a000dd0ff649574d8","sha256":"5f4794b8ef7384a1ba2983d8e1765f152d17a43dc479c4369903ce50b7c82e70","sha512":"bc1ddb43c233e304b61677916cffb54fa84b1eb41584f00fc05fc8d200092fdbcbd6b147bbeeaf9bb378bf2def24525fbe150ed36a64d50479e5fd6c08a64e72","ssdeep":"","tlshash":"0f1168cdc853067c166b0acb1ee306c82352a58be446c22732edd74e9fc42d458397c0","size":966,"data":"","first_seen":"2023-03-08T09:43:22Z","last_seen":"2026-04-30T12:39:53.877673Z","times_seen":28013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"195f5a2f3c5d7c190b6c0b0ffaa27505","sha1":"d975f0b22fc5665190e11cb5e77f76690d27bef3","sha256":"d650be4c86383fe2863d53f86fb123fd7441ecab55dfb96b95bb0331a41bf068","sha512":"424133ff9c7eaaf2daeb98bd154e389451367a7a0e565bac9dc134d9737a23909230ad2323ea88b44777eba5cc1dc1af8a8900e6956234c46dad1783845fd45f","ssdeep":"","tlshash":"efd08c308771f420c42b0947e733138a30c2420b5644c00bf36ce48c2f18e823aa84f2","size":243,"data":"","first_seen":"2025-07-04T14:08:19.000209Z","last_seen":"2026-04-30T12:45:41.173714Z","times_seen":21105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c430759ada1e4d4aa09251a54cdd256c","sha1":"1e0b4e3954cf567335df57848ce9be405edbc5b9","sha256":"52b54c3ca08caac4a9f3fb8120f45d880b5fbf695c6d2a6a8c356c9e3ef77879","sha512":"64983ed52ed91b778c499e1c299565ee2b0edf700e6821beede4165f003c45d02cfb728cb35fad3b3390963f2517d3ed6c395654ba354ab012f9169c9d1cb05e","ssdeep":"","tlshash":"ede026126f303031e616808f91a512c26cd0035b6a45e892301dd0459fc0856549ace4","size":399,"data":"","first_seen":"2026-03-26T09:29:39.001408Z","last_seen":"2026-04-30T12:48:20.851812Z","times_seen":7343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"63db9ce7ab7280be53c5dcc90cdb5415","sha1":"c765763fdbe06386feaeb168237372284b3396bf","sha256":"1f31676491eabbedee2b447ec9f94b05404ed21dc9c3c7c86b80655056077a24","sha512":"05186a2981afee317a4261a15b7aaeaa3970b23c70fbda57c12c6f057140885343be293d5bb62880c7e38e8df27377ed036d59a3819971aa8123b3e4fa28e019","ssdeep":"","tlshash":"12e02b319c90c4bf441f818ba1b197cefd95184f79055086321c0f5c1f48d721252861","size":348,"data":"","first_seen":"2026-04-30T08:27:13.548254Z","last_seen":"2026-04-30T10:59:16.17495Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"00b37530d28d7329740218fb68db7109","sha1":"724b6094b5fec5142470611a83382aee2bb880a4","sha256":"87b1b9c30aa997bced6ed54a24c6113690170b10b8f8ee14ca2baf2f5cc9d431","sha512":"b0441d4c567f5c2bb8372609a6e164db3a6251ee8ce775721cd88cc7bba1bcdee3add78d871b19659c9062bb691c332b963c4e6b72c15b8a656d3207284deeb6","ssdeep":"","tlshash":"21e05b515ca0987e485b869f92b197cefdd5144bb4055045321c0b591f44d7a1352da5","size":348,"data":"","first_seen":"2026-04-30T08:27:13.551966Z","last_seen":"2026-04-30T10:59:16.17879Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7bd93b25d61cd99e5deb025e1a7f73bd","sha1":"2c612dffa9a3eded0991cd6ac56839e81c933bb0","sha256":"eeb51b32441957ad2151a977eb8ccad2282d22b489608ec7f338d18324ce7ee0","sha512":"798ef89593c7b8cd42982910d4792f2fdc3cfe8935bae1232c359e7b2dae2484b81660b6ae2b5e4b38f99d8700dec032d8367ce078fd7b04de666d242711f102","ssdeep":"","tlshash":"dde02b535d5084bf441b81cb93b197cefcd5244bb4055445321c0f585f58d7b1792465","size":348,"data":"","first_seen":"2026-04-30T08:27:13.55355Z","last_seen":"2026-04-30T10:59:16.180177Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8a2c7102e823b7ec98e98c22260ff38","sha1":"4d99c80ecd1dfc05c3eb72b6bf455f60f27122d6","sha256":"ee81fc4b6cef1d65559c9259507a311ff4ec31900740bd0b47ca7ce2e4505a46","sha512":"7866b4b61db2698ba00f9ff3d37caa2357e468d2a149041bc24308eac57f0cfbc7311b236c623ed3cfb1f6f541dcd044efc4d238ebba2a7e2c9e3e3b46a0a599","ssdeep":"","tlshash":"12e02b316c9098be449b858bd1b1a7cefd95144bbc055845321c0b685f44e721652461","size":348,"data":"","first_seen":"2026-04-30T08:27:13.555295Z","last_seen":"2026-04-30T10:43:43.750905Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/fp.min.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"651e8a7621df82aec717d7f4167872a7","sha1":"eb7aeac758ad5418f7ad1e2044eb09372c661728","sha256":"19c1d80aa4b45bb99edb758e01a5135b7b93465b44afd25e03da99e774b41a98","sha512":"371ccbd3099f7c9cde28175a38f7da751192cc6660bf78de251ba51597c28750634ed661e1ea35764048403bb179311f2ea2c651ab9299d4376ad697aa820b7e","ssdeep":"","tlshash":"e211c24e7e787453a3f905b1c55f7a4e963302dc3de954825684f2501c61829509dedd","size":1000,"data":"","first_seen":"2025-10-24T14:44:38.862898Z","last_seen":"2026-04-30T11:58:46.569641Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/tjtag.3.2.3.js?v=1","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1e6902839f2d563fd002d4edbf05a54","sha1":"2baa8f61a2b91956ed2509879ef01e001688c88d","sha256":"503789f4fee445377e7febc5dc4f38720ff7f5ed08120c6ef37e09339df535d4","sha512":"74dadb73ba557a55c5cccf61363d2498106742cc5b09bd4e0dc97bf95c145360880f8a48803e6cd5df8f0afc681683370645d733ab8ada1de1ff9d3e84f73874","ssdeep":"","tlshash":"0911d061ed98916e3007242fb31e3126c4361e4f294af5dfd9b37c54691e408d4aaaf8","size":1108,"data":"","first_seen":"2026-04-27T19:30:06.575379Z","last_seen":"2026-04-30T11:58:46.605936Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/index.js?v=2","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb453de4d0aa150fc7aeca37d503ed17","sha1":"ebeffdc810fc83601f1a5a190055271b3d091927","sha256":"09acedf483ef711119ca9d2aa8260575fad2a7791aa90c1c1f5133590a403afd","sha512":"fc1be9d0abdb35fc05f5e349f7b0edf6f29a1c2c7f87e46efea25b1bd59d04864d9c22c6008d7d42aef5a7bc06ce85d626aa2f9574088d4b7a018f3094cd5e0d","ssdeep":"","tlshash":"d1712e9930f320b04bb7a47d2babe5083121045b510acd18bd5c43859faca38a9f6bde","size":3514,"data":"","first_seen":"2026-04-15T07:12:26.118176Z","last_seen":"2026-04-30T12:45:41.083182Z","times_seen":640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"62d01e561cb9dec848f245c87c63d65b","sha1":"bde78f24e545ddd30c14ecf98bcb4914b98995ce","sha256":"13214deeb0fc1542764ad5c5ec0bfc0e08629759619395584f5de8c185619df0","sha512":"83d6d02225214dca1e7b687a738404d90acc6ee2c8be22f60547e8303bbfb87040189a03762b3af8bdab19bb435725ba92222c85efe8ad9916c9c22b88f03c3f","ssdeep":"","tlshash":"2fe0cdd1755484bda05bc2df593107cadcd6784f7001b00a730c075e5f40de6a561595","size":374,"data":"","first_seen":"2026-04-30T08:27:13.556885Z","last_seen":"2026-04-30T11:58:46.58663Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"76d0896865f33c69eeb0e4df834c4ad1","sha1":"5334afde89e670cfffba622decf78001c1cfc09c","sha256":"2d64255c18871ef4e2c463ae50caefb08a8bdee6c72119b4b1af25d0b2db9782","sha512":"def785dfce61073412b11a39a51c18886601cd64620e18b35767a7f889c3778468b4c578966cb7922477eb2bf0ce74f55f368221732ba1265ed7b706ddf04bce","ssdeep":"","tlshash":"80e0722566a8c83e6a5782eb82310bcaf8962a0f7005b00a3a2d079d4f00e7a2280984","size":374,"data":"","first_seen":"2026-04-30T08:27:13.558838Z","last_seen":"2026-04-30T11:57:47.676783Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fdb0a8126969136b8aa1624a1b13a5a1","sha1":"0f29af76d495ab831b4620709985f8bdd4f46549","sha256":"44cffa805a1e344dc35f51f503afa231252903d298733a6f1d45f8bf630a8698","sha512":"63558d48ea68758b6afc1162d74fe7257f8a321bdc7fff7341942a03876cb28137309acb6a4dfbc0b4e41c00f9c2bd759691f7398b570b75370015cb6b598d90","ssdeep":"","tlshash":"49e07222656480be402b83dfb92203caecea380fa000a00b321c0f094f88cf692e0640","size":374,"data":"","first_seen":"2026-04-30T08:27:13.56044Z","last_seen":"2026-04-30T11:58:46.587167Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"94bae5437a51b3cff117d91859dc7f80","sha1":"ccb95bace24f1c45647fa67f434c8c49a7c7e98e","sha256":"f3b9898d0be0a6c50c83b7114259713ddb6336bdf866fe8758923c99556a3b87","sha512":"5e06bcde51110a1f7489757e3ef28b9454b7507c66635229f94e25ea0f43476a74313fdf157568cec324f7612d617b90f70fac555e6e9b95b8d06c00c7ee0130","ssdeep":"","tlshash":"d3e0c21a656ac4b94a77c2af91204bcbe9963b0fb405a107321c0b9a5f84caa1251a65","size":374,"data":"","first_seen":"2026-04-30T08:27:13.562037Z","last_seen":"2026-04-30T11:58:46.587733Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c48b30011f6456f079337c48d1b8578","sha1":"488c89287f15fbbb197cf8d1945bef00456f161e","sha256":"32b695c89d7018d02ba8360285b1a873cbd5dfbe150fa87971fbefdce4d78f11","sha512":"6c5768ca9ee320afd258f516e557378395383b843959c07b3ade246d1b51cafaa5216cecbe0b70162eadf6308a05c7ae253f5c10178576fe259e29a4d5ac3391","ssdeep":"","tlshash":"8de0c2256ab5887d556bc6eb96200bcdee9a38cf7401a10a330c078f5f14eb62352659","size":374,"data":"","first_seen":"2026-04-30T08:27:13.563693Z","last_seen":"2026-04-30T11:58:46.588829Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d65072457920968a1dde37d2e710140","sha1":"185c3ae0cc88db2412b4996cb54e950816055424","sha256":"b50e918ba20b987c3adcb7fa520f09b55535750070224e45546bb2866e4b23f9","sha512":"5b5852e9600abfff17836701d91624012692276f9c05c2e9fe599cb5024b7105f7fd7287810b1c91470b304667ab37cea46805768a410b0e3b1a407b4e1e4a35","ssdeep":"","tlshash":"e5e07d1266e8c0bd8463839f5a349bcefc963dcf60017043730c0b0a0f00c6b1350290","size":374,"data":"","first_seen":"2026-04-30T08:27:13.566013Z","last_seen":"2026-04-30T11:58:46.589792Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"87348ce8038a6efb14007fcc5052aeab","sha1":"46faa1b7084f28f4612e09f90b5fd1207af43a8e","sha256":"71b1a393dc55b949f10d25230d567048db2d2783f1136b51a773d9b732a1f805","sha512":"ba57ecbe9f8230a3756fbbecfe87cabae213b141b478a575c4fe278890c38083d39664af682ac41093ade2b6db928d8abe483c7286c2cde4ad56a213f790710a","ssdeep":"","tlshash":"1ae0cd139664c47e906bc2ab4270d7c9fca5380f70016216b31c475e4f80c653252591","size":374,"data":"","first_seen":"2026-04-30T09:00:41.198093Z","last_seen":"2026-04-30T11:58:46.593156Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3bc40cdf04ca95911e7f6057b62c3df","sha1":"ba2c91b12df65b80fd7d1d5364da6bbf09cde548","sha256":"a94e2c97b21034da2c4f6c3e1d1754dada937ea8f319895f12784addc732b856","sha512":"24aaa5a4e34796e52a8e93fd3168842299700c0d868816e0af526de5087d202d2ca0b6be9bcdef01479f8d9a3d13c6e398612e71aebb8d7450b4d1e6ea7d744a","ssdeep":"","tlshash":"cee072125068cc79a023c29f8e3173cafda6380f7549e4023b0c0bccaf40c632328542","size":374,"data":"","first_seen":"2026-04-30T09:00:41.202704Z","last_seen":"2026-04-30T11:57:47.682635Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eda17eb6db7e587f158064e8f0bc1f34","sha1":"373dcf76ef163bac412d1c53bc6011cb0de30518","sha256":"8d48d2bd7417f52b8da4754e141080ba45350bf9f0b0017623891c3a557ede57","sha512":"5cf0c3623ee8d6e027b25f2710a37976c77ecf9239eb879f74d917f8776731d6f94dbd550d065ef13806934d96442370f0e09a6f58d55fba9699b70a9bac2377","ssdeep":"","tlshash":"08e0c222a9a8847ba467839b91b02bc9ea963c0fb443a44f370c0b4e9f44c761152695","size":374,"data":"","first_seen":"2026-04-30T09:00:41.208997Z","last_seen":"2026-04-30T11:58:46.598985Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"29015ff38ff7b5f647945afd003f9587","sha1":"8b84356a3834bc96c6c55cccf58df8184fd4384b","sha256":"51cdc464a7d1460127090f33f1212916c909ac13632ffd9f7e87a97f4d3f3c2b","sha512":"076639dddf62325984c4d9a33401f369eb04d94d646712020137cc8570ec6b604c6166e1714dfa00fcec1a9c8b9ad8e39075bb81fa3108733cfb8a3a958bdb24","ssdeep":"","tlshash":"71e07d125a58843a6073c2af883467cbf8a53c0f7409e107320c070b5f40daa5281390","size":374,"data":"","first_seen":"2026-04-30T09:00:41.211682Z","last_seen":"2026-04-30T11:58:46.599911Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-04-30T13:11:45.133231Z","times_seen":214875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c172ff3d041bb35d46e1baad54c52ab2","sha1":"d8b7504343e93aaa62818596cf5aec67a5c38ec7","sha256":"4ec1721add8b04921f313c79b1145fe2fa8d2468f1b8ecf499fd208e544bb0c9","sha512":"cfe9e6503a248c3dddc69e24ee49a921a9d19a76ac515ab1dcd0aec032d2de35626c36ab70b9d6e3626a1588af45ade624b1d2c812608b7e91cbe07dabcb04e1","ssdeep":"","tlshash":"f1e0c22265a4c4bf80a783ef693a07cfed9a380f7001604a720c0b4d6f80d769562596","size":374,"data":"","first_seen":"2026-04-30T09:00:41.216978Z","last_seen":"2026-04-30T11:58:46.602363Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"08a485cfbe645d5ca2e0d1d44320ebc2","sha1":"d0296b2cfd20b03ebbbf801cf8fc379c87e527e4","sha256":"b0c4645953ea04fd3ca256fe3e175955b85c1b54b85ff228dbb460b006fe656f","sha512":"8159b9d00299e11504d021fa4f923619121db3099cfd78ac0170e036e7f04c8087481e5fcee56c7a67774c41a9c9108367d9938e7cba0143453870203026cf28","ssdeep":"","tlshash":"fbe02bb29d50987f545b81cb51b197cefc95244bb9055046321c0b5c1f44dbe12524a5","size":348,"data":"","first_seen":"2026-04-30T10:43:43.767787Z","last_seen":"2026-04-30T10:43:43.767787Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"777900bc3eb6bc31cd2d602e50cfebd8","sha1":"dd14f2684f059c38526e22eb8b63099896d94c00","sha256":"7960f03ea6788336f70509adbfd39dc2444eb8e837bf2280059feeedcaf69699","sha512":"09305939c623963e852bdbab1494819d6f3972f523abc0f24455bb6225c67fd47f8557fb675ed5b44d9bc5d85f74de994c038b9939d66b177d47f4bf751fbc4f","ssdeep":"","tlshash":"eee05b525c50d57f441fc1df61b197cffdd5184b74055045321c0b591f44d761353965","size":348,"data":"","first_seen":"2026-04-30T10:43:43.769198Z","last_seen":"2026-04-30T10:43:43.769198Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c159bcafce13ab8c059c4923bbd9d647","sha1":"35fbf5f1bda5f18108c3e9204cf6a970db551622","sha256":"172914a1438cf00ab96c2bd5f9a5e4c78aa384acc27c2964a407504bdacc9e1d","sha512":"2fff50cb6cfe8650183cfd9f431fb1ab7bd1cf5f23390613009f6bf060c4a47696b8d32240968de9fb436657be30aac0a5f17d02329081fab16bf990568eb12c","ssdeep":"","tlshash":"6ce02b137d7094be541f81cb55b197cdfcd5244bb8469441321c075a5f44cb257524d1","size":348,"data":"","first_seen":"2026-04-30T10:43:43.773058Z","last_seen":"2026-04-30T10:43:43.773058Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"733b0ad9c103dee859f53deadae5cb6c","sha1":"127aa7729bbe869b768c9f2526967304dd5375d3","sha256":"a4b8940e2f3420e8a4bd2fb3f782b20fa805f6c052209ef2e91fb3e516c50288","sha512":"db2b69cffad5a9962783d1cf939e373a98cba6bf1471a0fdf788319eba860c3d313a65ca9f6b04576e4962a5024d003733bd1fd75a697b60dacbf82c45798a45","ssdeep":"","tlshash":"a9e02b235c7084bf481f828b51b197cefcd1144bb4055805711c0b5a5f08c6616535e0","size":348,"data":"","first_seen":"2026-04-30T10:43:43.776279Z","last_seen":"2026-04-30T10:43:43.776279Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2f6fa69cfdcebcfcf868f34d0496e5c","sha1":"9258e08fb818ea5937df34cbd9ebfb44ec2018c6","sha256":"94167d3bad2446cdc9047ee3005f2f5667204a3abe84a446acbc6152ba1780d3","sha512":"3e10482f3c9fa47283d22c68fe151ea8850485fa1aa4e997108a460975c614d02b9f6f0d7aa86caf187947119e83450f519fa1823b74cfa720fd05af3e930e03","ssdeep":"","tlshash":"7de02b615c70d47e405bc1cb91b197cdfc92145bb5159043712c07591f08c671352551","size":348,"data":"","first_seen":"2026-04-30T10:43:43.777952Z","last_seen":"2026-04-30T10:43:43.777952Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a7953674d0be385e2c288be7558f16b","sha1":"e735d8488df604811e0a5d6cb271f491080050cb","sha256":"00b7f1684a1d5a843f4d1d6f7a96739df12bbf352f5bf255346805677f79124d","sha512":"eb9ef8bb1c93d774103942d47458155eeca6ae9ba0f7bf162d81ef19dcb375699de5c5a724c87f881e0f4f1da21017b6fa8325e2782b88f3d033a5836f08f2c0","ssdeep":"","tlshash":"bae02b515ca0d47e4417c28f61b197cdfd96144b7405d049711c1b589f04c6213a2651","size":348,"data":"","first_seen":"2026-04-30T10:43:43.779664Z","last_seen":"2026-04-30T10:43:43.779664Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce1ec6d20ed00378ec372a7ff2385580","sha1":"0e4589f99da60ba651afef8c10c4d628838310c4","sha256":"276d4695faae5a2270704db1c79acecb0932451357b7d8629218b305843f1445","sha512":"e83120825aa714c10334391f0e96a399ac09b80ceae07102a5b9b1793ae9da3dbc0bf5d1d943b32ee94110bcf47e50cee4273896b783d44ebf5b7c16f4ccb124","ssdeep":"","tlshash":"fde02b625d68e43f401f818b71b19bcdfc92384fb4059002b21c076a1f04c6623625d4","size":348,"data":"","first_seen":"2026-04-30T10:43:43.781246Z","last_seen":"2026-04-30T10:43:43.781246Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/tbxw/js/zzz.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78dab9fcf576de8cba46edd716dd2309","sha1":"7113abe41f95159f9bfccf70d01bdda1055af2ad","sha256":"7c66d6c8e2c470780513a282b66e2b5b7429ed863d6a0ecd6054b38dcda004b5","sha512":"dbb858875e532b475f827c930c154cac09e9a952b20053a0f7e1b34a050100a0a3a41f8aabeeab4af2dd90082363fe3ced3a5957f7250a4918d305b49655e040","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpn6ZFCsUleZ:vZYDc6lXJd1mZpZEdq","tlshash":"da331bc5a19c609153a774d50d7f704bb4637526170d89acf228e8eeecfcaea9039d38","size":50811,"data":"","first_seen":"2023-03-13T16:33:51Z","last_seen":"2026-04-30T12:39:53.791629Z","times_seen":31953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/static/jquery/2.2.4/jquery.min.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-30T13:13:37.385833Z","times_seen":274657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-30T13:33:52.022532Z","times_seen":634867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"55be5132ce31ae5d76dceae0375c479c","sha1":"b304df6c6e30c986aa59eba2cbcd1b1c5023b306","sha256":"1beae871cad9f5aa03433aeee7562c211ed3f800e2cb452c6e51e386f1cd75a6","sha512":"82e4f8811c52069ae63100761833b846791d430f9f680deaf5e55aca841d23bd7293b4292aeb21871a9f28236d2ca391bcd822933544c2a05f5cfe01e75f6c5d","ssdeep":"","tlshash":"5be02b225c64e47e402b818fe1b1a7cefcd2344b74065405711c075a5f44c621352550","size":348,"data":"","first_seen":"2026-04-30T10:43:43.783565Z","last_seen":"2026-04-30T10:43:43.783565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/swiper-bundle.min.js?v=1","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9cadf6d58ee7c472ec17cc71a5cbe09","sha1":"1ff2760a4dbbcb6c9b5b7b5d614041f5ec0f9646","sha256":"ca14261d766828dfc9120faacc847fbafc086fb2948c5e219ac989403ba8ba2b","sha512":"f0fc4bef7db4a44d983ce101de96da366b94a0fd17d5fc8f721713f66f98cce0b602f570aa3134766d5501c86fd4f307bd31d0852b892e99d346a49f69980b4f","ssdeep":"3072:QJVnjuHkOVtuD6poy9v8cnWDkwV4y+6GEcTYEfBxK/Mxz:QJVniHkOVtuD6pl9v8cnWDpV4y+6GTcs","tlshash":"e6d3f8997320b1a552e3268b92a9c611e3b51400b409c4e871bd4c9b6d7e99c13ffffe","size":140474,"data":"","first_seen":"2023-03-09T03:55:40Z","last_seen":"2026-04-30T12:45:41.102008Z","times_seen":20571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd643b01ade6369a3e013d8f3eb4934e","sha1":"69020786b27a7d6365ff482d152e9edd2bb65e41","sha256":"16ca7a94c1a38a59aa43707727f31b35c851dfeb71b617d6284aadbd4de3195e","sha512":"fa3db9105b3480232115b725f0d783d948a5633c712e5e90c574c2137a5b42299e21198b6435cf9249999589d6c6383a8341fbb03e5ed8a23b80303f84e7ec3d","ssdeep":"","tlshash":"e9e02b115c60d43f401b818f51b197cdfc931a4b7406500a711c0b585f68c631353650","size":348,"data":"","first_seen":"2026-04-30T10:43:43.78504Z","last_seen":"2026-04-30T10:43:43.78504Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c7f0c792fcc2756aacf43dc462dd235","sha1":"e338def7955a13ec77484bede344e4e6e076614e","sha256":"c8a0f93252685bba41efc71dd87c46f8e2991cba4cbdc876f3d3f83a5690839a","sha512":"1d0823402d1a523f771ed8d5b9a983f34e282e86434db89adcefb2db0fe1ce7d925c4403ab48238faa67f6b16f58adf7e0bab9bf2d9d03679132160c0e8e9a16","ssdeep":"","tlshash":"7ee02b115c90887f403b878b61b1d7defc92344fb9065846321c075d1f08c621352565","size":348,"data":"","first_seen":"2026-04-30T10:43:43.786509Z","last_seen":"2026-04-30T10:43:43.786509Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e1c88848a67a303b928e28c93d2e484","sha1":"77554b67523f6215d55955e9f80ac08720f137fc","sha256":"0b740b2a59ef5586cf6d20a02a6c5a6b4fa1def0187e8fb40107019911f1063c","sha512":"5039cb6768ddb043925b7e636cc23eea33d0a677d636f5b37478f955c757337c30f3c08ef3244e0dc2c3d5f77dea6f5e2ba3be5e9d51043808d41c9f96ef4398","ssdeep":"","tlshash":"aae02ba15c60a43e40a7819b61b197cdfd92344bb5069001751c075a5f04d621362570","size":348,"data":"","first_seen":"2026-04-30T10:43:43.787919Z","last_seen":"2026-04-30T10:43:43.787919Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/js/qrcode.min.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-04-30T12:39:53.743988Z","times_seen":56856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c38aa0879506d6c2f02ba380878b49d","sha1":"58fd4c0a5e963edef122f79e5aff934ad2f27ec8","sha256":"68c562eada2c725fedbb5ae7430672b2a2d083e4e2294398a4178f523f7b2a22","sha512":"666bfaf0be946fbe0df927edd824a4194b83915e573dd4e4f6e8972c4f856c695608b7baaff19f22352e85c8fee8de5caf7c7aafe26fa766ee92c70e8e47eed1","ssdeep":"","tlshash":"01e02bb16994c47d441f82cf41b1a7cefd91948fb4075085321c07591f04da323525f5","size":348,"data":"","first_seen":"2026-04-30T10:43:43.803418Z","last_seen":"2026-04-30T10:43:43.803418Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"55bd7b9b9e3e8376e27d8a96e482ff35","sha1":"183bcd5328748fafb737892a7dbfc885a71dd779","sha256":"0dad8270163ce76463d1d9ec6ffe1eb0be4bee27d375ea5e306d7a89e002d804","sha512":"3822d33eb301735e298c19c6e1cfe79f47266d264db97d3c4434bc70ce31979458040d7f428b768fa037ed0a4b72a3af8c6dffa33e2bce1db07967cf1033ef7a","ssdeep":"","tlshash":"7fe02b1154908cbd642f85cf45f197cdfd93144b78559042321c075d1f04da21352cd0","size":348,"data":"","first_seen":"2026-04-30T10:43:43.805665Z","last_seen":"2026-04-30T10:43:43.805665Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/popup.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"026709ed231cf8d920385fed59c17ca6","sha1":"19696886744402cb73a48a41e625b23f5acbb813","sha256":"3438d0b2d18590fa1f7f0c324a5ba9f42b699de78006ed372ad043bdf46a7e1e","sha512":"aa01a6f89fad627df9437b5bcf8c3feeb7bb9719d12f12ad8e00d031f3092d1de299ffa4cd98229ddbfd3c455a21934e0e391e1c06d979cfe65fbc0f08cf99e4","ssdeep":"96:P1spJ1L0gLrdAZLLCWICzj3nMjnjOSdFsCaxud:QTo3ZLLCvQj3nMjnjOSdFsCaxud","tlshash":"c4d12f9931f3213082abb27e6faba0143230a0477108dd197f4d5f900fc573a66e1bea","size":6669,"data":"","first_seen":"2025-11-08T04:26:01.83069Z","last_seen":"2026-04-30T12:39:53.798864Z","times_seen":23461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aba9ef9ba94cd30bbda2d9ebaa069bcd","sha1":"5b7c20430215a0568a1d210bfbd46cd44e0354c7","sha256":"22ff2fb011a1c05741cb945baa50867545ac040a3b115c44e163257a20041099","sha512":"508d7f8260ebdc500a7975f5f17e48040edad57cdad77c7000b5b7cdb7556c5814fd7d99ef9967da7a66d086a764d1f11de8b38e65ff07fa1b16d221c9b55bef","ssdeep":"","tlshash":"38e02b1254a0c47e401f868b49b197cdfc95184b74066406312c07591f0cce213635d5","size":348,"data":"","first_seen":"2026-04-30T10:43:43.807728Z","last_seen":"2026-04-30T10:43:43.807728Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8bd839183d113a8d8128bc8db24ae68e","sha1":"bcf114a957dd5ddb3c905ba87792565de9e2a0b7","sha256":"db25af6c354baef516db478d929092df6ccec72f90e459125969f81b00451fd9","sha512":"0b41cd955102817de1357790137d0797536f8f6629e38ea63876232696a7bae81fa129fccc098e391fa81889cf3b96ba3cef91598cad39ca8b6220f045031557","ssdeep":"","tlshash":"22e05b75a490a47d801f839b41b19bddfd95244b78055545323c07591f08de61352dd5","size":348,"data":"","first_seen":"2026-04-30T10:43:43.809517Z","last_seen":"2026-04-30T10:43:43.809517Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"04577b35496c644936ab2caaa01802a6","sha1":"0238eb020522f085dcf0dc39c962f39c55ad5c6e","sha256":"0b6ed9fde1e9bea544e34e8f9cb4efe0696d4dfe90c5553fd22897fe132befe6","sha512":"d43264ef6323efa85a1531ccf0410a648fb6aced72bdcf7a1ed824f934f4b8c3edd81bb22de517c8fb6b39f8287fabeccb01a870b937e41900cf10c1e83f77b1","ssdeep":"","tlshash":"58e02b155490843d401f838b41f197cdfd91684bfc066045321c07791f04ca223524d0","size":348,"data":"","first_seen":"2026-04-30T10:43:43.811116Z","last_seen":"2026-04-30T10:43:43.811116Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"88161b38becc70c5e370cc2e8020c7ab","sha1":"0c5ca5fb20b97f031ed84d7c2eb472f2c8aa78f0","sha256":"830a97b7eb121c3484bbe83bc6acf8370390551eb8ef235c47ae74adb9015da8","sha512":"4194c04167c43b629b95e54e0789e2f5887782686576a6754e201c38bbb4bcbe20e724a87a57f6ffdcdea50358245414e17d713088d12e4bd63ab971b896eec4","ssdeep":"","tlshash":"e5e02b265890843d551f85ef81b197cdfda1144b78079106311c075d1f04daa13528f4","size":348,"data":"","first_seen":"2026-04-30T10:43:43.812808Z","last_seen":"2026-04-30T10:43:43.812808Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"16f79d4bdc7b09842d62244405eb5f6d","sha1":"27e3d6ca2ab21e799163c7b0e39374dd9adeb143","sha256":"b12de914ea82e20317fa69b7bb3f23ffefcd29a61be0d03121c621939245cb13","sha512":"f3bf726d5264524af37871df16e7b109630a76d3c54d9f619e4ac7d23423ebdf86f1276b35a7df2a4a1f1f63dad673f759b39920dba576f3ec482eccbf252c63","ssdeep":"","tlshash":"eee02b725464c47d401f828f41b9a7cefe92144b74055245312c075a2f04c6e2752661","size":348,"data":"","first_seen":"2026-04-30T10:43:43.81426Z","last_seen":"2026-04-30T10:43:43.81426Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"25e38c9ba886e1a8f8da6c5a099b5102","sha1":"b95948c01a3b6055b14679a32585cfda9d1752f5","sha256":"26b8446abe0fa2533ee4dfef193dd5bdc9451e1ea812e519345094f432bee209","sha512":"e3033598b1688a9c097d4e8e29369e2dde6ae7ce9c486e955a5e196cfba491b18e20914bc00875179522fa339872d283bd5476605b4739e4de8052657642cc2d","ssdeep":"","tlshash":"bce02b526450c47d402f828f51bdd7cffed1544b74095206332c07591f08d6e27d3461","size":348,"data":"","first_seen":"2026-04-30T10:43:43.816043Z","last_seen":"2026-04-30T10:43:43.816043Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/index-ai.js?v=20260413","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af16a626bae359731ca7af9d28f36c33","sha1":"7f43a4ed614d1f6dcda18ebc5a68ec6807cf6a3f","sha256":"544604fc234086de418787eb6ce6983f4aae7434b0bc32467615d6de011d6202","sha512":"2ab77763e976add11fe032238f9b76b9645b41568e54206239ef9833312501d300a83b029ea74f829fffa60d262deb5677e5d36123dd6609a937f1ca1ba70ce5","ssdeep":"384:IkSVlcz8cJPkBj/r5pRWSLFwzY18zkJsMNFCoGp5va6Tr6iIiep:MVqz8cJw/r5pRWSZuYRJ/NA7p5Prxep","tlshash":"0413a50a3afb74118567706a2befa0057630a0177209df087f4d87985fc652996e3bee","size":42675,"data":"","first_seen":"2026-04-15T07:12:26.065138Z","last_seen":"2026-04-30T12:48:20.78516Z","times_seen":730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f9707b64c7f6a3953d926f116be6f4e","sha1":"c75d5e6b0dbd1726d749cffd4468148d773ef5cd","sha256":"260af77ac58953434d1c501a6756c62fa5d18554f9c5818b6a8eb1b7c0b8e5f1","sha512":"caa465795200d970b63a93890b2d7c5cbdc812f5334eb7ea3447fb76c2b3331466af23d4dd949ef0eaddba7ede7731f33a2d731f5dc94d4f97969a538a1395f3","ssdeep":"","tlshash":"6fe02b516450c43d601f86cb41b197cdfda1144bb409a241311c175c1f0cd7b1792451","size":348,"data":"","first_seen":"2026-04-30T10:43:43.817394Z","last_seen":"2026-04-30T10:43:43.817394Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-17/50973f8b52b22e20df149e437d3f1f2e.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-17/50973f8b52b22e20df149e437d3f1f2e.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 17 Apr 2026 02:06:23 GMT\r\nEtag: \"acaabfe00221709331a3b6655d1ec89c\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 17 Apr 2026 02:07:00 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 163\r\nContent-Length: 261552\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15033434005716217831\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":261552,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"acaabfe00221709331a3b6655d1ec89c","sha1":"f4e401eaf4e46e2e5168c197a1c23ddb42741ba7","sha256":"07fa756e5ce54a14f45c27309cac3795ab23195c37a1c581ddf972d906dde651","sha512":"2b039830bade3f6d4758d0b07692dea9823aaa766bc79bd09b2561ae956a05cecd9a23729a53fc66ad13b40de832e91845caf73826c8117b04ed8db8b55b7bae","ssdeep":"6144:XzbgFEXhoju3c8PUfiwGMnctTGIgMsX3u5qB3l+kUDPT:XzbaKho63clfrGMcAIgMz5qB3C7T","tlshash":"cf4423825d60e8dcdb18bd1f4960c4c1b0fe4b28f4e6bef66ef006126daca8715e9d45","first_seen":"2026-03-28T08:41:29.80218Z","last_seen":"2026-04-30T13:11:45.055461Z","times_seen":885,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.shenfeng.cc/api/eventTracking/batchReport.json","fqdn":"api.shenfeng.cc","domain":"shenfeng.cc","tld":"cc"},"ip":{"addr":"172.67.131.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:15.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shenfeng.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 10:02:51 GMT","end":"Wed, 24 Jun 2026 11:01:29 GMT"},"fingerprint":{"sha1":"29:E9:ED:51:42:52:E0:B1:7F:3D:BA:85:1B:7C:2A:26:30:6A:E3:03","sha256":"63:BA:19:E0:5D:0F:BA:2C:62:63:00:B8:0D:7F:28:3A:02:D6:0F:B5:FD:F4:EC:7A:94:31:18:75:42:18:9E:C0"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: api.shenfeng.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 1360\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:43:15 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gz7j-2.lzcfenuuf.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rx5PeQknDkFUOcfRlTB2G9jWlbDUsjBtU5Hf4TghnahQm3mwZOY4rNj2EzxLunnI9DglI7NkkIpga1aRiltxLZlrQhbN80kMhS9mlruX%2FvPnteO2lPoWWqzLpON6JMM5Zyw%3D\"}]}\r\ncf-ray: 9f45f1c57da8569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0ab94d0fc1ecb3477a682ada19ad817d","sha1":"e6311ec9ae74beb1f7461c0ae5e81c8f835e0f3a","sha256":"7f86129f0513b8495b7ecf4f1414314df859f22b58b45b9036f4d9e48df30074","sha512":"d2da24f6eda58fd1fa39d5f154744ec618de7a1f431f149104d745db588c59b65ce10f819cc611a7241aa1470d3053c3d69ca57709becdf95e54556d4f4789bb","ssdeep":"","tlshash":"a4800433141c04430501354c00053f04105c11534f100771cc5c4715c75c074f151410","first_seen":"2023-08-16T08:22:40Z","last_seen":"2026-04-30T12:56:55.855272Z","times_seen":835,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2025-12-30/e8e1e023702cb2535fcc5b8dfc237932.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2025-12-30/e8e1e023702cb2535fcc5b8dfc237932.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 27 Jan 2026 14:12:51 GMT\r\nEtag: \"60af2c4d8abb6b3edfa7e5b3f0af2c90\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 27 Jan 2026 14:12:52 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 216\r\nContent-Length: 139488\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8951255126551036464\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139488,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"60af2c4d8abb6b3edfa7e5b3f0af2c90","sha1":"ff01cec91d7ac12be695637f7f9bc1db1846b442","sha256":"33761d1d55e6319804742b0337b23716cfc9bdc57df7664750b11eb6b3b37976","sha512":"88283c6844b67a8bb6f85a933ba88699699caf084097ddd6fd536453892c7cd52f2e244807958a5fa597ddc43c4935cd286347d82fb65f446e8a3ca13df8060d","ssdeep":"3072:VW6g7V1QSflcmvjLY6EyrQatdxQbGxMLCBYIFDvdQpg/YR+rMToePvs:3gXl+CjLbrA5LCBYIFDvF/0+rMTrvs","tlshash":"76d312e10a29afb280c7534bb8925459dc02daf4c66fc66d0d923b1be67e73360945f3","first_seen":"2025-11-17T11:08:20.239469Z","last_seen":"2026-04-30T12:39:53.849695Z","times_seen":17978,"resource_available":false,"data":null}},"time_used":1331,"timings":{"blocked":632,"dns":399,"connect":8,"send":0,"wait":16,"receive":47,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-26/aa17f7d7ff95cc14e137fdb9804613e4.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-26/aa17f7d7ff95cc14e137fdb9804613e4.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 26 Apr 2026 02:42:34 GMT\r\nEtag: \"ec9f02c252933486b84832e4f55fdda4\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 26 Apr 2026 02:43:42 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 383\r\nContent-Length: 442256\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18053097517338961021\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":442256,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"ec9f02c252933486b84832e4f55fdda4","sha1":"2a7b90cb7df2fb6f38cccbac78816a1051fe0e1a","sha256":"0398642488fb13ade1570e6f7d63295fb7b8eb8156e823d2287845faaffc7de1","sha512":"f331e6e4faf0f38446bb26e9775d7d9069ca09d3ac83f6207d24018324b0b5066ade8c4c0e1da06ebedf1fb5d8bc4e2864a4899639f1163858a282292152936b","ssdeep":"6144:RQP136dEnvnPmqQ5fTXqnIYI+Guz9vGr7CpgZt9y3miwRsjgqbGOx0DnF0:Rc36dg+rAIMt9vIZtQhNuOm0","tlshash":"3394232bd64068d5dc638e0b15265ba5c33fa334f3b2938de49765036a8f1ed0a71b36","first_seen":"2026-04-26T03:18:48.612139Z","last_seen":"2026-04-30T12:45:41.054353Z","times_seen":287,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":8,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260428/2026042813245483672.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260428/2026042813245483672.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 05:24:58 GMT\r\nEtag: \"af2269e9bd21026956a5dfff2d45261b\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 12:33:54 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 282\r\nContent-Length: 99008\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11697699634584292124\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99008,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"af2269e9bd21026956a5dfff2d45261b","sha1":"debd0f3b3dcd4feaee19d770471de0c9abc12591","sha256":"d120edd83a6251dfc74f0a97b369b9efeb99d2e8b9cd607258644c52640dc464","sha512":"cd09b7eeb0fc8b47273d924d71d6b00498778d1f490feae711b187cd7556b9c3faed2da9d791574c8c624b71c0f97db665efc816b82dd7a55b6ac2c24bd67ab1","ssdeep":"3072:jBralk5pEwS/uiJrL8MXIiEpk372Ox6wBc/nk:jpgWKp/1L8MXIo6cTBcvk","tlshash":"45a312209745471ed715a6dbd678112c7612dde887b038ffdb3d3a948480ee9d637428","first_seen":"2026-04-30T08:27:13.496184Z","last_seen":"2026-04-30T10:43:43.57811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":532,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-28/5c7d32e885448ccd03d3e309af3759ba.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-28/5c7d32e885448ccd03d3e309af3759ba.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 08:39:27 GMT\r\nEtag: \"7cc759621023c4cb64e838e17b8c7a3d\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 08:39:38 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 12\r\nContent-Length: 124000\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12084777777097759433\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124000,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"7cc759621023c4cb64e838e17b8c7a3d","sha1":"caf8b538a33c2c1f756d53d74d57b841ffb7b5a3","sha256":"5e5228e5d48eb750f536c139c94d6c9a7339f6f2715019fab5a22fd8753e7404","sha512":"d17d354eaa2eb560ac4b8ff8baa34ca51e01486f96d4d742338f39e0fa998215f4163aa3dc82bccc2d5484cce06d6d7da4727babaae84c9e08aaff1461066055","ssdeep":"3072:XQ9D6WyfeHig5gyX5bfxPGhqkQHUWxGfsDz4Cz714OHpo6:HNgz5PGhxXfsP9v2Mpo6","tlshash":"7fc31259c5811b042390de276a3fc78c47ae35be482d925c3a8bb077dbc9534b5a3c6a","first_seen":"2026-04-28T08:47:43.228286Z","last_seen":"2026-04-30T12:48:20.735421Z","times_seen":178,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":579,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/swiper-bundle.min.css?v=1","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/swiper-bundle.min.css?v=1 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 5081\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 29 Aug 2024 12:36:53 GMT\r\netag: \"66d06b65-3e37\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 3Q4EdRWvEOqFgbotKRFmif_DA_G6K37mE4yUktimh4gFfFgN2AAMOg==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15927,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15672)","md5":"4f58978f1d4b2860f7cd2a14aaccacb7","sha1":"ecab9abbe6e9fd3f1f71760d665a6ca09a889065","sha256":"5e47bcf3c1df613cfc0c373b7ae064c7e9ef7b2d3cedba73baa10532068bd256","sha512":"79eb9b500a1711dd9ffe55be53f443a0be9dccffb04323238ebe4d6725c518b9d812c01f4b82112ab22762d757a27ccce7e059fd731da6093d25432d0aff4216","ssdeep":"192:obvmUJbiKneTT4bHZ+SKbP3p/a/AMQfHff21eesedOJ9A5Pz+c3At2/E:oKUbeTMbHZ+VA/AVfHfd4XYD","tlshash":"de62136813402c2753274f364b71cbb9ddb444924b93896e92c0ee84d7b68bd236f6e9","first_seen":"2023-06-27T01:17:46Z","last_seen":"2026-04-30T12:45:41.040836Z","times_seen":20509,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260427/2026042720495829034.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260427/2026042720495829034.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 27 Apr 2026 12:50:03 GMT\r\nEtag: \"68d05e6fc8204ddbf40273c1fba2ce8c\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 09:10:34 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 126\r\nContent-Length: 70160\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17529113968913038060\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70160,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"68d05e6fc8204ddbf40273c1fba2ce8c","sha1":"fe1a466bd72b5957691fdfb94993c11d18a277b6","sha256":"c2ba2b98f7cb00b023d70d3417d3ea59fd7fa255caf5b3d43ae4bd3126c912ed","sha512":"27d9249da9e61f24b263b9e2304444fda9a287ff24efa29da99971935802d88e4777c07f4b03af182365ce26f6db5d0ff103f6ddf94496dbcee4151cf7143d9f","ssdeep":"1536:juowC0yVfgw8M3YLjZQD4mZB5Bx0JRn76Y+RDeao8FCgRDDyp:j84VohMiQD4K5Y6dRDebsxC","tlshash":"eb63026d24fda6b14357cd7aabe247e3309dda12e393474dcaf8b271ec3382085a5050","first_seen":"2026-04-30T08:27:13.435724Z","last_seen":"2026-04-30T10:43:43.582144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":530,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-21/b043123107297fa962a7f5692f67e5ec.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-21/b043123107297fa962a7f5692f67e5ec.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 21 Apr 2026 07:59:23 GMT\r\nEtag: \"e4a11b5ebd62e0c07fef846f15f5e4aa\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 21 Apr 2026 07:59:28 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 54\r\nContent-Length: 120656\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5724813115639116757\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120656,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"e4a11b5ebd62e0c07fef846f15f5e4aa","sha1":"725a8a151c4c5f1364d1a6ce57bee8d68179e310","sha256":"b44b213bd76bcf61bb200b816988ee0c1a8e74f99f5d2451f29101428be96b87","sha512":"cbee944e04d28b04e367c91af71daa78892fa49103a322c8c09822dcf1811f21112f23ca4855b65660f4e22fc6ea9c4f96d0d63beb0d5bb2542c5cbd005bb80b","ssdeep":"3072:CBp0lwJDvSru+hnyazTqje3MNfPTez6AH5tTCaX50zJ:CXg8rR+tyQT6HNnTiHHvFXe1","tlshash":"a9c3125658d856740f48ff3a6b4390c7511a52bbed8ad3f3e908090d9eabfe056e840b","first_seen":"2026-04-22T08:12:01.445937Z","last_seen":"2026-04-30T12:48:20.796419Z","times_seen":545,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":525,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2025-12-30/86b16c3ee0e7d34c8b5b10ccef8d5eee.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2025-12-30/86b16c3ee0e7d34c8b5b10ccef8d5eee.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:30:40 GMT\r\nEtag: \"a7765d45a33330edfbbf67ba0e66f2c7\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 31 Dec 2025 11:30:45 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 72\r\nContent-Length: 308368\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18225390952855779985\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308368,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"a7765d45a33330edfbbf67ba0e66f2c7","sha1":"d12b6a6e34647358ee13355d93174e48a248e1fe","sha256":"9342ddbd6a4e054b0f4450b07577687faa96398e215c46dc51cd1f408e5a113e","sha512":"fc2bd4ac433b9391673b62cdd1a00b8270e9a3824bf4e36348437a6b42eff27c2dfe5339b31ff88444459d33b7e7c86a32bb96a6eddb90a4f01a26290cd80a54","ssdeep":"6144:Jbk1A4+QKHSLfYM33iW5VDfYjeYwAw0K5dMwoY/Xpc4uLf9qo56gFk:Jw74HSEMnPDQs0K5djN/XpNuLVqoQgG","tlshash":"b26423db231e41d3394f0f86850bdcdab9779bba190310b2ec575e59b56da3a2880e42","first_seen":"2025-08-14T12:52:38.397864Z","last_seen":"2026-04-30T12:45:41.029516Z","times_seen":14079,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":560,"dns":0,"connect":0,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20240424/2024042420520686675.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20240424/2024042420520686675.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 24 Apr 2024 12:58:10 GMT\r\nEtag: \"c1c5802148acbf0d397636c2438864a3\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 03:13:29 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 416\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12883815664001615605\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":416,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"c1c5802148acbf0d397636c2438864a3","sha1":"207c403c808c2d35a96f91fc9c4ec3b4275e3ff2","sha256":"1d5f247c4e6ab24d88ad84444e958260cbcb8e401dae9ad61a6d5eda33fa7920","sha512":"cbcf189a7cd26d50b9b76ca36f8fdd5446ef21dc8c726850fa07fa99645df94ad28ecffb3194932e64747621b27c26cb39ab5655fd4b56e2fdd0ac4268255954","ssdeep":"","tlshash":"5be023187631010b65120d2c95700770c673c057577958991102d20de1c972542f9dc7","first_seen":"2024-05-03T10:06:21Z","last_seen":"2026-04-30T12:45:41.025665Z","times_seen":22545,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":665,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/icon-black.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/icon-black.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 243\r\ndate: Thu, 30 Apr 2026 10:19:29 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Tue, 22 Jul 2025 12:20:43 GMT\r\netag: \"687f821b-ef\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: dSWaLPqUFJyIK5J3goA57GOTV0t9doLIUHQn56rSGBSxfc6MBHg6qg==\r\nage: 1415\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 4-bit colormap, non-interlaced","md5":"2b892c414e0a5db08d3f844bcf77536b","sha1":"ac2af64f80e53c7c19535e472458b4cb575ec5bb","sha256":"9b7c59b938d8eb51e01482d5701c27dbb41239e79ddc8445897d23484248f6fe","sha512":"e4125037093ebc4b9bfd69b1e7eae92bd24ed647522f3fc67f2a11499eb6af27ca73e3a4d409807bd7499d7999440d89d7a89f97af2b07f344ef155d02c90dda","ssdeep":"","tlshash":"40d0a7f2c6646c749aaad05603a960f0bc3771771034a15ebb1e40662a3e36a9395a47","first_seen":"2025-07-12T04:18:50.961651Z","last_seen":"2026-04-30T12:39:53.804134Z","times_seen":24586,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/Search/search@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/Search/search@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 634\r\ndate: Thu, 30 Apr 2026 10:19:29 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Tue, 22 Jul 2025 12:20:43 GMT\r\netag: \"687f821b-276\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Nr5uQ76tCSzkKygaBzFwnn6vqOdlpIvXN8rm2pbuSGC8sw-yi5xn1Q==\r\nage: 1415\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 4-bit colormap, non-interlaced","md5":"a4b5282346fb42d90c59fa556c76e8e0","sha1":"0a12261356eef879559d3bc1dae88cf08dc23a1e","sha256":"aa5da5e9cc04a263402c2c75dc6485c929de92186e8efb80ba3c7cd9604bf950","sha512":"c385c6f1f449891870f786d9fc9bf140cb4218633c39b09ce7895b0c8950ae918327a49036b63f793e58dfec8ba308050d2cef338caffc1b6c856eb31893e6ab","ssdeep":"","tlshash":"bdf00251822d7c9bb34b2916c0177762f858d915771113cfcf0aa83c59151d6c2fd209","first_seen":"2025-06-06T19:17:52.685678Z","last_seen":"2026-04-30T12:39:53.800023Z","times_seen":24552,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260428/2026042812071437598.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260428/2026042812071437598.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 04:07:19 GMT\r\nEtag: \"c6edab378b6088774b710c9c2511a231\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 09:32:39 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 655\r\nContent-Length: 93168\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 39078340970673099\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93168,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"c6edab378b6088774b710c9c2511a231","sha1":"50dfb0cf97e18012e0931e7a0f9041cf51e422d2","sha256":"1ce702f2b349bdc3e586514f38c9f9ede968baa479dac2fa1897b14d1d7845cf","sha512":"71a542433ee1d2f06f5888cc3c3417b434a49c10e8d3e64d79ff92604e8f9e3505c59b679895d15f466d70aa72c64ef2de3687788b3443c8609e964014e30841","ssdeep":"1536:fMaOq2eGf4iME2Z6EiRsBNE8jIGFQNbd/I2k+czy9nR/CUKFahmHM2l28a:NZspHsBBFQDk+gyzCOA3a","tlshash":"879312032054b5fbe016f95a32f5bcb9f288c397405a1afc58d850b98605212ebd9f7f","first_seen":"2026-04-30T08:27:13.52666Z","last_seen":"2026-04-30T10:43:43.588831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":532,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-13/b457bc09ae4e40abe171999757c4446c.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-13/b457bc09ae4e40abe171999757c4446c.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 13 Apr 2026 03:24:54 GMT\r\nEtag: \"56e97081356b4cdbe834471cc492b95b\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 13 Apr 2026 03:25:05 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 162\r\nContent-Length: 584704\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18416826065895868453\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":584704,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"56e97081356b4cdbe834471cc492b95b","sha1":"d67ce5aa74e2a4251f44c63e447f99c1a3743db7","sha256":"1e4e7d73225028284447bf5f931e11ea3de9b9bb7a0be6ad221c19f330fe23d0","sha512":"59c8e2883b5962c00febe111abb951891b0768ad39ba0bea023b1b10a457900a997446804b57e811ba2679e3a8076bb906f347e1d529a08b9d661134c95f1c2b","ssdeep":"12288:8gBj1UC/hxPVvpJpEM6OZOShDr38rbs2Odol8ycvxiScSs+cZ0Fu:8gZJDvpJiXujdG+AjAcV","tlshash":"b6c4330457e5510b63aa0be1a78bf5c7df2768dcc826d0587caae3bb5149da3cf31460","first_seen":"2025-06-14T15:15:15.321259Z","last_seen":"2026-04-30T12:39:53.826925Z","times_seen":23402,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":544,"dns":0,"connect":0,"send":0,"wait":25,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20231025/2023102511321783155.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20231025/2023102511321783155.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 29 Dec 2023 00:08:40 GMT\r\nEtag: \"ad473bd0f40ea84076e2363e66e2243a\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 17:52:19 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 63000\r\nContent-Length: 448\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17407532341743993086\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":448,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"ad473bd0f40ea84076e2363e66e2243a","sha1":"c07cbfd2ff1f55c522953b9263c9b13e49385b48","sha256":"6090398a69e190aecc12c1a2a33838ff286c8530df40898d7fe2c6f5346b7452","sha512":"a2fc9a46dca25b7d169ebacc6f7ad1215ed47e2556a63f790b74aaf62b784f7b67d41480a96c46b9c1f5d51e5ebc25e18a4dc67fa00e21cff2ba3a90eafa3a6b","ssdeep":"","tlshash":"e9f02b343d29c0f1a0d1b53b9e54cd01d211724d3d7c41bfd235731607ac5574451163","first_seen":"2023-10-25T11:55:10Z","last_seen":"2026-04-30T12:45:41.046032Z","times_seen":22594,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":649,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20240424/2024042420561566169.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20240424/2024042420561566169.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 24 Apr 2024 12:58:10 GMT\r\nEtag: \"e8ea473291e2351d50cd83d799e46e4d\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 10 Nov 2025 00:51:48 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 880\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13378773668006358778\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":880,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"e8ea473291e2351d50cd83d799e46e4d","sha1":"9339cfb3c5d3ec47c8d7b0abbc42bd80e758aad6","sha256":"7876d5dcedf4ab2894859fdebeeed291c05a294537f95f48f01ce69ca66f4a82","sha512":"fd5e7d6c70dcc183e5ac17efbb6a7dddaa5b441c2cc40a53fa4e8b544a86b8450464af25a6d4434cff846bae456aa9c9abd4d138abdb448213b1ed248ee8eeaf","ssdeep":"","tlshash":"d1111a3300670655367ea34d8ee35f9c52583c194903acbce30e8ec787078129707b2b","first_seen":"2024-05-03T10:06:21Z","last_seen":"2026-04-30T12:45:41.018117Z","times_seen":22575,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":662,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20240424/2024042420561168459.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20240424/2024042420561168459.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 24 Apr 2024 12:58:09 GMT\r\nEtag: \"745e05087f2c2985a982f236036c750b\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:18:57 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 202\r\nContent-Length: 1008\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16316709767642290106\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"745e05087f2c2985a982f236036c750b","sha1":"0ee044b91f7f2e3c88b43f1f3f33d474a032f09e","sha256":"0e492574eefb14856928c6210ed8a109e0ae77e529168ac15d2993d64d4e0953","sha512":"e0dd8a6d0a05a00b4049f721654da619e50575a7466e2e5e7d4ae620ac753c34d78f529b58ce566048cf49fad7d205dbc95da3d519352500229ce0d04723d4ff","ssdeep":"","tlshash":"571165b9805d5187ab6d9b6734ed26aa75e5174de3fb3d5b8261658374040060044c29","first_seen":"2024-05-03T10:06:21Z","last_seen":"2026-04-30T12:45:41.030225Z","times_seen":22373,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":672,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/mirages.main.min.js?v=20251215","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/7.10.0/mirages.main.min.js?v=20251215 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 72020\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Apr 2026 02:53:14 GMT\r\netag: \"69defd9a-4cf14\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Fu-9qgbzA4gpgq0gQVS6itNNGE4lkY4RN6RNPuUMIYQs9icdquYXcg==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":315156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (942)","md5":"e801a3336d048275971bf98814969763","sha1":"659747de5d357cc82c04a82c7b6a44b980ac88fc","sha256":"9903f75439e18802331e0d3ff4abdb668f2d2b1b1d514059d2e3e3f2334b7591","sha512":"f770f151ac5756390ab78ecb79a8c9b51655605505f2efee35387f1102e36e00704676bc5695fcc1f42f7ed8ba7eced8fa46c542b69a6387b3eaeb3329638452","ssdeep":"3072:/VbqwelyE+K3TAO4czuJ19WxZ/Y8f4Sqvw+Uki/uMSB+jonuLzAX:/Vz4TAauJXW3Y8f4Pw+UVuTxnuLsX","tlshash":"0064a40baaf314725563b0bc4b6fa5043231806b5e59fd643e5c82dc4f1d83d26b6bae","first_seen":"2026-04-15T07:12:26.07619Z","last_seen":"2026-04-30T12:48:20.786053Z","times_seen":730,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/image.0821.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/common/image.0821.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 48012\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 09:30:38 GMT\r\netag: \"691aeb3e-4b5b1\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: PVxgdYcGY8y5KLl7RVB_QKlYhaPaVeCSZB8IJdS980PXEODi-fBvNQ==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":308657,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3229)","md5":"5e58c86a740cd6c1821106b20c0c7f48","sha1":"88ee6c584e88c228fa8d67d969d853c0aeb95ada","sha256":"9fead600c0800d0a226d684f2604f4c6f1eaf3528b2357fdac942d450538a442","sha512":"1b907e01624056461d591abaca6780eb3e33a23c0da393ad369e27895b3e09984922c68e8b536ce4794499c70aab341047d9529737c8a3afc4a3df5e00b5979d","ssdeep":"3072:LPP0McCvleCNzRxnnpa9PYetJYRw0qvl+itTRRnnpa9v4+tJ4xQU/9Au:LPP0LypY06pYU/l","tlshash":"1564104a9fe31194f513b43c6b3f6805a1e6b0275ad9dc0e791ca9e0cf29428c579bec","first_seen":"2025-11-08T04:26:01.795335Z","last_seen":"2026-04-30T12:39:53.751284Z","times_seen":23049,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-28/8a39906b8253cc9c5a097a6d6a24a326.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-28/8a39906b8253cc9c5a097a6d6a24a326.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 08:25:25 GMT\r\nEtag: \"dfa9c8431e9c0f3fc152f038952c3423\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 08:32:08 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 674\r\nContent-Length: 180480\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15834913447369562085\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":180480,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"dfa9c8431e9c0f3fc152f038952c3423","sha1":"5bf6c1821ad07354d3ade7ae675445f193dd8cfd","sha256":"563691909e328f9a3d5ea009022fe8003f9fe8e42eb756badc8dfa0dfa3335ce","sha512":"f1ac5d4476489b94db7624535ff30ed92f557f69bbb99c5de31c9b3b9280b9210042d78a9b29195f91176ae96e6543e53a3e8b74fc26011e7a610091ee9036da","ssdeep":"3072:f+zmPgnDdmjXRzqvAA568dNAuISGryOOonqX9tsGTknjII1hRFI2AzCc:f+zrgRqvAA56puvEyOKAGTknjII3g","tlshash":"de041258ee6f0279a240f96df3e65c6892335c9b08867d7040ada5d0f4782795fc3af8","first_seen":"2026-04-28T09:07:09.235516Z","last_seen":"2026-04-30T12:45:41.07801Z","times_seen":145,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":519,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-26/0b88d1204f62ddbaa3f1c9383a597e6a.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-26/0b88d1204f62ddbaa3f1c9383a597e6a.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 26 Apr 2026 02:59:29 GMT\r\nEtag: \"22d74debcba2e9c3b11cb8aadabc97fa\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 26 Apr 2026 02:59:29 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 65\r\nContent-Length: 485824\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1601721597139021254\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":485824,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"22d74debcba2e9c3b11cb8aadabc97fa","sha1":"94dc0bbf2d9badf99ee41c1f05fd7626de09d870","sha256":"eb64172083389ecc7bba05441a76bfbae9431c132e04be348c67846885ad57ce","sha512":"27e54b3a04ba2ffb826ffd1fe286919f0bfc1cf6acff6e5f5a661dd7a780e51cfa189b890abe50868a781d0afa9e2ebf870c9ef3a11ad0bab9ef38c79bbbf002","ssdeep":"6144:GDa4+vI0iJJmYxzPWwFzgjvwW9kzl16JaAAtnf3LtpWLe0AXsyx8C/MVyl6PtgNN:EZ1JlPWwOjvwWU1qk3LtQXpV+G+Cju","tlshash":"30a42358140860938136504a36ddbdb74b4385f6d97b3fa539b8c22f962a43dc3ad8bf","first_seen":"2026-04-26T03:18:48.589644Z","last_seen":"2026-04-30T12:48:20.727825Z","times_seen":397,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":516,"dns":0,"connect":0,"send":0,"wait":20,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-01/206b381a7070d0098e45adff94142a4e.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-01/206b381a7070d0098e45adff94142a4e.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 01 Apr 2026 10:36:31 GMT\r\nEtag: \"aa17b2abf016a6a67f1abc758d9f953b\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 01 Apr 2026 10:36:32 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 528\r\nContent-Length: 223536\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11872195574860953569\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223536,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"aa17b2abf016a6a67f1abc758d9f953b","sha1":"c6e40dc70565bd90849b6752ef3e0f878080b256","sha256":"5e0f020fc8b0c96f00a6a4b22b024f31de337fbd25ab451cafec5cd48afb8d65","sha512":"119bf79be647226e334d685c9898fdac7b4ea4a9e0736fa3a261483adf43aa84202201b55086e6c067d75ca49b0563a4f63b282ffeb1f4dcd3f195e6f63a97ac","ssdeep":"6144:I3CYPO50ViUpOZeYLeeYY7h91QTQpXCHcqzBp:I34k4ZLeeYYxXCH/7","tlshash":"6b242387013b903a7e17913b9daddda170009eb82802aca1c347a4c9d755facf99eb46","first_seen":"2026-04-01T11:04:29.225549Z","last_seen":"2026-04-30T12:45:41.149504Z","times_seen":8459,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":522,"dns":0,"connect":0,"send":0,"wait":42,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-19/dcbb9057bd813312546dca943c225826.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-19/dcbb9057bd813312546dca943c225826.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 19 Apr 2026 08:12:26 GMT\r\nEtag: \"bf2e3809bf412d640822f5569943d4b4\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 19 Apr 2026 08:13:50 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 192\r\nContent-Length: 350528\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5561320562679124658\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":350528,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"bf2e3809bf412d640822f5569943d4b4","sha1":"f7b59d8d3b14ba8d7839a183b351a1222a891e00","sha256":"deaa3948ba53635fbc3af99ce32fc5b95c7521324eb86e1d5badb4f3d7b243a9","sha512":"1148a06529a024e36c952d705f232ec96c34d0d93acf64ca0de8447cbde47787a26110b6068cc525135acb5b88c03357e3df9760b1ff0872036ee91fe0ea3d23","ssdeep":"6144:jPDiIBPn2pBD5hiuc86k60+OelXeUW0fdsYB7NYp4vHkRHrYrNxnquqFm3r391Tz:jGyn2zDVT6kuOmXE0eYFNYVFKNxnYo37","tlshash":"9f7423a85e44b171d20e0c409db34f147366bcafd14cc5ea6a548f8bac46af65fbc788","first_seen":"2026-04-19T08:44:06.1028Z","last_seen":"2026-04-30T13:11:45.037267Z","times_seen":494,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":521,"dns":0,"connect":0,"send":0,"wait":21,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260427/2026042719181012344.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260427/2026042719181012344.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 27 Apr 2026 11:18:14 GMT\r\nEtag: \"e1950fd3f54792ff5c599dd1f294c573\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 27 Apr 2026 15:40:24 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 428\r\nContent-Length: 128560\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14199296375905689792\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128560,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"e1950fd3f54792ff5c599dd1f294c573","sha1":"16fdee86ceff760f0bae4b4e40dd95182ab5f0fc","sha256":"c3bf091ffd1b61d57e4d93a25688ef41d44e28770ac8425c9c1652d70f68d70e","sha512":"653d2e05c0e6ec3348e111d7377666074dd306a493e67ca58953e684efb9f1826afdcec1d2cb2dec3c02e4b1e318257ca0b5c2232cfb55fd95d1cbf83d602ebf","ssdeep":"3072:sbl9bdmO5igr79Cuujy6bMzHUH0YFusfQfYFNcjhB7y:s/MuiEZCaiMg0YFpIfYLsX7y","tlshash":"34c312a8c2db994eed4971646c6f6d41f2dcb6e609c54671ce92ce34ccaad0080aac7c","first_seen":"2026-04-30T08:27:13.447301Z","last_seen":"2026-04-30T10:43:43.596812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":518,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/axios.min.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/common/axios.min.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 21089\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 09:30:40 GMT\r\netag: \"691aeb40-cc17\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: AIbyHd5egaLGpXrlbtqdUBFTMaYGBY7GC9wDad5CLeyNQ7PEXYm88A==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":52247,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52208)","md5":"99714d221df650b50da3b7bf97e2987d","sha1":"493b74178a63429fff2aab081b3a1ca73d362085","sha256":"8ad11c4cb079bba93156727270f510292eedcc0716c6f21725074a59ec8b9b96","sha512":"2520851e12838a54d14577bd6a4fc5276f1d729389c7341a09ddd783c33217a5c58ce0e1cbf60c08cf075b44c50dc90d1d651ec16fa47ef8629f8de12ad27103","ssdeep":"768:Wjp+L+sl7x97+om+oCICTUOD3cQ3F1C+SqImCjL/hQBf/MEVgnyzB/c2OiwBaGcj:Up+b0GUOLMPLJQf/CEB6iwOj","tlshash":"2c33b6cd76d6f06243a77174802f610bf23aad16a44d8460f224ece6bcb854e9337f69","first_seen":"2024-05-21T19:06:10Z","last_seen":"2026-04-30T12:39:53.73904Z","times_seen":33370,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/common.css?v=20260327","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/common.css?v=20260327 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 4269\r\ndate: Thu, 30 Apr 2026 10:19:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Sat, 04 Apr 2026 06:49:56 GMT\r\netag: \"69d0b494-3bc4\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: vc7J3qWjc5DauNcSlW3ZPNo92RBW2sf5HUts-ccSHH-fFpN7RKKFtw==\r\nage: 1421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15300,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"8ccb68e292edb16fed43db108ce7e273","sha1":"7d39a911cda3df00c388a80d631742feec011017","sha256":"5e97433c8fcd70ce3061cd8db6df27592546a60e1d796463f23220871b5fde82","sha512":"2e1faabf2e397811dbe8ee83a03c2d715a1bbd6ddaf2f2b526b1e139f44f3c1564cfd14db87e6f976194ce24b2434fe5c44efe27bdac20fee30c0466cd98b7c8","ssdeep":"384:Q6fYJ9F6C6YjvrDdcqYegaDbSAxB8M7dtqo27Jn:Q6fYJ9F6C6YjvrDdcqYegaDbSAxB8M7m","tlshash":"b162035e0563060069daa5655f6d2ac8166dc00bce0ad56d3edf728ccfce2d4f4e278d","first_seen":"2026-04-04T07:27:39.529964Z","last_seen":"2026-04-30T12:48:20.790066Z","times_seen":6820,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/VirtualList/virtuallist.css?v=20251205","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/VirtualList/virtuallist.css?v=20251205 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 3352\r\ndate: Thu, 30 Apr 2026 10:19:23 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Jan 2026 09:20:01 GMT\r\netag: \"69709a41-3a46\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: t534pGw1tChTlnjj788YlxEkZgvsjtUWk_QCmF9zVCvktIYaSBiDGA==\r\nage: 1421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":14918,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"445f4adfb2a73e5051e2736ea9412403","sha1":"58acf37f0398907cfd89dc53639b25401da65a42","sha256":"eb80348fc71167f273aa3e77e24f0aa7a4b851fd8a2ba7aaf8c0e4e88611e803","sha512":"47fe60b0530fa962ea928b65235d39b90602187bdd494c25a0b4915ad733f6d59e2e1275b558349a05913215c919dbf25174a537ff71754a8efb74fbcd8e18c6","ssdeep":"192:HIjaV2e72zSkaah+oIVNmu3JpL7NBOr2N5Ywwqk3ub7TmfRyPdC+6PwmBV3IKs4m:Hb5LJidrI9","tlshash":"e4629b9c15d22544a49fb40c3eaaf98a621d971bc916c9ec3fad6388cf8df41656238c","first_seen":"2026-01-21T09:49:21.708299Z","last_seen":"2026-04-30T12:45:41.082439Z","times_seen":9958,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-07/c5322187ff28b4676388fc4c17bf4793.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-07/c5322187ff28b4676388fc4c17bf4793.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 07 Apr 2026 12:13:56 GMT\r\nEtag: \"3daf3bda6be3a164e0c20eccab756044\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 07 Apr 2026 12:14:09 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 150\r\nContent-Length: 524080\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9564149190796050713\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":524080,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"3daf3bda6be3a164e0c20eccab756044","sha1":"65ac1e08e2d81365469ce3788d8a0bb8d2fad8a3","sha256":"b78c7202d7fa93e61539b84968a14b34631bf3c74a18ce26abac4c41b6c39989","sha512":"d58341a2dd632995a85948e808f6863c3d6b31c5dcf56bec00890a85d7acc3a1e6176692d5e56c18fbb58d13be5652e66aede178c27aa08eafc32464699943c3","ssdeep":"12288:gHQcTkeFbzO1M0QxgIoODLnpHDFrGUWB6HUftCVUbamspLm:ebHFbzkL4fpjlGlBXftCVt/pa","tlshash":"98b42383ece4ba2b02df1dacff8a9989d55ec4540803b0d3525787821dbaed7778185e","first_seen":"2026-04-07T12:50:39.786348Z","last_seen":"2026-04-30T12:48:20.823321Z","times_seen":1972,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":617,"dns":0,"connect":0,"send":0,"wait":9,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/parsley.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/common/parsley.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 27972\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 09:30:37 GMT\r\netag: \"691aeb3d-1730b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: zox_C4T-ELYr97fiTI3kcqzfAOH7LFmUAHWXbRlTngfYOhPPUop76g==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":94987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (885)","md5":"a442261f7fdcdb3396b2982e7d5ff2d3","sha1":"f2a873ba1e0a2400f6c5f165eb9d4f4d36b4e2dd","sha256":"be43eddbeae875bbc9b68f4a6a95de3fad6798b733dd55f2cdc2bf81a5a33848","sha512":"16aff01ee308ec0adaa0e2be8ee139a1820b2af48f7ba182e595999efa4e3bf64f76dc80dbd9fe6b99152cfe1768bc83cbd0f52013d8cdd17270edf72237743e","ssdeep":"1536:qAj0W4ZuOjkI33R+a0WQ09uH60SkAZzvH6KomR7Gi21l:qAQTuOjkInuH9Sk2vAl","tlshash":"f49371497ae221018d2730bc1fafa0067274811b5409ad94f98d93d0af94d7993faff9","first_seen":"2023-03-12T07:21:41Z","last_seen":"2026-04-30T12:39:53.825065Z","times_seen":23537,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/popup.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/common/popup.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 2210\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 09:30:37 GMT\r\netag: \"691aeb3d-1a0d\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 03BLFQZLGH4ET5z_zsh01f1nbK7C-ROUW0eBZNqxaAMHa6jOZyYE2Q==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"026709ed231cf8d920385fed59c17ca6","sha1":"19696886744402cb73a48a41e625b23f5acbb813","sha256":"3438d0b2d18590fa1f7f0c324a5ba9f42b699de78006ed372ad043bdf46a7e1e","sha512":"aa01a6f89fad627df9437b5bcf8c3feeb7bb9719d12f12ad8e00d031f3092d1de299ffa4cd98229ddbfd3c455a21934e0e391e1c06d979cfe65fbc0f08cf99e4","ssdeep":"96:P1spJ1L0gLrdAZLLCWICzj3nMjnjOSdFsCaxud:QTo3ZLLCvQj3nMjnjOSdFsCaxud","tlshash":"c4d12f9931f3213082abb27e6faba0143230a0477108dd197f4d5f900fc573a66e1bea","first_seen":"2025-11-08T04:26:01.83069Z","last_seen":"2026-04-30T12:39:53.798864Z","times_seen":23461,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/img-placeholder.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/img-placeholder.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/search.css?v=20260414\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 9209\r\ndate: Thu, 30 Apr 2026 10:19:29 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Apr 2026 02:53:11 GMT\r\netag: \"69defd97-25da\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: K50EKuYtreWRNQBpnTMnJ17EsFLsDK3FDZKWbqzsbCOBrGCPLD1gbQ==\r\nage: 1415\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1900 x 558, 4-bit colormap, non-interlaced","md5":"7cdd409365344df5309615f783e1a33d","sha1":"973168e3e3ae97af7f14f536865354bea3de3a2c","sha256":"adc742c831c9edda144963c0e26f0c7f85d931d237694cc51971b9ac57443920","sha512":"e7b27426fef5e5adf3b8947064cfef3ad5e5af756e38b4f08bfb53c69599285d482db4333e6daca781a0c3f3b10fb88fe90a582998f1a2eaa76c0fe3d5a85fc8","ssdeep":"192:YJQx6L+VUMb86sDtTZxNLhYD8XTT3RZbvlG0EOkptyG2RyKzkD2GeoRMCem6t3NE:OQK+ueJsDZzhRds0EcGqyKoXfaHXi/F","tlshash":"d9128e9c42d326b463b41cfc1d952df8905191120e426286abfee07f49c5fca2cebb58","first_seen":"2026-04-15T07:12:26.119732Z","last_seen":"2026-04-30T12:48:20.789254Z","times_seen":718,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20231026/2023102620184376167.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20231026/2023102620184376167.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 29 Dec 2023 10:47:00 GMT\r\nEtag: \"690d560840f8d9cee1ff120270fcbd88\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 09 Nov 2025 17:45:05 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 25601\r\nContent-Length: 880\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6328854492713128671\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":880,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"690d560840f8d9cee1ff120270fcbd88","sha1":"246376e425fdd500d98060cafdbd0117d8f6edf0","sha256":"2a040f5c1e9cc1a4a915caa5148db70d4677ac31b5170af578590b049cb42a55","sha512":"d1593fbeaf0721e39b02dcb9b6e6b1d0b40c0c5306f5b9189bc9638b02b76ddd4b6f71278c7b81a084f2237ead91af43241caaf8467810c6413e46953edb9b6d","ssdeep":"","tlshash":"3d1163c3c089449600bd12724efa62460e3707c2eedb32ee6158c39f9044e5b8ef4d6a","first_seen":"2023-11-12T15:49:18Z","last_seen":"2026-04-30T12:45:41.09413Z","times_seen":22521,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":660,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/vant.min.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/common/vant.min.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 89193\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 09:30:37 GMT\r\netag: \"691aeb3d-3b3ee\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Mi7mZkWwT7RfJmnRyoaS5aCCp0alPVlIvZmIKuuLGUn0M6_vvh7pvA==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":242670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36859)","md5":"48c71ec4ea36fdd75033bbb278a861f3","sha1":"b47d16bde5c94e468ef249bd2126b846a39afe73","sha256":"0b18e273bc785dd0e5cc43218ee879bce10461fdf3b1274a1f2c8962aaecb49a","sha512":"bd3e587cf0fa0c2d777e1918b2067a2a2cce648996ea7e490098d609b20bacec6c2fb6dbe682ac1e212eafe2c1e33364a8cde40439ab6d24638b9b23b69489a1","ssdeep":"6144:XEB3BhYNbHp+fvbtgMAgMgQ8dOq11tUxLEm+Om0RbU:XEBIHpevogQ8dOw1sEam0R4","tlshash":"d23439a0f685f42547b790e6507a0610e1290b48f009d1e0f57ded8e2aede94b6bef7c","first_seen":"2024-08-02T14:48:31Z","last_seen":"2026-04-30T12:39:53.832549Z","times_seen":32451,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-03-18/fcff7a5519c5585b84022fb22eb9b990.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-03-18/fcff7a5519c5585b84022fb22eb9b990.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 18 Mar 2026 11:14:20 GMT\r\nEtag: \"b623e1b55f0930c825f1f77ccf2aa695\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 18 Mar 2026 11:14:20 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 40\r\nContent-Length: 312944\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4523833857103767937\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":312944,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"b623e1b55f0930c825f1f77ccf2aa695","sha1":"2a3fa46412096622bfbf0c8c804e3569563ab50d","sha256":"257c25438d69e04240ed40ad37b4a28caf7fd4aabf061e969ee9235a79f6ba91","sha512":"9640217cfc3e64b0b3f5d8e1c9dc97949071f55ad898a1d2299fb29fdf3e429aaba6a05d5d8c9f00cd6878ab95e5b84db7bdd41e9bf1ee5f72c3d70e5a76e638","ssdeep":"6144:TN11eIfw2XlBj5XN+lXYm2J0ytC/xxX8lTnOJ2xk3/qtXfD:h11eIPT54YCykpxwTnOJX3/wX7","tlshash":"a5642310949180eb15cad88a5ecf5a30a2afc993d7afb41af0d3974b50ec7e93311b57","first_seen":"2026-03-18T12:48:21.453772Z","last_seen":"2026-04-30T12:45:41.015457Z","times_seen":10266,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":559,"dns":0,"connect":0,"send":0,"wait":40,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20231025/2023102511321748042.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20231025/2023102511321748042.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 29 Dec 2023 10:48:33 GMT\r\nEtag: \"0a924cade949087f8b6bf7313aa986ef\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 17:35:53 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 63986\r\nContent-Length: 480\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 490005485765980293\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":480,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"0a924cade949087f8b6bf7313aa986ef","sha1":"056a7262d79428dd375e0804bb442f31d8c8c075","sha256":"bed19286a8429e9bba96a38393b3e23dab3449f3080833745238aab768ea7bdc","sha512":"20f6cd8832039db48068c7176c216dea73aad21c694784c0c5ed352c25f7bbad9907fca1b3c58e43ba73d26ccb7b54218b571b79ca76f03914efda6156855d75","ssdeep":"","tlshash":"0ff054bf501576ec00345ec404a5d026351e90cf6f4dac5f91d0b2c30e1ee643207180","first_seen":"2023-10-25T11:55:10Z","last_seen":"2026-04-30T12:45:41.116323Z","times_seen":22536,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":663,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-P6HKH41365\u0026gtm=45je64s1v867709946za200zd867709946\u0026_p=1777545784255\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1780620998\u0026_eu=AAAAAGAC\u0026cid=1535918992.1777545785\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115616986~115938466~115938469~116363098~117266401~117512543~118463262\u0026sid=1777545785\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fgz7j-2.lzcfenuuf.com%2Fcategory%2Frrcg\u0026dt=%E4%BA%BA%E4%BA%BA%E5%90%83%E7%93%9C%20-%20%E5%87%BA%E8%BD%A8%E5%81%B7%E6%8B%8D%E3%80%81%E6%88%B7%E5%A4%96%E9%87%8E%E6%88%98%E3%80%81%E7%BD%91%E7%BB%9C%E5%90%83%E7%93%9C%E7%B2%BE%E9%80%89%E5%90%88%E9%9B%86%20%7C%2051%E5%90%83%E7%93%9C%E7%BD%91\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=2220","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:06.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-P6HKH41365\u0026gtm=45je64s1v867709946za200zd867709946\u0026_p=1777545784255\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1780620998\u0026_eu=AAAAAGAC\u0026cid=1535918992.1777545785\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115616986~115938466~115938469~116363098~117266401~117512543~118463262\u0026sid=1777545785\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fgz7j-2.lzcfenuuf.com%2Fcategory%2Frrcg\u0026dt=%E4%BA%BA%E4%BA%BA%E5%90%83%E7%93%9C%20-%20%E5%87%BA%E8%BD%A8%E5%81%B7%E6%8B%8D%E3%80%81%E6%88%B7%E5%A4%96%E9%87%8E%E6%88%98%E3%80%81%E7%BD%91%E7%BB%9C%E5%90%83%E7%93%9C%E7%B2%BE%E9%80%89%E5%90%88%E9%9B%86%20%7C%2051%E5%90%83%E7%93%9C%E7%BD%91\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=2220 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: null\r\ndate: Thu, 30 Apr 2026 10:43:06 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T13:35:14.666833Z","times_seen":14425156,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":20,"dns":0,"connect":21,"send":0,"wait":31,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/js/user.js?v=14","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/js/user.js?v=14 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 4274\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 26 Mar 2026 08:53:44 GMT\r\netag: \"69c4f418-3eb2\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 5WmkNzsnprSpL2jP2JBcZDk4E9TphZR9P3KDgLJrdyr6FL_MH-4vXw==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16050,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8d95cebf26c81a43cc2db9bb3dd2bd4c","sha1":"734e62d7f43f72a137ade8e66e38f693b6256bae","sha256":"1d534de6c385ea7ae90712551fcfea20e61bab348af7745882685635c4f17feb","sha512":"9b60e85ae53d50b4dcc763e6146314244c8651ab93263f2137a135982eaf0b223e054c9fb735dc8ecba2d98c2ae4df2146588c34e321bca7f9846a109210cc77","ssdeep":"192:G4pcNs9UU7MENyT7ACneMrr4bUDUrMVCr1JB7yifGQ/FoWjxk0vwnaI3QUGMugCA:G53Kmuj/J6KUBn","tlshash":"c562730ab1f905624b5361b06b9b2204713195072a0add1c3e3d9bd82f5ed79c2e7bef","first_seen":"2026-03-26T09:29:38.978452Z","last_seen":"2026-04-30T12:45:41.112459Z","times_seen":7842,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-13/0b2fa311d35d9d94a896109cb8ac85ed.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-13/0b2fa311d35d9d94a896109cb8ac85ed.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 13 Apr 2026 09:06:38 GMT\r\nEtag: \"96aaf9fbfe0af21e567e87a4cb133529\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 13 Apr 2026 09:07:01 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 130\r\nContent-Length: 489168\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17720200956661253524\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":489168,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"96aaf9fbfe0af21e567e87a4cb133529","sha1":"7f0798611b7457f29675257b3f228aa6f6b36662","sha256":"c1356bf0c8d43f5b985fab267cb8615f3cbd2169feed3adbaa277b03cda59a0a","sha512":"f3613c36112f85b009810b386cc6647a4522c4db85b3f837765330352df251ca7e12ecf909d66bf00e3164a835b7993db8f57b6982baab6d4026bfd3100eeec0","ssdeep":"12288:hZki+ROQWgIlg/IgdgNLTygitAm6q6YYzcpf6BQa/H:jkcbgIlZKgBq6YYwNXav","tlshash":"75a423d08e9b990428e1b80da70c4b0cc58c3643f9b6af721579b5f7db7b128b82dd56","first_seen":"2026-04-13T07:59:55.505218Z","last_seen":"2026-04-30T13:11:44.968056Z","times_seen":742,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":498,"dns":0,"connect":0,"send":0,"wait":10,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2025-12-30/b0b6d72cb3831e4af86d892f5322f51f.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2025-12-30/b0b6d72cb3831e4af86d892f5322f51f.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:30:36 GMT\r\nEtag: \"4d4782772c66197e7bb72273464acbcc\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 31 Dec 2025 11:30:36 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 182\r\nContent-Length: 266704\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4565822109151287398\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266704,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"4d4782772c66197e7bb72273464acbcc","sha1":"bb5180f3a210440991063df7c71a5f2a73235d66","sha256":"d1b7c5ceaec125a25f11bc63a88adefca0ebf8d4fd47586ac9e5e8c86d94c10a","sha512":"a9f581a25de284a7a4496c8d4f601f60b686cf7048ec0b9015e3131fbdef9e6a43af3c91fe84ba4e7335f516bfc38e28f07580bed9393be30a0943bd41ed2185","ssdeep":"6144:HZHcEA6bo7O9Do4nLk2E//R/+YFihoUDtUeZ7:HZ8EzSOhos4DWYFihoUBD","tlshash":"324423cb5875e0a1541ffa2ee80de01da06ad1fd46e4dda886adf2c53f13805c1f2a8d","first_seen":"2025-11-23T05:10:59.088648Z","last_seen":"2026-04-30T12:39:53.827428Z","times_seen":21716,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":619,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/layui/css/modules/code.css?v=2","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/layui/css/modules/code.css?v=2 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 545\r\ndate: Thu, 30 Apr 2026 10:19:24 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 14 Jul 2023 10:00:50 GMT\r\netag: \"64b11cd2-527\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: kxeOKs87FmtMTV_3c8FfA8nMfwedmgqvIMb3wvYgA8bUUasz-2O2hw==\r\nage: 1420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1319,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1319), with no line terminators","md5":"986d0d70b033a195fc1bd1527b06993b","sha1":"69ea79bb09bddd3b988db70ef8b10be9ed0f0065","sha256":"3f27194c2e479212781a76f993b778d724ac9838e780b19472c0357cd3081431","sha512":"a3d1ffa0ba90c8ed8f1330c456760ad7098b683756f1f5d2aae6ec89502c0fe1ff6287e7b1180b9df8f50d517118b610566e9315de055d4780a230488eda10e0","ssdeep":"","tlshash":"d721493aa3852118354bf21574fcbcbca03cb1d6a5ea0eaaff416797c944c51083674f","first_seen":"2023-04-11T12:12:51Z","last_seen":"2026-04-30T12:39:53.802266Z","times_seen":31816,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260427/2026042717364329177.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260427/2026042717364329177.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 27 Apr 2026 09:36:47 GMT\r\nEtag: \"4c216f6562cd3f14949baf3740617440\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 02:35:53 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 475\r\nContent-Length: 61376\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7454935386072361014\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61376,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"4c216f6562cd3f14949baf3740617440","sha1":"13d219ed9cb9787aa9a53ef811278a3ef74fcc9e","sha256":"4c44ef187ed03ba3987740b9ac625904d969cf553fdc7cd9ecf530abd681893f","sha512":"cee7937a4c63f0528ad7a477ec58ceb5d2e1628c10861ed9843a1883c416bdb8bed30d1639b279d77a7d5730536c88ca2584a874fb722d401636232f3baec6e6","ssdeep":"1536:Or5pbT5/cvtM3tm4OXM+iHj88+aJ9gHDAlXc1j:O1hTd0XAHjJ+aJ9gHSXc1j","tlshash":"7753020024682b7ae4cfb5ba6812704f94d43587fdaea8c5a9fc2063773f91b446cd8d","first_seen":"2026-04-30T08:27:13.343199Z","last_seen":"2026-04-30T12:39:35.510798Z","times_seen":3,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":518,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-02-25/e53e1cb975ce3e81a8ddd8f23beee2bf.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-02-25/e53e1cb975ce3e81a8ddd8f23beee2bf.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 25 Feb 2026 10:54:04 GMT\r\nEtag: \"b328c0c7d21077dcc512724fb6fbd3a0\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 25 Feb 2026 10:54:09 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 53\r\nContent-Length: 343744\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1563362304010042326\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":343744,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"b328c0c7d21077dcc512724fb6fbd3a0","sha1":"9c4cf075979de4b4bb02a22ac07d15f603154c73","sha256":"8ffd21d43f6ce8070ae9c78f2ef752d5f1bf8ef1cd65358fe9b7a361940f61c8","sha512":"73a56db882e239eff6b0e1b8c9a3c2c0e71257b1ba8b15805c71f1e63449503b40bc0e78f6077ac0618570ceced37dbe5c697c4c5ed477ad13f1481a2d5e8da7","ssdeep":"6144:NAqzpp4tb+UBk8NlKEAkkf2ehkPDH+7+m3OJSdWUiHxB9eJhHQvuFzFxgwAT7D9M:dpOHBTNUzf2zcSUiHxBQHfF6wAT/KcA","tlshash":"c774237314d928aea8e7c82c697b473311fcfaeb64387f5346de5bcd25058d104ea84a","first_seen":"2026-02-25T11:08:48.248298Z","last_seen":"2026-04-30T12:45:41.050227Z","times_seen":11487,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":560,"dns":0,"connect":0,"send":0,"wait":31,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20231026/2023102620184263484.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20231026/2023102620184263484.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 29 Dec 2023 10:47:00 GMT\r\nEtag: \"946b371c92f41dbca23c565c90e21f03\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 14:05:37 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 76602\r\nContent-Length: 688\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1829276541418325665\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":688,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"946b371c92f41dbca23c565c90e21f03","sha1":"a6a99ac271f1bc2b2589ffd9811dc10b6079e927","sha256":"9f48835d6b4ad4d6310dfb1b45049caafd7517008223e12b7003cf06080e4ad3","sha512":"af96d4ec2af6ad354f58d1319b35c30d9eab05e2988f5569223cfaed1cb0b06f1893255d459963aeaf89a0f4728b505715f31c1baef587935420edc3eebfd1da","ssdeep":"","tlshash":"f40144f482df411d82a8de89623063e4320e98063761c351f522d9f41d602b7444aff4","first_seen":"2023-11-12T15:49:18Z","last_seen":"2026-04-30T12:45:41.051029Z","times_seen":22534,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":671,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/swiper-bundle.min.js?v=1","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/7.10.0/swiper-bundle.min.js?v=1 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 45534\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 29 Aug 2024 12:37:03 GMT\r\netag: \"66d06b6f-224ba\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: i5Xzttcro0kuldRKN_EXDCcRN8zmZDi9JqwuiMQiBdTefSzVQJ1fDA==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140474,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65282)","md5":"f9cadf6d58ee7c472ec17cc71a5cbe09","sha1":"1ff2760a4dbbcb6c9b5b7b5d614041f5ec0f9646","sha256":"ca14261d766828dfc9120faacc847fbafc086fb2948c5e219ac989403ba8ba2b","sha512":"f0fc4bef7db4a44d983ce101de96da366b94a0fd17d5fc8f721713f66f98cce0b602f570aa3134766d5501c86fd4f307bd31d0852b892e99d346a49f69980b4f","ssdeep":"3072:QJVnjuHkOVtuD6poy9v8cnWDkwV4y+6GEcTYEfBxK/Mxz:QJVniHkOVtuD6pl9v8cnWDpV4y+6GTcs","tlshash":"e6d3f8997320b1a552e3268b92a9c611e3b51400b409c4e871bd4c9b6d7e99c13ffffe","first_seen":"2023-03-09T03:55:40Z","last_seen":"2026-04-30T12:45:41.102008Z","times_seen":20571,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/Search/pc-nav-icon-tg@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/Search/pc-nav-icon-tg@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 728\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Tue, 22 Jul 2025 12:20:43 GMT\r\netag: \"687f821b-2d4\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: kkNUK0NcXJxNMXC8l4Vh06WR00J5Dze_D7eQmcfJ1S1jauHbeOpy-w==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"f85347d7d3b89528c8ed9b2302cffd75","sha1":"f867345d5d76084326d8e0fd56165e943887c1b2","sha256":"0d4dea28dc89bf49c23d0b981000855ab6b6353641619c737afe4a1581ebfee1","sha512":"90da37dce95e7282af9bff7b041c2cd4c5becea138cab3be876170067c8480398981bcdc0b43185f08e7fc0e34f921c92dc118e8fb3aa9608626cd9b9efb70e5","ssdeep":"","tlshash":"04018870f1841d38cd34a85c9c73abd56e019d0b1354f062c8d5bd747dfc04eac45420","first_seen":"2025-07-12T04:18:50.990855Z","last_seen":"2026-04-30T12:45:41.051769Z","times_seen":22588,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-17/95c79c3298475f2a620b09555dab3eb0.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-17/95c79c3298475f2a620b09555dab3eb0.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 17 Apr 2026 07:37:02 GMT\r\nEtag: \"83901493a764849955404722280291c9\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 17 Apr 2026 07:38:19 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 330\r\nContent-Length: 467904\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17553529151548487068\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":467904,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"83901493a764849955404722280291c9","sha1":"0e2741c89ca493741ec62e6ee7ec19550df0b5ef","sha256":"79c0d29d1432edc5f07380ccee2a3b413267b81b6fbcb1fa4e9356c17421ccb0","sha512":"22496a3cb177d74a0d741b4ff66823791e5997b1e3d5d33d4ae6525673c227c43e888239551cdfca0f042d75adec03f84e66c5ebe8a47cd541fb2272319a1367","ssdeep":"12288:C7rC2d2JKJcFbM9fBS5VSkAGJjkFI818s6kbChdL6MKK3v:C7r3d2JKWtwf2VSkdeH8xkWhx6Q/","tlshash":"4ea4239d5f2827c11b8d7abc7d58da67afa43f14c3348901db0b61649a13ba346f482f","first_seen":"2026-04-17T08:09:25.572436Z","last_seen":"2026-04-30T13:11:45.011996Z","times_seen":677,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":511,"dns":0,"connect":0,"send":0,"wait":16,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-dc-prod-002.cyou/api/eventTracking/batchReport.json","fqdn":"api-dc-prod-002.cyou","domain":"api-dc-prod-002.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:06.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api-dc-prod-002.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 13:55:49 GMT","end":"Tue, 28 Jul 2026 13:55:48 GMT"},"fingerprint":{"sha1":"E2:76:5B:F7:27:C9:73:D6:04:E5:F7:DC:A5:7A:C7:F6:7A:DA:3A:75","sha256":"8F:1F:6E:49:61:08:13:E9:B9:AD:27:2F:37:49:94:A0:AF:57:F5:EE:E3:DF:F6:AD:68:B8:29:20:47:C7:B6:F7"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: api-dc-prod-002.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T13:35:14.666833Z","times_seen":14425156,"resource_available":true,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":157,"send":0,"wait":0,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"api-dc-prod-002.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/fontawesome.min.css?v=20251204","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/fontawesome.min.css?v=20251204 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 25461\r\ndate: Thu, 30 Apr 2026 10:19:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Wed, 07 Aug 2024 14:34:37 GMT\r\netag: \"66b385fd-18f6f\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: TN8cZrJlHix8DhrBfYY4Ub38PpZJSV4RonmGuGUbZJhFKZiwHYPBkw==\r\nage: 1421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":102255,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62333)","md5":"35c423c7a0a87e2e4f3646e582e2dd67","sha1":"aa640d874aaf84764c2a4c94290624166fa81d2b","sha256":"98e7ef32e76852a8a836cd1ca9efd953628a0cc8739f7d847ea87ca525db73ae","sha512":"d81bb1c55dfe6108d57f19f8aa37dc01f770ce9ccc16d0519710a1dfbcd0da6c9c71d85ca1a940aec83c81b5124aa2c6fb9ac0409517e38db02734300b006d8b","ssdeep":"1536:E6MnM+M8MMMtMFM/QS8EfluzvQrp6mQzsWdCENdA9tVg9:/pfluzYQmQzsn8dA9ti9","tlshash":"b4a339f8e48905e8a372c84fcb55b36c663afb70d5425c81f10f9a4d8ec2b5815dab2d","first_seen":"2024-08-12T04:36:20Z","last_seen":"2026-04-30T12:39:53.85018Z","times_seen":24212,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/vant.css","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/common/vant.css HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 60280\r\ndate: Thu, 30 Apr 2026 10:19:23 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 09:30:37 GMT\r\netag: \"691aeb3d-30a89\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ArC0kobbKiI7qvsLLKuxXcA34x8Ih7W7mnB87iFBvyW2jKGLXPbJ9g==\r\nage: 1421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":199305,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ec97f98b8f11e72ca35d2a8939500e67","sha1":"fcdcaecbd29eb74c4d507c0f23d3758052aba3eb","sha256":"52fcb2a7486d329611d7fc1562e0dbcde9f4494728b88dc26932388fee77391f","sha512":"16ec7dfa0d84e113ac71cf66bc4aa1659d3a9089fe76c8e2834d0bd1ee25db5fb2ad0dfe35dbb9ba2340957396a603a09c8ebbacf49c90a65df12f522d9b851d","ssdeep":"1536:VjQbFNJ+jqkiHckCwsBlDOFIxuVoxJPBik/1Al5aIzb2VTVaxA:VuClDsIxuVSmRdJA","tlshash":"ec149495e69091bcbf27f275ab8b96dcf23cf560ed01daa4f10051580ec7bf50623a1a","first_seen":"2025-06-27T04:20:30.581604Z","last_seen":"2026-04-30T12:39:53.774216Z","times_seen":32370,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages//images/logo-2.png?v=1","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages//images/logo-2.png?v=1 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 37360\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 10 Apr 2026 02:21:20 GMT\r\netag: \"69d85ea0-91ec\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: vCa16pHnyinakYYeM9Smlo94PQys5UpjsJl_KL8zQorciMgI4cBj1w==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 80, 8-bit/color RGBA, non-interlaced","md5":"58e4aeb5c8a2c2b803d40a7e72b952d9","sha1":"5ca98ad019e741eda326feccffdc99622cfc1a83","sha256":"50d767bcb329515a617f0e5ae57f10d9e18e68e96d828ab26d8718011eb0e196","sha512":"588241567592c1126ee0bfea947411b3da41d44eb3095386247ae7ed4f36f9e15ad08b5d2b86cd1b483c44914e2cb28c604c30dc197591c3b2233e14118dfdd1","ssdeep":"768:AlU492+h646Uc3jM/0MiYyU9sZ2qz+XKcPVBBC8hNO:AlD2j4EBJU9sME+6cjwd","tlshash":"84f2f18a056283be4fdd18dbdec23f8c3eda09e5dd2ef12d4994444d576cb8350ae294","first_seen":"2026-04-10T03:52:30.156352Z","last_seen":"2026-04-30T12:48:20.753595Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/search@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/search@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/search.css?v=20260414\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 634\r\ndate: Thu, 30 Apr 2026 10:20:43 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 05 Jun 2025 07:04:02 GMT\r\netag: \"68414162-276\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: WJSyIJAgFcvIAUcoqLp4OxRgFp6pOBa1fmkVkgPuwdbFs6EgIlPoWg==\r\nage: 1340\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 4-bit colormap, non-interlaced","md5":"a4b5282346fb42d90c59fa556c76e8e0","sha1":"0a12261356eef879559d3bc1dae88cf08dc23a1e","sha256":"aa5da5e9cc04a263402c2c75dc6485c929de92186e8efb80ba3c7cd9604bf950","sha512":"c385c6f1f449891870f786d9fc9bf140cb4218633c39b09ce7895b0c8950ae918327a49036b63f793e58dfec8ba308050d2cef338caffc1b6c856eb31893e6ab","ssdeep":"","tlshash":"bdf00251822d7c9bb34b2916c0177762f858d915771113cfcf0aa83c59151d6c2fd209","first_seen":"2025-06-06T19:17:52.685678Z","last_seen":"2026-04-30T12:39:53.800023Z","times_seen":24552,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260429/2026042910201628182.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260429/2026042910201628182.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 29 Apr 2026 02:20:21 GMT\r\nEtag: \"3ccf2ac9e738bf648ea88f78b5ee3b11\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 29 Apr 2026 04:39:26 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 172\r\nContent-Length: 299808\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15917181081775691309\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":299808,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"3ccf2ac9e738bf648ea88f78b5ee3b11","sha1":"bb5c6413d987c6236d0a783fa6aa05fd6a3258b1","sha256":"07648746f17be285d685b0d82172b9961087dc2b699c36685ca9285769fcdb93","sha512":"7c6d9af5ca2222a69ad0c360d2ace1a3a3352d9c55450f2553c484f3c178f5d8fdab5a96543de07b09a8c2f5068075a4b88ea80f32ca44dcbb7c7c33b3d71aa1","ssdeep":"6144:H6C8xqthnzyyKXw1jPIEJUJxnftCgewxqApBQSQsTDkHEqIeCNpxqHZknC0oa:pUqthnu1AtPI7CPA6sTDkHExeKpIHZAv","tlshash":"1554235fca38f4d5580dc39fee1b67908a3fe04a8f99ea4966007f218147bd065ea04f","first_seen":"2026-04-30T08:27:13.33161Z","last_seen":"2026-04-30T10:43:43.640505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":548,"dns":0,"connect":0,"send":0,"wait":24,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-01/3fe7cbf54b558455ba3f6cceb89edb3e.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-01/3fe7cbf54b558455ba3f6cceb89edb3e.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 01 Apr 2026 10:44:33 GMT\r\nEtag: \"61b5d004bb8e2a9c005aa7180a66a8ed\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 01 Apr 2026 10:44:33 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P1\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nAge: 1\r\nContent-Length: 150544\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5191910098113278950\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150544,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"61b5d004bb8e2a9c005aa7180a66a8ed","sha1":"611e02b138efebc908cf88097ec1628a9dd5fc85","sha256":"dd9d4a44a5baee8d26ab61ffbda1b70148fcf307b30fb6b6ecfcd512c102ad47","sha512":"c9fbee0b4a6c0861b4b595756469f2fb1f2d34cb26c431c59eb6438dc1f9bd3374ae0b64650e02a2dd5d64afd63a5041d6e12e425d6329ca8fedcf0fda1c6f4a","ssdeep":"3072:Cu4OHV4Qx6B8iM7fQLGUf+mIBWNAyqWD24IA1lJtFLE1T3mVRv:GOM/M7fQtftI0N/vVIilBpF","tlshash":"27e31328cf1b4d9126b7ef8ec08d1d009436e9c28b3f2dec25566756d1094b9f4cae6d","first_seen":"2026-04-01T11:04:29.203387Z","last_seen":"2026-04-30T12:48:20.798999Z","times_seen":8705,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":525,"dns":0,"connect":0,"send":0,"wait":41,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20231026/2023102620184288771.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20231026/2023102620184288771.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 29 Dec 2023 10:52:07 GMT\r\nEtag: \"f1b7329bb20d3bf35a27caaae871c85c\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 05:35:41 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 20798\r\nContent-Length: 816\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1742941881441910238\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":816,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"f1b7329bb20d3bf35a27caaae871c85c","sha1":"3b3791ca288fdad4cef0b48cd6081aed157b521f","sha256":"c6cd5ff057ebb6c6b3686110e90c6f1d61283197527b89a571a008bfc98aac30","sha512":"41bf59a3cb85338b083881001d96d59f51aebfdd62b60611487455d6b763ddfd3fd5bcffd159f7e616126d25e515521ab929027cda0011aab15fd0a9d73e9a98","ssdeep":"","tlshash":"5e01868cbc48f9d99929e10dd1880d73a890662b166e0cb13485ce6cbc8551c41d02b7","first_seen":"2023-11-12T15:49:18Z","last_seen":"2026-04-30T12:45:41.114411Z","times_seen":22592,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":662,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/layui/css/modules/laydate/default/laydate.css?v=5.3.1","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/layui/css/modules/laydate/default/laydate.css?v=5.3.1 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 2101\r\ndate: Thu, 30 Apr 2026 10:19:24 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 14 Jul 2023 10:04:07 GMT\r\netag: \"64b11d97-1cc5\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: EchwSDGAMzahHKKHGFPklr4Fnhea6GRx3D-vWy6jNJzAJAHuTGcevQ==\r\nage: 1420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7365,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7365), with no line terminators","md5":"e9078eef34fe9a44e44bdd55b48fdc55","sha1":"73ef00229810ee179915661786d9b66b7fc2d568","sha256":"ab9dbdf922a26509951347fcfa83704d86afd2df855c827740c23df72fd8ab3f","sha512":"dbf200ca6effc6bee2f7e8f516dafe6b25fa66093f19fff117a8bd87732a3ca0206480319d5f733eb07d18f564cba1dfc6143587cbc5ea1d5d370948d8ab3921","ssdeep":"96:7OyDQi4ijYyC43i7hlVVZ4LyLk5bYsBE2rBOB:7OQQfyPCoiFVqHbrBE2rBA","tlshash":"45e1cc71b1542cd4702bc222b4a87cbfaef8dc02dae3265ce5b8621b85c15b7957d34b","first_seen":"2023-04-11T12:12:51Z","last_seen":"2026-04-30T12:39:53.750163Z","times_seen":31747,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/static/jquery/2.2.4/jquery.min.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/static/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 34713\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 14 Jul 2023 10:04:07 GMT\r\netag: \"64b11d97-14e4a\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: u4XPyCeSClcFXboc4mg-si-Unzn5e-7ktWo3sazi4jd8MPwee0Zcpg==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-30T13:13:37.385833Z","times_seen":274657,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/js/index.js?v=20251205","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/js/index.js?v=20251205 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 8422\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 04:31:46 GMT\r\netag: \"693b9ab2-f250\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: G-gkXJq3P3OX42a6-9tkBG9nuvv6Cc9XYuB24UPounwy0wFj3m5dbg==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e2ad1d1df5ac8f6a22b4a7318c4ea830","sha1":"da681999fe3f9c153b93133204311d6f90432802","sha256":"9333f887c1b4bde80c4451eb806795179aa6dfab3b7a6566fb923ac76ba8b0f2","sha512":"127b92b87baa965853e12a14717f4a8d4166b5d565631068bba786c87b305aad0141ede31c09f6508c51641fc092238f4a7a7000dd2fa6bcfc0837dc0e3a8d7f","ssdeep":"768:rP4lBd6lebchYzp1DT6ekRmmTEXEHkYRtQ+zqDxbFxAespKSzEXEHG4lEd+zVuQy:Mu8vp1n6d9Rt6bQrKEjl7zVuQgl","tlshash":"5753636e22fa150a5b4330292f9f300a3210a4571d49ee9cbe0d97d45fdd678e1f2be6","first_seen":"2025-12-11T05:08:28.597561Z","last_seen":"2026-04-30T12:45:41.081562Z","times_seen":15469,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-19/0be393a186b7fb1a4871efff039103df.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-19/0be393a186b7fb1a4871efff039103df.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 19 Apr 2026 08:12:25 GMT\r\nEtag: \"c06dde3015d4128d5191e0f363ac05ef\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 19 Apr 2026 08:13:05 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 237\r\nContent-Length: 346992\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15924524308416348956\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":346992,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"c06dde3015d4128d5191e0f363ac05ef","sha1":"46e7c783bfc24fbf2cf78a3c5f401a679a99c76d","sha256":"32c7857e2ffc7207fe1246a89454862e6f4fd8a61fd4a294911bc1c9f3503509","sha512":"5df309c2e413189a267e3a68396db2450f1d366ce3bdc2dc4bb15c70cb93c7aaeebc2c380995c5ccef37cc74bdb930693b3e005f79e50fb618e97f8b1f8fea7d","ssdeep":"6144:fdDamlBadpydJQ74Nk35l4b80Sahoc15W3h71X2gCfDME4FoEek:FaZyrQ7os4KkozJQ7ME4WE3","tlshash":"107423ca7f2d01505f16e591c1aa73e727becb2018df624cd646cfa1bafec5c896410a","first_seen":"2026-04-19T08:44:06.127136Z","last_seen":"2026-04-30T13:11:45.066454Z","times_seen":502,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":485,"dns":0,"connect":43,"send":0,"wait":25,"receive":79,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-17/eb46722c3d8588b7db4c63efd6f52233.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-17/eb46722c3d8588b7db4c63efd6f52233.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 17 Apr 2026 07:39:19 GMT\r\nEtag: \"b3f1359853ac4a3795d1cca4b342c7bb\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 17 Apr 2026 07:39:36 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 9\r\nContent-Length: 470144\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5491418325811041202\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":470144,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"b3f1359853ac4a3795d1cca4b342c7bb","sha1":"4e6f403e0a9978bdc3a9562fda9a2d1e40107225","sha256":"0d2e043d70ee8c8d46de8d2ca88caf1ed298a2244f44309f7cad0d5d8d5b9d9d","sha512":"2371c8489385fc27366b6dc3d873fd5dd5b0704bf6786695d49423627a3a90f83b0559c4e11dfa98e27f5fa120a4773f31f5914d6fdb4cd64442221023443aa9","ssdeep":"12288:DAN20W9GqW0oTQO3oxrRcIIhdAL75w7cu3anq0v:E2066T3ov6hy75Y7anxv","tlshash":"4aa423b4187e238ce59d8a96265a3cbdb970af4c7bf460f99ec59fd44c284044693f13","first_seen":"2026-04-17T08:09:25.618747Z","last_seen":"2026-04-30T12:48:20.777288Z","times_seen":815,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":524,"dns":0,"connect":0,"send":0,"wait":29,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/rank-2@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:05.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/rank-2@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/search.css?v=20260414\r\nCookie: _ga_P6HKH41365=GS2.1.s1777545785$o1$g0$t1777545785$j60$l0$h1780620998; _ga=GA1.1.1535918992.1777545785\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2604\r\ndate: Thu, 30 Apr 2026 10:20:44 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 05 Jun 2025 07:04:03 GMT\r\netag: \"68414163-a28\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Qeuuu9TbhcSvFkywOTlhudIfcJe_2otA35sfgNmOBZtO4YhgKbc_aQ==\r\nage: 1341\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"3438e5aef62d0d9bebae0eb0b884de9e","sha1":"e1570b5c068b735a7367b83212a0524493913dfb","sha256":"490d481dc60eca11bff657185331c5a6ccc25f201b20bdf36c78ba833853293f","sha512":"104f434d690b6f3bf31d38487050c7d8e6b6a49ce380910313aeaed3dc0935c81898d917f9ba1a078af455a04ec4e0b2083b0acea69b04db762564f973873519","ssdeep":"","tlshash":"12514c68930cfcc6f060bde6017785a02af74e3b31b29acdde48ae206e79f84a4d1100","first_seen":"2025-10-28T07:13:52.634902Z","last_seen":"2026-04-30T12:45:41.110399Z","times_seen":9609,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/index.js?v=2","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/7.10.0/index.js?v=2 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 1360\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Apr 2026 02:53:11 GMT\r\netag: \"69defd97-dba\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ihkX2LVXSkh5cmU3-U9KoixwzBJrb2KLkKdo41K2KqXHcsgtw7iNaQ==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3514,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"eb453de4d0aa150fc7aeca37d503ed17","sha1":"ebeffdc810fc83601f1a5a190055271b3d091927","sha256":"09acedf483ef711119ca9d2aa8260575fad2a7791aa90c1c1f5133590a403afd","sha512":"fc1be9d0abdb35fc05f5e349f7b0edf6f29a1c2c7f87e46efea25b1bd59d04864d9c22c6008d7d42aef5a7bc06ce85d626aa2f9574088d4b7a018f3094cd5e0d","ssdeep":"","tlshash":"d1712e9930f320b04bb7a47d2babe5083121045b510acd18bd5c43859faca38a9f6bde","first_seen":"2026-04-15T07:12:26.118176Z","last_seen":"2026-04-30T12:45:41.083182Z","times_seen":640,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/css/index.css?v=20251212","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/css/index.css?v=20251212 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 10192\r\ndate: Thu, 30 Apr 2026 10:19:23 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Apr 2026 02:50:50 GMT\r\netag: \"69defd0a-eb62\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: sK0QqX6O5N9NjWuGRLtUWIV0A8vithlIUCFWbYN4fP-unabI2Ash9w==\r\nage: 1421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60258,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"3b8f741d2ad86d582332ceded47c660b","sha1":"1f54bd44e6d5fc53ba05bcf88eda9d196e108dd0","sha256":"b9efc9a83549bc52fd1e75888f343edfd32b73e29efd424d629dc1463860d1a6","sha512":"1f755737cd40c98b0fb21173eef8df2798a6ed6c95d5d0aa37bb57ce55a2fda0370a72b0dc4ba8c1b4dad2bf0672b21d05e6b842c50801cfb2a2d20936e2119e","ssdeep":"768:pB3/VjKqjwp5G9ftX1udyF23LeBKQRQqQoURvKFxXRC/YeJh:/J1udyF232KeBORvKFxXRC/Ye3","tlshash":"2143440426230904789795babf7b17c56258c087cd0ac96d7fcfe649cf8e128b5b6bc9","first_seen":"2026-04-15T07:12:26.183174Z","last_seen":"2026-04-30T12:48:20.812865Z","times_seen":730,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260427/2026042713043187045.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260427/2026042713043187045.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 27 Apr 2026 05:04:36 GMT\r\nEtag: \"d3d18dd193d748333a9f5c492cd92f71\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 27 Apr 2026 06:32:29 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 144\r\nContent-Length: 85760\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8639741175581530885\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85760,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"d3d18dd193d748333a9f5c492cd92f71","sha1":"9756a52f4378f54fd5402d4fa6bf8800a7d36c8f","sha256":"6680a225d7ff703e68b94ce8f259ab400d7ec89852c0444f44948f357ab6c83e","sha512":"9da3d77999c53d7f498781776d091f26e89a9332103ad69c99ef1a4ade06382769a7cc844b6e9218c0ec99c825ac71e468fddc9c134e6bbbee5e66cfbea6b0a7","ssdeep":"1536:NcDT5FZVOegAxBDKHyBtlpgvh0gDEctvxIM/RQpN+1gE3FXYfqjL8XJX0pp7j5:NcR5OegImyBnwPtXKnygM2C8ipp7d","tlshash":"cc830275f2019fcdc00f05e7e46ad9128a0761db608d83d670896bea3a35b321ae18fd","first_seen":"2026-04-30T08:27:13.479976Z","last_seen":"2026-04-30T10:43:43.650573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":498,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.shenfeng.cc/api/eventTracking/batchReport.json","fqdn":"api.shenfeng.cc","domain":"shenfeng.cc","tld":"cc"},"ip":{"addr":"172.67.131.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:05.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shenfeng.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 10:02:51 GMT","end":"Wed, 24 Jun 2026 11:01:29 GMT"},"fingerprint":{"sha1":"29:E9:ED:51:42:52:E0:B1:7F:3D:BA:85:1B:7C:2A:26:30:6A:E3:03","sha256":"63:BA:19:E0:5D:0F:BA:2C:62:63:00:B8:0D:7F:28:3A:02:D6:0F:B5:FD:F4:EC:7A:94:31:18:75:42:18:9E:C0"}}},"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: api.shenfeng.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:43:05 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gz7j-2.lzcfenuuf.com\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33TlnyT7m7ope863V0haUi4NZf8xr7I6fV83d8zJC67a2KFItvRw%2BKbcIzmieOh7DMu6HHgVjRTyJL1KVv7cTwsAUDeaXs%2F9xXwYnTFS20YQmolOFlz4%2FMI%2BZzniNe%2Fldcc%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f45f187ccf71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T13:35:14.666833Z","times_seen":14425156,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":16,"connect":1,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/images/avatar.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/images/avatar.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 315\r\ndate: Thu, 30 Apr 2026 10:19:29 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 09:30:37 GMT\r\netag: \"691aeb3d-137\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: qlmkcDnpo6eYpwYv2iFpDmL3hy6-iTI80ipiiOV5NncKzXpsf0s1Dw==\r\nage: 1415\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 20, 8-bit colormap, non-interlaced","md5":"30c01d82427d0b622f89b4696cfa8fe1","sha1":"f0316536a6c8f645a3a4bbb4dd0473e3c8853a4f","sha256":"7ceba85b04db09cfa45db7b953297889da29ea113dcc0d037eafb86203b200ee","sha512":"e9cefe20bff8e7812e2b6eb2dfeee8a71950e5fe3859a50967ad54c861da3f25049aef2cf32a1518706670d6c7cc3054afa0ec934fb8e344465d5753f93ce97c","ssdeep":"","tlshash":"98e0cdf35389ecb985a7441a10e36510f10d6979433382dbd755543e51140c4497575a","first_seen":"2025-11-08T04:26:01.782802Z","last_seen":"2026-04-30T12:39:53.804695Z","times_seen":20958,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/Search/pc-nav-icon-gh@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/Search/pc-nav-icon-gh@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 736\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Tue, 22 Jul 2025 12:20:43 GMT\r\netag: \"687f821b-2dc\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: W6QuNqH1LPF4oAu7ZQ8MRDN8t-4YJE3IwJ_qf1aJCXcx9A7OEwF_5Q==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":732,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"0065fa7f70b2b08b15d3fd0f5791d5b8","sha1":"d3de2f101b2f9e8b9bf41c2b896dafd6d760199e","sha256":"4d6b1fc6cfb3528a1ad9dc78c51f7005a26fd2251c49b1060e37f30e2a9caa2c","sha512":"8ed33dce5119cb2fd93dad87b72b3325e627c40e3cd20d50bb6726986a915e22daa2f23fc38fb09d2580295babffd0b55b20592fc9f41d1a7a7cd2888e8a6221","ssdeep":"","tlshash":"0501886323d95a3dfff841b7272171e46d455cf8996281c67a6d3001463d1ac9740762","first_seen":"2025-07-12T04:18:50.94389Z","last_seen":"2026-04-30T12:45:41.108091Z","times_seen":22581,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/zw.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/zw.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 955\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 10 Apr 2026 02:20:57 GMT\r\netag: \"69d85e89-3b7\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: iR1LlIHS3aT68rSSuuAwKFqTsWp3tWtu7MJygY2a7OI_xxrW4w_m8A==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 4-bit colormap, non-interlaced","md5":"66058c44f8ec86ae8afe2b26fa5afe77","sha1":"11e33bf76694e2d3549c49406f41b767590c61f2","sha256":"ecbd34c21cc7580e6367269236c3c6d79d292925adfe6992bc7591f3778b8679","sha512":"1f879cdd609a33fe4541ec7ff7170b8fe3d60c32e85b372915dff43a36ce70eb73437ff770a3accb7f4fb7aa6c5c94a4f08257033361520423f4719e75cbfe12","ssdeep":"","tlshash":"4d11c8816730a5360a484c77c251b8b4ce32668a3331a142b34f9c0ff8b6c31466ab37","first_seen":"2026-04-10T03:52:30.245251Z","last_seen":"2026-04-30T12:48:20.726929Z","times_seen":998,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/app-download.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/7.10.0/app-download.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 536\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 26 Mar 2026 08:53:48 GMT\r\netag: \"69c4f41c-308\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ij-d9F4FW1uwyLIzsltl6VPkUsViFrR3XlgKb68xSUZcBcoYE8hbCA==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b178f7a7536c73fbac0afb970f249403","sha1":"9920bf020d4b8f58cf66869be87b459f648f8446","sha256":"caaf593068e7236c228e9a3872980e4e6297f90a6d14eddbea4934f0a374ea80","sha512":"eef21fc9c72c0adc9d090a661d9e9ab8057a592fca6891a94833916e19bb5a94459c81eaacaa6313381ccbe0ff42f8991b7f899b5af4e0beac0127e1b93c01d9","ssdeep":"","tlshash":"c501ce25e2bc702c8233e3f9470f62c45235106789000c1208acaefc8db312aa362cab","first_seen":"2026-03-26T09:29:38.905848Z","last_seen":"2026-04-30T12:45:41.154193Z","times_seen":7843,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-28/773f720a982f83b052fe3575f5afd845.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-28/773f720a982f83b052fe3575f5afd845.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 10:39:29 GMT\r\nEtag: \"d5f3528883cb555453f8820a199eb7b2\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 10:39:39 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 38\r\nContent-Length: 269296\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15784398635009729320\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":269296,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"d5f3528883cb555453f8820a199eb7b2","sha1":"48778240a9612cb7ae54ae3bd9ad570157f84d91","sha256":"d74379362158c37121b86fa625c4bab5b6e3638dcfd6e30a8b293df17ebc07fa","sha512":"1ba153a01b99e23e4853eb958f3486630330ad8e21a2f2ee94912dcee150e5ed7b75fda09810805320533d192a4adcd2c8cd9170eeb7c7e547b0ba76f338f194","ssdeep":"6144:zZKGw0Yvb+ZP0gzdHh3Z+spPZUWqrkFZOQE4o2cLt6hD:z0b0vZPfddgKxELl4o2xhD","tlshash":"22442387006ccc983075439665e9cd3e10f6b6ab24fd5a119db1dce40abbadb1d18bc7","first_seen":"2026-04-28T11:32:24.57542Z","last_seen":"2026-04-30T13:11:45.056193Z","times_seen":149,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":518,"dns":0,"connect":0,"send":0,"wait":12,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260428/2026042816202761837.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260428/2026042816202761837.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 08:20:32 GMT\r\nEtag: \"5c878629cbd330affcd1169c0a035a7c\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 21:33:30 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 9666\r\nContent-Length: 49424\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17657988458483096602\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49424,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"5c878629cbd330affcd1169c0a035a7c","sha1":"bfccb590d4a0d7b52b77430b081794dae9905cb4","sha256":"564cfb2f0d5372ce690bfc07e0c9ee30352c8c9c4f831890ec71270cf7322c5f","sha512":"14092247901f145c533ae668a0a5d404f57979b2076e3dacae456da6f00a4a0121976bbbe9dd61370d77b019f186d73eeee01b5f316a988aac1c47ef25f09c5f","ssdeep":"1536:6tQeEUG7E6VfX38CN4Cmf2gFLF0Qq0JrrW5:mBoX38CNMflNF0QqArW5","tlshash":"4c2301d4b829b0b94a0af82c33477069c9b3217b87151fea61cedf60d11e5a74c9738b","first_seen":"2026-04-30T08:27:13.474925Z","last_seen":"2026-04-30T12:39:35.532892Z","times_seen":3,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":545,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260426/2026042612063062635.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260426/2026042612063062635.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 26 Apr 2026 04:06:36 GMT\r\nEtag: \"4e4c4646a7f7df12587bcddd6c1e5b2b\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 26 Apr 2026 05:11:09 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 170\r\nContent-Length: 75136\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18232003932539580505\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75136,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"4e4c4646a7f7df12587bcddd6c1e5b2b","sha1":"e7acea01efbf886b49687928b638462719a2653b","sha256":"bc408d809fd5330da2d8b40fca136f3fb1cc9023d675d00e8520dfa5ae51777f","sha512":"b846d997054a5c3f3bcae965702d00c4cee3ef479af4b1b9da126cb56525b6cf5741a2f06a44e1e61662f5a79d3bbc9714b7bfc693ac65ddd25d38f658eacb52","ssdeep":"1536:vbuVghOmopby9tiZ0LFho9apcMjwK3Zebc0e0pLVqEuO9LWuc/I:zuVcIy9tFhvJlJeb3nMGL0/I","tlshash":"a873020af3727397f8333160e9d5516b977a81cfda6b8098f1708da556d0b2848731bd","first_seen":"2026-04-26T06:05:35.930228Z","last_seen":"2026-04-30T10:43:43.658661Z","times_seen":86,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":503,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2025-12-30/d17322eacc370df9d8c74917a4d81688.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2025-12-30/d17322eacc370df9d8c74917a4d81688.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 27 Jan 2026 14:10:23 GMT\r\nEtag: \"8e78105502fd4718f8c170301ef24f37\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 27 Jan 2026 14:10:24 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 15\r\nContent-Length: 152560\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14475323950941088878\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152560,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"8e78105502fd4718f8c170301ef24f37","sha1":"99359fe1c90ca4f43885b194682566cdca7a2732","sha256":"0f233333867ea57405d816c09f33ae4474a9c274045e730233930f9e334943f4","sha512":"08fff58185fd6d81eafd8f5980ba8bfc2a7dd8da92fba6b707b7c862e055c02851fb9679d34fc988c7b4cb18ea007ad114dbb27deca0b3b182ca2dfede87b9d5","ssdeep":"3072:B0nNq9uJdr2tAenbIW2Q5Xh2qBFXNJ5d6cDlf9xttJ0MtSll:iNqogFIW2A/FXNJ5P9xltSll","tlshash":"0ae323fcfde77e30c6743ac6986500e65b82fb9d62063729ee148fd4087697a39e0548","first_seen":"2025-10-18T12:51:03.886963Z","last_seen":"2026-04-30T12:45:41.034693Z","times_seen":18175,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":616,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20231025/2023102511321596540.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20231025/2023102511321596540.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 29 Dec 2023 10:47:00 GMT\r\nEtag: \"17bd572f88a1fee3c902a691acdb8574\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 17:52:19 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 63000\r\nContent-Length: 608\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10037272046902305131\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":608,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"17bd572f88a1fee3c902a691acdb8574","sha1":"1dab6e54398b54b5b1082bb52a6ebf923434826b","sha256":"8c6a0267279f65b90e630d1f0c58c2d29b793c05aac1b343b0c10b77eb4455c1","sha512":"92c347130852ae789476448e289de577641145551258eb0fe4f263fe2011f36775d4c775da4898f413948943c1b5f92abe09703effd88b3fca236d0654ba2f76","ssdeep":"","tlshash":"e5f0b71c829184fd618009947cbfcd43005da6ef5dbd0321f14a17505cede0ec6e262c","first_seen":"2023-10-25T11:55:10Z","last_seen":"2026-04-30T12:45:41.060864Z","times_seen":22586,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":626,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/zw.png?v=2","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/zw.png?v=2 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 955\r\ndate: Thu, 30 Apr 2026 10:22:05 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 10 Apr 2026 02:21:44 GMT\r\netag: \"69d85eb8-3b7\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: agX8WSoWNSywnRIhx0b6pRr-LHCrO2TbMGmfpPtFPyS8kydvgqtWaQ==\r\nage: 1259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 4-bit colormap, non-interlaced","md5":"66058c44f8ec86ae8afe2b26fa5afe77","sha1":"11e33bf76694e2d3549c49406f41b767590c61f2","sha256":"ecbd34c21cc7580e6367269236c3c6d79d292925adfe6992bc7591f3778b8679","sha512":"1f879cdd609a33fe4541ec7ff7170b8fe3d60c32e85b372915dff43a36ce70eb73437ff770a3accb7f4fb7aa6c5c94a4f08257033361520423f4719e75cbfe12","ssdeep":"","tlshash":"4d11c8816730a5360a484c77c251b8b4ce32668a3331a142b34f9c0ff8b6c31466ab37","first_seen":"2026-04-10T03:52:30.245251Z","last_seen":"2026-04-30T12:48:20.726929Z","times_seen":998,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.qjxxlsw.xyz/category/rrcg","fqdn":"gz7j-2.qjxxlsw.xyz","domain":"qjxxlsw.xyz","tld":"xyz"},"ip":{"addr":"43.230.114.100","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T10:43:02.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qjxxlsw.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 01:56:26 GMT","end":"Sat, 20 Jun 2026 02:55:07 GMT"},"fingerprint":{"sha1":"CE:E4:FD:CC:4E:3E:17:EA:92:C7:97:8F:10:D5:93:4A:88:F5:4C:B2","sha256":"0C:5A:8D:AD:63:E8:2E:F2:9D:55:2D:42:54:D2:63:00:C6:D4:D9:D0:FA:0B:A5:3C:95:4B:5A:32:57:70:08:5F"}}},"request":{"raw":"GET /category/rrcg HTTP/1.1\r\nHost: gz7j-2.qjxxlsw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 30 Apr 2026 10:43:03 GMT\r\ncontent-type: text/html\r\nlocation: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3aWRltaOLpzaEBc6PutOobSjHkxdehQV3ytH2m1HaLq96M2w26p8hTgDdok69qf2owocOuV06KjdA1LVr4lyTRHqI8Ul2WtHQCLuWtws%2FB69qWLfH58uTEkZjUsCkPTUu3vsR4M%3D\"}]}\r\ncf-ray: 9f45f177be6d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":269379,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T13:35:14.666833Z","times_seen":14425156,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":96,"dns":75,"connect":1,"send":0,"wait":408,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"gz7j-2.qjxxlsw.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"gz7j-2.qjxxlsw.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/category/rrcg","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T10:43:03.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /category/rrcg HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 35603\r\ndate: Thu, 30 Apr 2026 10:33:00 GMT\r\nx-server: web-node-15\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nx-cache-status: hit\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: YJ5tFMvvddu1VAMsRvVegxltsJtrY5hliOaU9rm-UyjMXozfzKa_Yw==\r\nage: 603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Parsley.js","description":"Javascript forms validation script.","website":"https://parsleyjs.org","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":269379,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1116), with CRLF, LF line terminators","md5":"c089d33ed8f1faf945068efd67cf2aaa","sha1":"2012b392e19b3f274306a7c7fe4fafc1d47c8fd2","sha256":"2ffb46c0b65f0fbf6415ee1e28bcedbc0649b0d7a36c6a3f366b7e9f27efbe9a","sha512":"95992f12993e191349bfd0e8351ba609687d4823f25c3897c579626a34fdc44031c78b79731207ae21c65a9788a177ff87e67fb29f9e205129d7e64f5fc5ef31","ssdeep":"3072:lwPTOT1wTVTdTGTOTZXS/bhu2fn+n54reVrH8uPeA9fioC3L9uLQ6HYO:6PTOT1wTVTdTGTOTVSf/0/H8DG5","tlshash":"5144d752acf144b64192b0d5a9b2af05ff41e047d949dd05b36c8ad8bfc2ea385b339c","first_seen":"2026-04-30T10:43:43.661973Z","last_seen":"2026-04-30T10:43:43.661973Z","times_seen":1,"resource_available":true,"data":null}},"time_used":847,"timings":{"blocked":410,"dns":63,"connect":1,"send":0,"wait":25,"receive":1,"ssl":345},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/tbxw/js/zzz.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/tbxw/js/zzz.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 20137\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 14 Jul 2023 10:03:57 GMT\r\netag: \"64b11d8d-c67b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: VQkom_bcoHEv6iYAXRBEvOqWnGOFduU5JrW2xeV6AO1gHAOp6bQdjg==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50811,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48316)","md5":"78dab9fcf576de8cba46edd716dd2309","sha1":"7113abe41f95159f9bfccf70d01bdda1055af2ad","sha256":"7c66d6c8e2c470780513a282b66e2b5b7429ed863d6a0ecd6054b38dcda004b5","sha512":"dbb858875e532b475f827c930c154cac09e9a952b20053a0f7e1b34a050100a0a3a41f8aabeeab4af2dd90082363fe3ced3a5957f7250a4918d305b49655e040","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpn6ZFCsUleZ:vZYDc6lXJd1mZpZEdq","tlshash":"da331bc5a19c609153a774d50d7f704bb4637526170d89acf228e8eeecfcaea9039d38","first_seen":"2023-03-13T16:33:51Z","last_seen":"2026-04-30T12:39:53.791629Z","times_seen":31953,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/clipboard.min.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/common/clipboard.min.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 3634\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 09:30:37 GMT\r\netag: \"691aeb3d-23c8\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: xiSu0r3Wuyn1_sZe9SrtclDSZiyV5YHO64i4ebE_FpmypGsLX3Qw9w==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9160,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9067)","md5":"15f52a1ee547f2bdd46e56747332ca2d","sha1":"9a7cb405f9beed005891587d41f76a0720893ffc","sha256":"e17a1d816e13c0826e0ed7febfabc3277f45571234bde0bf9120829a7169edc9","sha512":"ecee695e9734a0246bc64f1151f0d81609f49ced6dfa32ee20e41d38c469e003c1eee678bd28eca73a79cba603b43b385735124db5b304567f2ca2619f214e2b","ssdeep":"192:s6IMH3HEG9JVwkHg4LyAal318/NYusfkApXMdgmkpj:sy0G9J1zG3eFYP/XMmmkpj","tlshash":"77126399b291b0b15ae731a9412f920bf2766969708b90d0d239d4f0acbcdde4463f3d","first_seen":"2023-03-07T12:23:44Z","last_seen":"2026-04-30T12:39:53.831973Z","times_seen":28616,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260429/2026042921041287862.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260429/2026042921041287862.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 29 Apr 2026 13:04:16 GMT\r\nEtag: \"895ae687537924b770fca0df1934eb59\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 29 Apr 2026 19:32:51 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 497\r\nContent-Length: 194576\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3708741088148973265\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194576,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"895ae687537924b770fca0df1934eb59","sha1":"718ddd08f2d592f94ae7b4e85f16e23810905011","sha256":"71829a50eab225b3c9a13dfe19a7c3db20a73cd69df4cc6326b6659e84183e41","sha512":"03d7c67ff4a6fbdcd5b4d71128fcb9065ac231df7abeaf2de026b4fbae14f21248b05ec6a8ef515c629d15d0174f65b69ebfcf56a0bcd4cf3c2415070c087b65","ssdeep":"3072:GhT1snHb/4HCAm5o9guEVOmY2LIU+3SQ4SCtzHJtsv69k4LbLsLdFtFal7p5Jmrr:sBycvWuM9YSr+WSAJtc6TvLWZFalnJmf","tlshash":"0714139bde62f4c11e16a43067b7ef8cfd4c4be1d788aaa27418274d311eae8e157421","first_seen":"2026-04-30T08:27:13.505068Z","last_seen":"2026-04-30T11:24:20.470179Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1047,"timings":{"blocked":513,"dns":364,"connect":11,"send":0,"wait":8,"receive":20,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260428/2026042814000619206.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260428/2026042814000619206.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 06:00:10 GMT\r\nEtag: \"a78bfb001c72ec2025611cebe611bcc7\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 06:31:29 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 572\r\nContent-Length: 79184\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17850399591263853898\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79184,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"a78bfb001c72ec2025611cebe611bcc7","sha1":"9aeca5d70b608bc5d1f0f5b900914943b623084c","sha256":"44d69a1f78bc71dfc2d6fc6745a22c651e0d38f9f1fb5d0a89d245f07295f3a0","sha512":"3404a264b77a3270fd89e72791e5d9db66ecfc6d02b4dddee1a4a604f270dcc46526f5b51fbb9db4e791919a7c78f3ae6cb6a4aed399677b0ca89f8062f538d2","ssdeep":"1536:pxVZMSKh1+U0Tsl9fmLOSp5HVTu0UzTiu2Y4O7SoJHNPgm647vfeGrqkhz:pySXU6sOLOSp5HVtUzxJ4HoJSXOLrq+z","tlshash":"68730228fa3826c313a8b683dbe67d5ee264534791b257f0e1a3046827b08f432dc6d5","first_seen":"2026-04-30T08:27:13.476612Z","last_seen":"2026-04-30T10:43:43.666968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":526,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260426/2026042611044376458.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260426/2026042611044376458.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 26 Apr 2026 03:04:49 GMT\r\nEtag: \"6eef3046eab5cec7c5efe8159df253b7\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 26 Apr 2026 08:30:38 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 552\r\nContent-Length: 55152\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2924422318593326347\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55152,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"6eef3046eab5cec7c5efe8159df253b7","sha1":"a198c9520e4be17d4c6b7d34ef1847c2e99352f7","sha256":"32679451222beaa9d41d3d7547dbe74c298f64270a47ce0e83ddd516a5af9b1b","sha512":"6e0e62876367f1a7d248dda76c42f2f3bbf8c426ca859e493009697b69b955bb45fff3c1fe199b075478076a9777e217196275cd815d0fb249bf2764a1d10ad8","ssdeep":"768:GyFtYK32z4Iz/klAahnDmEZ2Ad5FP2dhn6a7rWn0kHOkL4FqaSm9awIic3BSubN6:GygKmzr/UrZa0VFuR3gVukwXclBxx+V","tlshash":"f14302205ea4fffad59477579180db798038686bfc0ed159d20d0a907bbcc3930ba52b","first_seen":"2026-04-26T09:22:13.408751Z","last_seen":"2026-04-30T10:43:43.668064Z","times_seen":8,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-19/1953a5507dcc3e5f37de3856101c1f72.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-19/1953a5507dcc3e5f37de3856101c1f72.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 19 Apr 2026 08:19:19 GMT\r\nEtag: \"5753ae8bb71b30544ef38ae5865c9867\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 19 Apr 2026 08:19:19 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 32\r\nContent-Length: 129840\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16949630634576791010\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129840,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"5753ae8bb71b30544ef38ae5865c9867","sha1":"7938cf9fc8a820c760e005c0930a5987f7caa78f","sha256":"50f6a1d0897a477d7b3e42b995db24e3b6b8830003665170cc1dccf74c97a206","sha512":"dafee541b3744c8625338b4af628183d1a2185cc3e014370de2ac26c08bd1891952aacfde030a6adac03d1f112906cbcab69208a6e639a22cbcc48ae15510472","ssdeep":"3072:eDTksvEt4/LXflVirs5qTpPQTuyKUI5EOnlQyrXKbZazcpfW:ekU/LXfjQTRQqyKUs3lQy4vO","tlshash":"c1c313cb521c2d015be53b6b22ef31872e4f65e58d1d842b0b96e15f867acc6d12cc1d","first_seen":"2026-04-19T08:44:06.146515Z","last_seen":"2026-04-30T12:48:20.764789Z","times_seen":610,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/tg.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/tg.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 664\r\ndate: Thu, 30 Apr 2026 10:19:29 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 26 Mar 2026 08:53:44 GMT\r\netag: \"69c4f418-294\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Tl1hlE7MoHcd2aoe1VXAJ5H0IUtOOBJ91vMqb14enpp0EMPn6JiTcQ==\r\nage: 1415\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 4-bit colormap, non-interlaced","md5":"acb2287624a689367fa72a2200928580","sha1":"a5e082d439cb717c0b6f2c48055489ea2492da6c","sha256":"8864aa112a229bbc9f5803af7384b8710b1fe9c057aedf0cc7842b80809ce232","sha512":"e5456ff71b64d0dcc032b5f58b6dc2b8fd77698f746bb541505d0b594c8c1e8e56a1a90fa0deae8ea839e23abd98da6548132f7c1331de969126f667a7702fba","ssdeep":"","tlshash":"400123df74a7ca26a19599ce54b616d87828b34db1c054289d01ed2ccd14170056e763","first_seen":"2026-03-26T09:29:38.981381Z","last_seen":"2026-04-30T12:45:41.126496Z","times_seen":7820,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/index-ai.js?v=20260413","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/common/index-ai.js?v=20260413 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 11671\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Apr 2026 02:53:11 GMT\r\netag: \"69defd97-a703\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: _W-HVgFT3o1vxuxZ3wjjhl7sOsdjawznMgktfpLDqp6u0Hxv8lpzdg==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":42755,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (306)","md5":"af16a626bae359731ca7af9d28f36c33","sha1":"7f43a4ed614d1f6dcda18ebc5a68ec6807cf6a3f","sha256":"544604fc234086de418787eb6ce6983f4aae7434b0bc32467615d6de011d6202","sha512":"2ab77763e976add11fe032238f9b76b9645b41568e54206239ef9833312501d300a83b029ea74f829fffa60d262deb5677e5d36123dd6609a937f1ca1ba70ce5","ssdeep":"384:IkSVlcz8cJPkBj/r5pRWSLFwzY18zkJsMNFCoGp5va6Tr6iIiep:MVqz8cJw/r5pRWSZuYRJ/NA7p5Prxep","tlshash":"0413a50a3afb74118567706a2befa0057630a0177209df087f4d87985fc652996e3bee","first_seen":"2026-04-15T07:12:26.065138Z","last_seen":"2026-04-30T12:48:20.78516Z","times_seen":730,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260429/2026042918150649841.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260429/2026042918150649841.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 29 Apr 2026 10:15:11 GMT\r\nEtag: \"2b5a9647775fe4dcd948166b58091a34\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 29 Apr 2026 11:33:42 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 317\r\nContent-Length: 85600\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1999403256959841398\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85600,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"2b5a9647775fe4dcd948166b58091a34","sha1":"88276d47116f332abd59311bd8212cb46a75dc98","sha256":"fe4960b7a8595cecc33ad36cbe888c4138fec1a47b1a5543a34933524b94e47b","sha512":"5ce325c49a19404a9ff38ea07aabbd87c63ad3a147f2adce0d5211aee495542230599605c9dc7b678fcaa309aee5baf98144b0e546c0f4e46eeacc9f68cee56e","ssdeep":"1536:xbI9uL6IO3KhW4f3kU20gfWBOnjeOyE4kfOHkKWduh3EbtINP9wXusqdsNhE:Nqu+3SW4f3kU20gOByeOyrkfOHMdzIZx","tlshash":"1c83013bfbb0a61e75422afa3264b5b10697add67f62d6c2c410497f87c3840d2612c7","first_seen":"2026-04-30T08:27:13.440849Z","last_seen":"2026-04-30T12:28:06.260327Z","times_seen":3,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":550,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260428/2026042814331239387.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260428/2026042814331239387.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 06:33:17 GMT\r\nEtag: \"f843916f6bc9f544b0a665c64947d8ad\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 14:50:22 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 908\r\nContent-Length: 69664\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12616445003773466094\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69664,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"f843916f6bc9f544b0a665c64947d8ad","sha1":"10795e58c71a3fe0c50d1b0fb0f2a97ba7d76bae","sha256":"7fbfbc7cf0a0e1d2cf74f9c14130fd74094f5b56cc2e0d698b335703a1c58c38","sha512":"c7003e317478a6c84a5bad0e9a918cd561349b65211d4c21d900bf9c2df612bb2aa9155950f171800c11ecac232e3728c87558e999738092d4129ca763bd21e2","ssdeep":"1536:7bQemykOJXJ7CFQC8uYs8KvaQ/X4fKd/vNcvC67JAEqJZ9Qs+VAMDcQS:75mFOJqQhuYLKvzfTdn5kAKgt","tlshash":"3e63026e8fa875dad015e87a81ea1ce71303ce26500963c958fd03ba11bede546fce91","first_seen":"2026-04-30T08:27:13.442563Z","last_seen":"2026-04-30T10:43:43.673124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":541,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-19/6115a04c0fbc92a66706cb930e975294.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-19/6115a04c0fbc92a66706cb930e975294.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 19 Apr 2026 08:19:19 GMT\r\nEtag: \"917dc5d5095c8e1ba0fe6d1fb8624f68\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 19 Apr 2026 08:19:19 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 32\r\nContent-Length: 118672\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8118101862258352121\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118672,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"917dc5d5095c8e1ba0fe6d1fb8624f68","sha1":"0403c9417cdbe0d4e6d5a1b3a7bcbcfdc51b8c01","sha256":"efec17f60177055fa6437ea167daad43b3d2119e5972ea51f22e5b3c59a5aa4f","sha512":"e6c83a56fc3c191ebef2394431c40ac67dc5664087474c27284060c0b6daa48a2756d2d27a934250c85cddbca37f2731e45749f164154f755d20a5763b824294","ssdeep":"3072:fvvhYHagxjizjS3X/tQl9TOePBvmy8hTJWM7qy:nvq6Kj+lnWs2qy","tlshash":"d7c312e45ccfdffcb4e41296d88f6ea930b1c70a3c3a2c898591f1a9583d5878961f19","first_seen":"2026-04-19T08:44:06.083641Z","last_seen":"2026-04-30T12:48:20.738849Z","times_seen":610,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":501,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20231026/2023102620184160107.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20231026/2023102620184160107.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:12:49 GMT\r\nEtag: \"a6bdcdf9f788925c40b4933ade16e75a\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 17:12:44 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 65375\r\nContent-Length: 736\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6883411334137055326\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":736,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"a6bdcdf9f788925c40b4933ade16e75a","sha1":"b9d417252d52c8bfa41462a728c67205febfb9be","sha256":"67f7c7ed605dda502279353b1b43c59fdabd43a10d84c1f9b4b925a0946db40a","sha512":"a9f62b51d36b29c6082e1730f497d0f7f9b9be8f15773600f0776c9dc955b1c18da3887c521ccafba00301bddf7ea3094976e162a8c8adb597d017b6b5744b7e","ssdeep":"","tlshash":"dd0165c210e56805b694a517758086f9ae44195987209c7dda568610ee33d338c54279","first_seen":"2023-11-12T15:49:18Z","last_seen":"2026-04-30T12:45:41.137142Z","times_seen":22376,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":667,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/layui/css/modules/layer/default/layer.css?v=3.5.1","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/layui/css/modules/layer/default/layer.css?v=3.5.1 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 3428\r\ndate: Thu, 30 Apr 2026 10:19:24 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 14 Jul 2023 10:02:39 GMT\r\netag: \"64b11d3f-37bf\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: rZJyZh9tezDxmX8gPHr73xm_XhcwgtRWfUKTJRrfevuhHO6OpSbWNA==\r\nage: 1420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":14271,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14271), with no line terminators","md5":"c234eb06d5f32055092294e78957f17d","sha1":"f15ee0bcb9694f32f5e1d524f2653aa0dd043402","sha256":"5cdf3edb27b0c9f8e48918c486e9ae65a9e5beab806b64c4a7bc5bac53c0f540","sha512":"3f06b51116d7f8026d81c7eb6a3c4d871462d09fe0a5b8cc8b7feaf20cbc88b0b6a545f0ec7cbc17566a9ff609405f58fad6eddfb3a8b3f6d530ede8fa3fad5c","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXi0nMLPD2OtLzAyPHL/LztJDzyv2OQ7KGx1j9d2/nWUU:1ELr2Otzrzzt42OQ7KGx1j8WUq4S3cU","tlshash":"f75242e144911299b0278721d6dc7eba32f88d43e5630caef2573c1f874c6dba2b6647","first_seen":"2023-03-10T11:40:20Z","last_seen":"2026-04-30T13:11:45.072546Z","times_seen":49486,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/js/qrcode.min.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/js/qrcode.min.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 8132\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 26 Mar 2026 08:53:44 GMT\r\netag: \"69c4f418-4dd7\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 4AEWKNQTrIfKASzG1AzMaHbAhc-vfek68xovUUJ2jdZ4za1_Ke_RZg==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19927,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-04-30T12:39:53.743988Z","times_seen":56856,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/icon-up@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/icon-up@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/search.css?v=20260414\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 358\r\ndate: Thu, 30 Apr 2026 10:22:26 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Tue, 22 Jul 2025 12:20:29 GMT\r\netag: \"687f820d-162\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: qwiA5C5dDfQvEyTXgWxVjF-U2Mdrspl3wLOjr-0xLy_qQbDpnCKj0g==\r\nage: 1238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 4-bit colormap, non-interlaced","md5":"81df81c8a4d658d5e3e22e9f14a90cf6","sha1":"dba2119bec81f3ce458ed0ffdeefde0afc5eb5e1","sha256":"a5007a2bd7b90cc4566abf22b92f0365ae6377209b749dbf74626ee96bfb0fa7","sha512":"c7f98e5eaf3ba2336c5138c45242f8c96ce2eee72fbc8c00dabf7ae58515d3ebf35534dbfbb85796e8e8058651462c0ec404fec9080140cad917e57a14adfaf8","ssdeep":"","tlshash":"0ee02df4da09ea9040744c2bd8b163d0feb29d8c3120c0dfad68303823b8106d2437a2","first_seen":"2025-07-12T04:18:50.98186Z","last_seen":"2026-04-30T12:45:41.06428Z","times_seen":22563,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/mirages.min.css?v=20251218\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\ndate: Thu, 30 Apr 2026 10:30:58 GMT\r\netag: \"64b11d8d-12d68\"\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\naccept-ranges: bytes\r\nlast-modified: Fri, 14 Jul 2023 10:03:57 GMT\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: H_uI3hDXyYuKMHBLF7vBXBfMeFG7CuI82H0X6aCja47DPMHlshkpGw==\r\nage: 726\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-30T13:35:04.746148Z","times_seen":445708,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-20/09a839a5bcf7cadbff0a10e259234f0a.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-20/09a839a5bcf7cadbff0a10e259234f0a.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 20 Apr 2026 12:59:25 GMT\r\nEtag: \"a225e06e25664722ea8abdfba16a043b\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 20 Apr 2026 12:59:31 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 167\r\nContent-Length: 535808\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5170503366635700384\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":535808,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"a225e06e25664722ea8abdfba16a043b","sha1":"d30bdd721b7f3de1904210ad73316e2d6f928ec5","sha256":"e89b20d4ec54d5f63bb7b33675740ad2daff1782d166bd45d1ad41814e76f623","sha512":"43e503584ad5386d02958bc6f1529ea45ad365f6a5249e7bcfaa7dabe0867ad741c57150d687ac2b174d19ac4db08906744222631b704d12c24bb44e5d05baa7","ssdeep":"12288:2AimncDtFt9i2R3ZFow9AmHLlZCF04GhZ:2AimncDtFt9i8j5BAEZ","tlshash":"8db423ac67f0def8ba7619c5ef5480553113b256e62ad11b9b0fec548017b82a8db333","first_seen":"2026-04-20T13:05:19.140085Z","last_seen":"2026-04-30T12:48:20.805638Z","times_seen":560,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":617,"dns":0,"connect":0,"send":0,"wait":8,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20231025/2023102511321611484.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20231025/2023102511321611484.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 29 Dec 2023 10:52:07 GMT\r\nEtag: \"2001f683716e4fbeb353c7d40bbd0362\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 13:35:27 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 78412\r\nContent-Length: 288\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 907254893460692463\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":288,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"2001f683716e4fbeb353c7d40bbd0362","sha1":"b588560d562a1656ae06afbada1823bfbf830e0e","sha256":"89924fc3c9399587455720b36af65bc7f559379841de342e235bc47f5fdc4564","sha512":"afc4730cb39fa235e118d92e632a53814f38b2021896f9e990dae0f6a94a6130a57a4647c6cd2e9eca6694f284bff4d1fefa6fcf83222956f449720d1bd9e948","ssdeep":"","tlshash":"d0d0eb0022300cba1b1666b0ccc08068c66100d8b10749368b7ecb0fca3a35adee55ec","first_seen":"2023-10-25T11:55:10Z","last_seen":"2026-04-30T12:45:41.039954Z","times_seen":23775,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":623,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/rank-1@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:05.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/rank-1@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/search.css?v=20260414\r\nCookie: _ga_P6HKH41365=GS2.1.s1777545785$o1$g0$t1777545785$j60$l0$h1780620998; _ga=GA1.1.1535918992.1777545785\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2931\r\ndate: Thu, 30 Apr 2026 10:20:44 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 05 Jun 2025 07:04:02 GMT\r\netag: \"68414162-b71\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: g-8Dza6IDa5bhdvSZ5XuzKIwKpjr2byBV3ZG-0RpF-Sg-Xw62RmU1A==\r\nage: 1341\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2929,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"abac25d37a9ac9344c49557ebfcccdb4","sha1":"83b9f56ec29cd0b56e34c938be11ad9bf1282c5c","sha256":"afe1b7a6d3f013b149bad9c96316fa9ab1bb259596d1fe5648e86f236115ac38","sha512":"ef44f375c46e4332861aff8d51407ea7297fe6b11c0f2b5a87f96f1ec3b72815ed608a052ad599147c271e1eace7ec85bd3f6fa523d0aaaac68dff00fb48ca19","ssdeep":"","tlshash":"4d515c8285ceb0f64b1ec36f4b51d4d9f0736c453982de95ada831c64bf1cb7d9816a0","first_seen":"2025-10-28T07:13:52.661811Z","last_seen":"2026-04-30T12:45:41.020006Z","times_seen":9610,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/hot.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:05.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/hot.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/search.css?v=20260414\r\nCookie: _ga_P6HKH41365=GS2.1.s1777545785$o1$g0$t1777545785$j60$l0$h1780620998; _ga=GA1.1.1535918992.1777545785\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 951\r\ndate: Thu, 30 Apr 2026 10:20:44 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 21 Nov 2025 03:34:30 GMT\r\netag: \"691fddc6-3b3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: GvhQOjwlA7ZeKoFqsjichJE-Akd3bRTRlwQKzUAljmmPSa5Fj_xA_A==\r\nage: 1341\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":947,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit colormap, non-interlaced","md5":"60606d4e0f59fbdfbb8f5aa250984060","sha1":"6e1c590ce130c507335ec0c0dcea49778f73ad74","sha256":"9f7d99be622dd7e4cb5faa8518e99b4d0f3b7ed67c5407b0496532135707951f","sha512":"5679fa0685c1ee0e400c4647ef1ede417c69a3123a2c252255d4f7d1baed7189080874131ad2585ff6f5ad4a792e2083fb5b3036ba52b44cc95b5a2799ab4781","ssdeep":"","tlshash":"2b11c464bdea5db14e841e22436af245ac35b6ecd3332548da8f1040299f02abd817ae","first_seen":"2026-03-13T08:37:15.113735Z","last_seen":"2026-04-30T12:45:41.095143Z","times_seen":8621,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/logo-2.png?v=1","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/logo-2.png?v=1 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 37360\r\ndate: Thu, 30 Apr 2026 10:19:29 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 10 Apr 2026 02:21:20 GMT\r\netag: \"69d85ea0-91ec\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 0ttwRBItlne5ELqKFNjR2Dypobt7rK2eUPwXjaTLvx3yp4Zq1bPCeQ==\r\nage: 1415\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":37356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 80, 8-bit/color RGBA, non-interlaced","md5":"58e4aeb5c8a2c2b803d40a7e72b952d9","sha1":"5ca98ad019e741eda326feccffdc99622cfc1a83","sha256":"50d767bcb329515a617f0e5ae57f10d9e18e68e96d828ab26d8718011eb0e196","sha512":"588241567592c1126ee0bfea947411b3da41d44eb3095386247ae7ed4f36f9e15ad08b5d2b86cd1b483c44914e2cb28c604c30dc197591c3b2233e14118dfdd1","ssdeep":"768:AlU492+h646Uc3jM/0MiYyU9sZ2qz+XKcPVBBC8hNO:AlD2j4EBJU9sME+6cjwd","tlshash":"84f2f18a056283be4fdd18dbdec23f8c3eda09e5dd2ef12d4994444d576cb8350ae294","first_seen":"2026-04-10T03:52:30.156352Z","last_seen":"2026-04-30T12:48:20.753595Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-28/3eb2837e6f5a320e45c13d63e1ce2a32.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-28/3eb2837e6f5a320e45c13d63e1ce2a32.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 10:39:28 GMT\r\nEtag: \"ba1f51791321281d2758b4af35d56183\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 10:39:39 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 38\r\nContent-Length: 212032\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15289469753804617973\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212032,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"ba1f51791321281d2758b4af35d56183","sha1":"0744b9240605171a38b305f5ce1fb61ed92903fb","sha256":"e014032cf3f2008c173188592c55fc2dc66b67e29e540cb16c2c95df4bf3c43b","sha512":"2f29ec32778d89f71e4e941460711a422da89b0bf83bf68472d8d91d998793b73f09f5ddc31ec124ab8f88b7ec90944587a3fa515abdedfcc9b82ebdef330058","ssdeep":"6144:mIKgZgu+JzKc3+Zj6FYh4TweYXwIED+IVPTV5PN6Xkt5:9KVu+BN3kjvXDEyIVrjN6e5","tlshash":"4b24231de7812a288aae1a51d777153b775a381d4b6f73bfd2370d4800c2ead996c2e0","first_seen":"2026-04-28T11:32:24.601148Z","last_seen":"2026-04-30T13:11:45.061723Z","times_seen":149,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":508,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20240424/2024042420520535158.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20240424/2024042420520535158.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 24 Apr 2024 12:58:09 GMT\r\nEtag: \"6e220a8ec043e7945835b16c327d6346\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 17:40:59 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 63680\r\nContent-Length: 544\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 754121848881747534\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":544,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"6e220a8ec043e7945835b16c327d6346","sha1":"c8481ea75ba92c081353928d121f7b8cc98cb382","sha256":"be2dde197704a4ecdf8ce80a296fee2e32b9a50125d3da59c7ddd324145dfde7","sha512":"9facd03c5abdfed6145fa35a475684e69768951cef50c530c7897f23ec332ec80ae338f9eadab69ff4efe542c30225646c8e29e6b8c8112838f7a3cfd877317f","ssdeep":"","tlshash":"6af02613537e004e2e1b198a6fad3107458164ef416a432d7bc21716695e7277465528","first_seen":"2024-05-03T10:06:21Z","last_seen":"2026-04-30T12:45:41.113771Z","times_seen":22551,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":649,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ap.dc-report.cc/api/eventTracking/batchReport.json","fqdn":"ap.dc-report.cc","domain":"dc-report.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:05.770Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: ap.dc-report.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T13:35:14.666833Z","times_seen":14425156,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":16,"connect":357,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-P6HKH41365\u0026cid=1535918992.1777545785\u0026gtm=45je64s1v867709946za200zd867709946\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616986~115938466~115938469~116363098~117266401~117512543~118463262\u0026z=1979295161","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:06.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:21:55 GMT","end":"Wed, 01 Jul 2026 05:21:54 GMT"},"fingerprint":{"sha1":"72:FC:60:7E:7B:61:3F:60:6D:5D:44:4B:8C:4A:7D:06:38:84:9D:A6","sha256":"9B:56:CB:E2:46:37:E5:19:5F:89:43:5F:F7:61:72:8F:11:C9:8F:E8:B1:92:24:F8:BC:3E:F1:C6:F0:2C:91:DE"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-P6HKH41365\u0026cid=1535918992.1777545785\u0026gtm=45je64s1v867709946za200zd867709946\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616986~115938466~115938469~116363098~117266401~117512543~118463262\u0026z=1979295161 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 30 Apr 2026 10:43:06 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-30T13:35:11.245441Z","times_seen":835329,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":74,"dns":206,"connect":15,"send":0,"wait":35,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/Search/pc-nav-icon-tw@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/Search/pc-nav-icon-tw@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 504\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Tue, 22 Jul 2025 12:20:29 GMT\r\netag: \"687f820d-1f4\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 7r0TcWaLCN-FG9af-AvpFpVyqe8KKMBfLFP06Z3ioz-HuWuzUeRddA==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"7c92935d5bf83d7aca1ec31dc31e7abc","sha1":"975dc5c3c14a1774bf97f2a22ebf524fc4a8709f","sha256":"59bd73a9b3e779db687f9cdcd77ebff91850e618a1469b6f08686df4a392e37c","sha512":"d8c08d787976b3470cd71ff27126d92239fe7a0cedc1daa672939e2817a556c53f07c782e54c8030e3cb43ea5663875f1996e8a91cb521e5da1226135dcb315c","ssdeep":"","tlshash":"4bf023d7a7543c5481a74edbf8e11993f83a3c6a050152aeacb4f0b5083c08bc196184","first_seen":"2025-07-12T04:18:51.012831Z","last_seen":"2026-04-30T12:45:41.052661Z","times_seen":22540,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260427/2026042712254743331.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260427/2026042712254743331.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 27 Apr 2026 04:25:51 GMT\r\nEtag: \"d26a132cda117a93328c0a9c44af7ff2\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 27 Apr 2026 14:10:30 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 357\r\nContent-Length: 146448\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15213904096779956616\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146448,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"d26a132cda117a93328c0a9c44af7ff2","sha1":"c5625603da4ebbdafe164730a6d580c8a43aec17","sha256":"40faf5af91376ec7fbfef116c26760232195b5f05615378c65e448b722c01189","sha512":"48cd3b4a26d0f588b0394ce6bf2abfc45e1db2e4886a44ce294afee92f383ea88a0a0275be4b569ed13c8edd264fdbad6121f9c97599b29a6af7df6f09f2048b","ssdeep":"3072:dwl2RM3SuvtiexsL541DhIeLj21muHcsn+p3:GPCuvtiMsKNhtLjymuT+p3","tlshash":"ade312793ba6204d59f01d274b205503fd9cb8fabb922463cf1361319f1b8666fa1772","first_seen":"2026-04-30T08:27:13.529008Z","last_seen":"2026-04-30T10:43:43.685401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":515,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260427/2026042717031460627.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260427/2026042717031460627.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 27 Apr 2026 09:03:19 GMT\r\nEtag: \"4f062719f54e5fa52f5deee1b0cb1cd9\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 27 Apr 2026 12:41:32 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 386\r\nContent-Length: 68352\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13168961467871290563\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68352,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"4f062719f54e5fa52f5deee1b0cb1cd9","sha1":"251c9025e9e61f88544a345fd867edeeaa5ded59","sha256":"5fce6a7cb089ee5c099ad4f2b59df50036633ba95146bcb09e0ae0c6580b0b26","sha512":"058a30aa8a558897299368cc71f464033a542276760c601ac192ebf0c9f95aacb40332a7e65d135b1880deae82c00abc40685ca570b1854e0a4e5aeb40fc75b2","ssdeep":"1536:jdZlfFQw6csXzFkL1ELgVR3gKmCeZKJwcbFSTKT5HvnB:jTrrpsXBz03mCe8bcTE1B","tlshash":"096301f074a2728bf65599258b10becd3694d69cf3181050e4e6f36ac2f99fe0d7660c","first_seen":"2026-04-30T08:27:13.518176Z","last_seen":"2026-04-30T10:43:43.686721Z","times_seen":2,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260428/2026042820411634521.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260428/2026042820411634521.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 12:41:21 GMT\r\nEtag: \"5660cb2ea5c8f35a6c9839cc5d8949dc\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 29 Apr 2026 02:37:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 86768\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3828494328030555475\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86768,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"5660cb2ea5c8f35a6c9839cc5d8949dc","sha1":"420bbf677f2179c210b016e50f5e18bbd15e1125","sha256":"cbd0e2d457187cf19818a042c676bf58e3f14d5a2bb8d8b95f08b6c894986ab1","sha512":"d029682501743427e26f8a9287b92e2ea4698b41349598bce422a5e7883a51b3f479567956e5ac278a88a692371525eae9fed19dce82ef49839b3a8c0ff5d490","ssdeep":"1536:T4Gv8QVuz/EB3UsZrhncqgH1W9wDy4wKOLeVY5BLF5I4jcVDyy5tqQpM+d:TxxOsCsxuqgo20VKVKPPjcEeUQyI","tlshash":"0383027824151ef9007a26e9f7612b20d4ca255cab7a81c0e778e331f3921eaddf18c7","first_seen":"2026-04-30T08:27:13.522916Z","last_seen":"2026-04-30T10:43:43.688619Z","times_seen":2,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":544,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/images/ai.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/images/ai.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 364\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 09:30:37 GMT\r\netag: \"691aeb3d-168\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: QKCpqHVthOyygy4mz55z-aLgOqWP43UOjpFaIXNqg3QzlnTK52V-Sg==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 19, 8-bit colormap, non-interlaced","md5":"bdfd73be05b313c5c343e02c19e69b35","sha1":"40a591d8ec0f5134270fad42812002458e1fa3b7","sha256":"ea22009d2eb53a8f88f109607d8ff75814059f83ad1e4c1aa54179f5b1385bc6","sha512":"e67420d8689d83569fef893f166ab041b5863fd33f1b8a34056044e25eca04836cdfde2000cc306d1efccaed4340889c643706420f9d927d309100d41cf40474","ssdeep":"","tlshash":"eae0c072728cff3a9cb10273089791f58a2a4f76516491065f15841c68e6644415278f","first_seen":"2025-11-08T04:26:01.793992Z","last_seen":"2026-04-30T12:39:53.754777Z","times_seen":22649,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/layui/layui.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/layui/layui.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 107853\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 14 Jul 2023 10:00:50 GMT\r\netag: \"64b11cd2-471d6\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: XmhIMnna3rHYsB7nC381hpBKdRFLi7xOoTeAoCQBALvaFGVa9swqDw==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":291286,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"70ed0e8151d23de969de514bfd802a56","sha1":"569e6c1b0ac0b8efaa7dc0015b691334947a9665","sha256":"92c7997b3dce6ab2368b1bdb34ff4b67ac77957898a126c7eba452a8080bec95","sha512":"947eeb19fb055b07a191ec89625941abbdc8b2247b447dbec2e3958ebd3aabc34ac07a79c559e4752bd49bc44db77d500913aab4fae300077556e347d084b1a9","ssdeep":"3072:tVo+F//NOM0SF0Mz0pZN6TPKWjZIpYCrYtJ+8CZrcNBf4XcIiOb9:Xo+FdO3SF0Mz0Z6TfIpPS+8grcNBQcIZ","tlshash":"02543a9d758574b3237360a6406f990eb17b093daa0a8060f166d4fa2dbdc885237f7f","first_seen":"2023-03-07T12:09:26Z","last_seen":"2026-04-30T12:39:53.835983Z","times_seen":32168,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/web-sdk-v1.1.3.js?v=1","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/7.10.0/web-sdk-v1.1.3.js?v=1 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 16941\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Sat, 25 Apr 2026 07:57:52 GMT\r\netag: \"69ec7400-b4c9\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: dhJ4Aa0QF6E_TozJk4ZlA2sZhYlYioFcD-nJmLmIi8HKWd9d1bxT0A==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46281,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45886)","md5":"2b196930fa8660c3a3e9688b07e864df","sha1":"522362f66db5cb600042a7b85589efd1a778559b","sha256":"b016790e18668a5cdf7faa1f6f6b6dcbb2e5fb8bc52a41c7788fe0fe852532d1","sha512":"d4d25eeb8ea600f57ab64cf1ccd4da93a53189497e41220e407c3fa0b2a8fba1cb1e8a8c9581b3e06f0c3055cd587dd09b9d15f1bfb14cb101bda1997d3f6b0f","ssdeep":"768:7kgfsiW7qvtwF/t5NErAneLbk2c/zezOxdn/MNOuVJHcXn4jy21:7kg4/GWbzaz/Ka","tlshash":"9a23d89ab796712703926975582f100be23b5e1e4c4d41b4f311ece47cbe28ed236fa9","first_seen":"2026-04-25T08:47:24.286204Z","last_seen":"2026-04-30T12:56:55.772355Z","times_seen":467,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/github.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/github.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 628\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 26 Mar 2026 08:53:48 GMT\r\netag: \"69c4f41c-270\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: gMKuL7WJA5KFXbBU3vDBRLdrwXLkv-yZLVuBTkhdwyw9lL8t7dERXg==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 4-bit colormap, non-interlaced","md5":"7eeb4e826318468dd09ffcd3713d4008","sha1":"e2907d62b39dd78deb8daaae30760f7e40f02123","sha256":"d1f426df6fa06fa7557522a8569969f1ab37f80995501527709460bd06a672e5","sha512":"3dfe022dd48b2c1014d7290050f699217410d2f1d531c6edc986257a3a542d2f2f93ea0be1df95f13635cad82bb832c3ca5407f012ffa85b768b8a8398d72555","ssdeep":"","tlshash":"3cf0b7c567178c2bd777d595dd875680b8aa0c27a350024f1845b11f8d3802110bc10b","first_seen":"2026-03-26T09:29:38.993708Z","last_seen":"2026-04-30T12:45:41.083994Z","times_seen":7822,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-dc-prod-002.cyou/api/eventTracking/batchReport.json","fqdn":"api-dc-prod-002.cyou","domain":"api-dc-prod-002.cyou","tld":"cyou"},"ip":{"addr":"149.104.32.238","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:05.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api-dc-prod-002.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 13:55:49 GMT","end":"Tue, 28 Jul 2026 13:55:48 GMT"},"fingerprint":{"sha1":"E2:76:5B:F7:27:C9:73:D6:04:E5:F7:DC:A5:7A:C7:F6:7A:DA:3A:75","sha256":"8F:1F:6E:49:61:08:13:E9:B9:AD:27:2F:37:49:94:A0:AF:57:F5:EE:E3:DF:F6:AD:68:B8:29:20:47:C7:B6:F7"}}},"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: api-dc-prod-002.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 30 Apr 2026 10:43:06 GMT\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gz7j-2.lzcfenuuf.com\r\nAccess-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAllow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\nContent-Length: 0\r\nx-request-id: 019dddfc-324c-7d00-9c4d-76e2ce0b2896\r\nServer: Xcdn\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T13:35:14.666833Z","times_seen":14425156,"resource_available":true,"data":null}},"time_used":860,"timings":{"blocked":86,"dns":126,"connect":152,"send":0,"wait":325,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"api-dc-prod-002.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260426/2026042616340768069.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260426/2026042616340768069.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 26 Apr 2026 08:34:11 GMT\r\nEtag: \"a5d3c275d2da77990947738f7864d550\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 26 Apr 2026 16:10:08 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 153\r\nContent-Length: 69952\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 187997912779389009\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69952,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"a5d3c275d2da77990947738f7864d550","sha1":"c4576ce035e8b6e275faefa20ae6ae49af1d6699","sha256":"34243c997f7aa952c8cecfcbc1f2b8878a32e4069935f3d4074b64e2233c2351","sha512":"e1ebf388671bc96b045541ec05abee0b85e096213c31898424a897cf84b7b8062013fa98383fc570cb0735205a216c7b86b09066ff192ac22547f2b09ee3d74a","ssdeep":"1536:M6ziuh1+pO1gpKqJSg7MTitKwhH8XtIwKSowJzRD95tYZXZQS:M6zBApO6pKqcg7MuQwhH82uoszN2hZV","tlshash":"d96312a34c5f498142abcd4b3ed19c998ac0931b39c2709734976fb35d9eb6b8072372","first_seen":"2026-04-26T18:52:01.337414Z","last_seen":"2026-04-30T10:43:43.692207Z","times_seen":8,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":502,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20240424/2024042420520546340.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20240424/2024042420520546340.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 24 Apr 2024 12:58:09 GMT\r\nEtag: \"27ae198fca34876f072bb644aa9242c4\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 09:17:38 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 7481\r\nContent-Length: 272\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3129066461904958968\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":272,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"27ae198fca34876f072bb644aa9242c4","sha1":"be8da11fbe724e2910ff65d54bba67bdbf86fb05","sha256":"26e9ae75be4e86f7ecccc70c05f9d1742f2a7520fed7dd1258a94284c08101c0","sha512":"977e72a9845b87082d55e6a7e55dbdd5dc004cdde4ad3ad0c3f63b627c550958ff86add8f5aee020dc08f188ce747d9c7d909ed01669bb19577eeff9e8c6b6b9","ssdeep":"","tlshash":"b7d02b1545220b922f9aa72e4bb154644f63c292405f4a765184e61a1de2454b100d57","first_seen":"2024-05-03T10:06:21Z","last_seen":"2026-04-30T12:45:41.01682Z","times_seen":23726,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":622,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/index-ai.css?v=20251210","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/common/index-ai.css?v=20251210 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 3690\r\ndate: Thu, 30 Apr 2026 10:19:23 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 26 Mar 2026 08:53:48 GMT\r\netag: \"69c4f41c-2c41\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Q_Cuq3SZZzJSXNvAfLRW1fUVSQ3y17g3rQ4OuOv1Q6IxW78j0Zi_Hg==\r\nage: 1421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11329,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e589c31b3d44df7a1333b54148e77ec9","sha1":"1eb26afcad71481d3a775c26848099f21a0fa89e","sha256":"74cd118c7b61b20948fabd0bb6ea2239b7e1ea5ea055b7008ea45d825624d164","sha512":"92281528b0c09ff5bd60aa456bb918d18079a40ad9c3308294ee7943088e61489a870f163619c1c3188c3620938960699292d4845c365292b78a0e4114b6c05c","ssdeep":"192:8nfAMTN/pMlr7BwFbuA+ZmVckg5plXrcOY:8f9Vbuvm+kgJW","tlshash":"f432a610e25f385b761b80b8badcebc4272c2404bf049fa8b56579b2478e3d514b37e2","first_seen":"2026-03-26T09:29:38.87734Z","last_seen":"2026-04-30T12:45:41.061697Z","times_seen":7843,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/index.css?v=20260412","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/common/index.css?v=20260412 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 1953\r\ndate: Thu, 30 Apr 2026 10:19:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Fri, 10 Apr 2026 07:14:48 GMT\r\netag: \"69d8a368-1984\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 0nJhzZ85QK0gaTG8WkHCosNOUf4GkFKkRdNlofDAxSHWA3v0UvuuAw==\r\nage: 1421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6532,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"431547b01afdac06c05d495375620329","sha1":"75456eac53c9e5432bf13b8aefa6ac52a9ebcb52","sha256":"1a2bda903120e4f632fbf3ce7f663882dcc8505fa5bdbe02f255ed74365f16f8","sha512":"d7d0d8a298d8096f6a9a58b9dee22f02e471e0a14e35c9ef0b69fd7408f41096f0b329a8c2d3deb08a3c7d666e24cd0f615eb49cff3ee88037e2e3186191bd55","ssdeep":"192:2TI9FY31TYgHA+9+Ycv7BTKTN1TeATRg4UP:6gY31TYgHF9+f1TKTN1TeAT+t","tlshash":"65d126521e672008501ef5985ef9679c153ed042bf474d2eb6d73999cf8d2c801bbac2","first_seen":"2026-04-10T07:31:59.538315Z","last_seen":"2026-04-30T12:48:20.817199Z","times_seen":978,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/AiSuite/assets/common/vue.prod.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/AiSuite/assets/common/vue.prod.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 81733\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Nov 2025 09:30:37 GMT\r\netag: \"691aeb3d-2f925\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: TbLiAcG2Gma1QPUhMmhoD-UsYVLb6tdt3WYMl3NZgbCi-mZEIX8K-Q==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":194853,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28532)","md5":"9b14a30d9be6b89ccb5d9426baa70059","sha1":"e55a9116be9d0907b48698418b9e348d36bd3624","sha256":"97374c2e6815b02920dc02d8cca04507973d9a4d82aa5dafa20d04c2227ac9d2","sha512":"90840f4551f1ceeb2e764fed6a632d0eb39006fcbec40166664f0e7f0241347d8679fddf6e41658f939d0b00e893f1bf4ae97429f320c6dc60af0d87c4ef9dfc","ssdeep":"3072:c0RkBL/7KE2X44lDzvWUgT5Asswj2z+e7/72oIKc01DcUrIH:c0KuE2X44lDjWXT3j7e2KctH","tlshash":"2c1428b93181703217ea14e250bb0016f33a1525780984e8b5bde8df2d7695a61fffbe","first_seen":"2025-06-27T04:20:30.543622Z","last_seen":"2026-04-30T12:39:53.778812Z","times_seen":32442,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/tjtag.3.2.3.js?v=1","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/7.10.0/tjtag.3.2.3.js?v=1 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 15217\r\ndate: Thu, 30 Apr 2026 10:19:23 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Mon, 27 Apr 2026 14:15:13 GMT\r\netag: \"69ef6f71-ab7d\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: exwn2RGmJr3ag0uYCATKOQIUtC4WP3fc6E6NRxYEpDhyplLi3EmuJg==\r\nage: 1420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43901,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43213), with no line terminators","md5":"263dbd2bb380147d245bd459ad162367","sha1":"36c01341c6399b1310df76453b3737487e46d47d","sha256":"2ba7a2439464e510fa7143c8d20a5d135dafd36a492bad1c198e567f3be82844","sha512":"233e52a5a713146db77bb9e2864e12aea76eca2a136bd23ac82af3cb5e0d7b778beac021d7df17dbfe7a3987917f38d633e011e8f382f08d02cf6e2a009be908","ssdeep":"768:05wTDlS90GMy4GIeD/zL34Ox/YKI1KQAWJe6VKhOk5xOKh6DmTI/0TFItClZwCLJ:0wViTTTu5aPguW6D","tlshash":"0b13a2142ec07855234b1ffb732771f8c92e0cab3d45494fe405bca4a9a262bead6635","first_seen":"2026-04-27T19:30:05.789869Z","last_seen":"2026-04-30T12:48:20.804017Z","times_seen":219,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.shenfeng.cc/api/eventTracking/batchReport.json","fqdn":"api.shenfeng.cc","domain":"shenfeng.cc","tld":"cc"},"ip":{"addr":"172.67.131.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:15.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shenfeng.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 10:02:51 GMT","end":"Wed, 24 Jun 2026 11:01:29 GMT"},"fingerprint":{"sha1":"29:E9:ED:51:42:52:E0:B1:7F:3D:BA:85:1B:7C:2A:26:30:6A:E3:03","sha256":"63:BA:19:E0:5D:0F:BA:2C:62:63:00:B8:0D:7F:28:3A:02:D6:0F:B5:FD:F4:EC:7A:94:31:18:75:42:18:9E:C0"}}},"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: api.shenfeng.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:43:15 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gz7j-2.lzcfenuuf.com\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TBfIuob4efHiCyLmA%2FBqXwmJCsnz1sjewGHAwhcaY9tA9OqsGf7vYS7RLbTZADB0xHOkp1FRaBTElFRLqxYppWBEZpMteMfMUlya%2BpXgAvz3ryCfmNtqc02RYvpSJRVhxbI%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f45f1c2fe5d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T13:35:14.666833Z","times_seen":14425156,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":398,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260429/2026042923173937110.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260429/2026042923173937110.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 29 Apr 2026 15:17:43 GMT\r\nEtag: \"239b681891493b8d0757cf3020664b90\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 29 Apr 2026 15:24:43 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 527\r\nContent-Length: 102752\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5067958458119274183\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102752,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"239b681891493b8d0757cf3020664b90","sha1":"df1106c7d5dddbb6cd35974f60366c78756d5a8e","sha256":"ce75fe615f40285dfeae760bcfc68159d0bf74df8faf66d5bedc554c81c7f7b4","sha512":"5936aa079034d3c3e65a2e8cd6cde19c2875ae223dd3cb7f02751d60937181a3b4c6c733535462487e25c22bb992b26d4716edfe8a5733b4835465a5f6eda25b","ssdeep":"3072:rkXdG8XW2FQMIKD+s06K1gj4TnuAicuuj:gXcRwBKz6itnWcXj","tlshash":"d4a3125cf0ba1f6a5afa480ed1b00a43e10941ee75ef80a4c7f52e5c7dbae5d611a231","first_seen":"2026-04-29T16:36:52.123918Z","last_seen":"2026-04-30T12:45:41.15868Z","times_seen":43,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":537,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260425/2026042511083583237.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260425/2026042511083583237.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 25 Apr 2026 03:08:40 GMT\r\nEtag: \"596b738f4620044ba5fe3e91998e0d59\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 26 Apr 2026 04:30:59 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 581\r\nContent-Length: 82160\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 396369897547930692\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82160,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"596b738f4620044ba5fe3e91998e0d59","sha1":"b1c0356f165d71a0d13f8ee03c3142d50415d106","sha256":"8b05360134c1d5461ac001f8f97d991db3de076337cfe4e95b4d094742a684fd","sha512":"cf1c8c1356ee1a2b73b011dff1b5c484ccf55d62318c8e000d7e4f609c46a43643db24d1abe0acde33c1728bdb6074cef0d9da57988bd22f2669339822ac65b9","ssdeep":"1536:FJGzM89PFapE6vKa3EAQoXnPJaFQ4F1cpPI9G8929Xr:FJ/8/eE0/r4PcMGTr","tlshash":"c58312a4841a76a5e8dd7d7b4a02ccd22c67d9c2c3d5f452e805496eb92f8d02cf7b0e","first_seen":"2026-04-26T09:22:13.380557Z","last_seen":"2026-04-30T10:43:43.698166Z","times_seen":9,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload_01/xiao/20260425/2026042520145654599.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload_01/xiao/20260425/2026042520145654599.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 25 Apr 2026 12:31:52 GMT\r\nEtag: \"6e73628639d95cf116ab97a3b4e1ff94\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 26 Apr 2026 03:30:09 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 237\r\nContent-Length: 172976\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12548814123590773270\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172976,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"6e73628639d95cf116ab97a3b4e1ff94","sha1":"059a08c3113b3551d36bd0c50d4a7ec9a1f75a42","sha256":"20690c8636eb8487b4b2b6a3f740bebbb4ac075437862ab5c2fca6cda4b7676a","sha512":"3e9bec34c1c7b14add5c82fdec105170e6920917968f968492c21b59553b77546aea342ea76c11deb6ca15016155a9541d32fc4729b5321094e51dcb96b7f720","ssdeep":"3072:mlnudjksnmwdJmWcfHnyGjGTRFCucOAoIoPRKDhi1diW+3U9cbm9:nOXGsfyG4aOjNPRYsdCwcy9","tlshash":"5bf3226e8d67124da3894e4f95f40fda2201fd39059fb7e518e97b22f870804e3a388d","first_seen":"2026-04-26T04:47:29.451971Z","last_seen":"2026-04-30T10:43:43.698887Z","times_seen":9,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":15,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20240424/2024042420561219898.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20240424/2024042420561219898.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 24 Apr 2024 12:58:09 GMT\r\nEtag: \"b6f6d478d3e25a828f113463607a175c\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 04 Sep 2025 12:04:04 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 992\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15906052320433417720\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":992,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"b6f6d478d3e25a828f113463607a175c","sha1":"86b2ce61c15e61abb950f6903c6f23882c23dd7e","sha256":"dbe1684d86e552a2b97e3d2e1fc7a537fa0ef75da7b68fd10bb93a7f9a2d8ac1","sha512":"d5d3f7797e0f6a51d268768a0827a4ee8e404090469c70aabfb2e58ab02e34346daa77903d86c8a1d95af38b352a4899f3e4521add5fba9b2c099b9fe36d0a20","ssdeep":"","tlshash":"2511c84bdc791af9773d9bd10c816e880051858bf55f09092cb5633d988616ac867827","first_seen":"2024-05-03T10:06:21Z","last_seen":"2026-04-30T12:45:41.109607Z","times_seen":22517,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":667,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/qq.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/qq.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 692\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 26 Mar 2026 08:53:48 GMT\r\netag: \"69c4f41c-2b0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: JalhfWn6wOUx0beWvR3BUo02cstvEAR8lvfNlyWfpYH424bczDebog==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":688,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 4-bit colormap, non-interlaced","md5":"b438b2edc7a587a3d2d692af6ee71aca","sha1":"f0a18a1d84367d4ff0882cfd080fd8d30106b3a1","sha256":"b0179e7817d4ed817b4410cafe2d175db262c5b1c0e6ef55b31e18d801fa5e17","sha512":"969e750e8aa3209213fa782ecd4d5bd2a929d6e8e7e566288c0b716cdf5f55c122a7f57fcd70d34b13ee038f5ed34be3233f6fbb560a83756958731a5a0c3a38","ssdeep":"","tlshash":"310123c58ec66a0523af66d656f34013e4276faa242c762c6da27858ceb515050136af","first_seen":"2026-03-26T09:29:38.938458Z","last_seen":"2026-04-30T12:45:41.042533Z","times_seen":7821,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/plugins/FootMenu/assets/foot_menu.css?t=20231032","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/plugins/FootMenu/assets/foot_menu.css?t=20231032 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 836\r\ndate: Thu, 30 Apr 2026 10:19:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Wed, 28 May 2025 04:33:23 GMT\r\netag: \"68369213-bca\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: HelqfF6pLJOwghP3sl6gd1pHnwA9ynW5SfwjRQnSfJyTpVYsZThlow==\r\nage: 1421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3018,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"38409875f4c2ac41817851ed5e5eee82","sha1":"0c26a3b9ed9b83c061dfd5fa77f814b9069736e0","sha256":"a5145cedc0d537b7340f185eb2d065cbf323a971819781fe6a9baf05b91d0697","sha512":"b2d8df27917759576bf1b2a360c66ba8c59f8bd6d0950078d386572987c230d14727a36fed8e2b055c81d7829f69a4295474e69b951a6c8958e0cd6d502d5fb6","ssdeep":"","tlshash":"b5518f2966b30e60b9634968bb994684b37ce2038d4dbd7ffd1913c48f8e494add134d","first_seen":"2025-05-28T05:10:55.041625Z","last_seen":"2026-04-30T12:45:41.086552Z","times_seen":23383,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-21/b0f15084b506f4408e75a2196a19cbfe.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-21/b0f15084b506f4408e75a2196a19cbfe.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 21 Apr 2026 09:36:24 GMT\r\nEtag: \"862f8ebd41a563bd8d8cbdd2c64dab26\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 21 Apr 2026 09:36:25 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 481\r\nContent-Length: 915040\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16110713771647907083\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":915040,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"862f8ebd41a563bd8d8cbdd2c64dab26","sha1":"e0269ccf3971c9fdcb0d7dc89fa0b9a1893b77ff","sha256":"4f0727a758ff07b081c2bccaeb45d495298b50005dcb4fbc4135184dbbb9edf7","sha512":"9c2de764ddacadb0e358545b9cee3712f2b1e717065747357bb5d2cae19505ba3869d8daac05c1010f14d82e8ca62c9d41c7cea9ddbe448ae24222af084854d5","ssdeep":"24576:9f/xVSkVIwqmCQcPBZVjrusohEoF0sMtjyhfuNE:dbSkVIWaZNr3ZtjyhfN","tlshash":"d71533f5d3306125797eba8c93a93a091be72fa44fc3110b20280de17d95e7a5aef51c","first_seen":"2026-04-22T08:12:01.432381Z","last_seen":"2026-04-30T12:45:41.037326Z","times_seen":424,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":18,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-17/f2d409a45d88d0aac67896a0616e2c9e.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-17/f2d409a45d88d0aac67896a0616e2c9e.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 17 Apr 2026 02:19:21 GMT\r\nEtag: \"d74ac510755d43573a1130c538dbc94b\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 17 Apr 2026 02:19:22 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 109\r\nContent-Length: 235536\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11698097688662828902\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":235536,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"d74ac510755d43573a1130c538dbc94b","sha1":"9c7d77463672084596a82c2f66d89a0208d400d1","sha256":"9c68e2e0c770f55e36937595910391b478ab96377234b2b357bed03dcfbb4539","sha512":"91f2170be0215ac812564262b9e03e57862da3c3ba4038d4205583f284a082955254c4e330e5f68303a4610b9ca0ce913570b277f3dfd62e9f7ffd1272ac03b3","ssdeep":"6144:nlgdHfjGeK5s3y0Y7I06YsKzMOYog7iZcCGWpG1pl:nmdHfjHK5s327I7BKBYoHZw37l","tlshash":"d03423dab0980dce6fbc88df718bbc1cac88976c9207544ca314397795933c97a895f9","first_seen":"2026-03-28T08:41:29.83575Z","last_seen":"2026-04-30T12:48:20.756625Z","times_seen":1016,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":517,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/search.js?v=30","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/7.10.0/search.js?v=30 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 7629\r\ndate: Thu, 30 Apr 2026 10:19:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Apr 2026 02:53:11 GMT\r\netag: \"69defd97-8c0f\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 2jRiR318rI7wWEcByoOVBxqVSS_8zY09QP3eb30hIpOUEJapBjbstQ==\r\nage: 1416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35855,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0627205faebf89591b2b8175d6564803","sha1":"8eae5406cc72dcd9e490b2f18467e5f667f334f3","sha256":"cbead04490fc56ef37f1e36ad9e0618e2f9497b352621cadecc15e7c10b58c1c","sha512":"108e1ae9164c2e98dc06ad1da0181796e76a7c2ff9a1703d7805de6441f2aeeb8c86b3d531e416a251399684a06272fd039a8e2a87acf25d10a66d594d1f5f11","ssdeep":"384:FEGVkJKd3+7K33Ew3oVNywa5qwRxBuWtXtTeEI+/L7ct4:hVkJKd3+7K33Ew3oV4wgxPot4","tlshash":"81f22f2624f204329db3f0a94be7ba45bf11d407e54ace487a4c8bc09fd1e25d6a37d9","first_seen":"2026-04-15T07:12:26.144783Z","last_seen":"2026-04-30T12:48:20.798154Z","times_seen":730,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-03-18/de518aea55e39cda1f3e083511c581c4.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-03-18/de518aea55e39cda1f3e083511c581c4.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 18 Mar 2026 11:18:42 GMT\r\nEtag: \"0b0fdf9efe1395ca2e8bd6088f05ef94\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 18 Mar 2026 11:18:43 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 448\r\nContent-Length: 483104\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13823452643082129958\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":483104,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"0b0fdf9efe1395ca2e8bd6088f05ef94","sha1":"d953f58f67c88b79b9543dc606d1ebb3f0b698c2","sha256":"50efb6697bdb71826148571cc334ecfca084e97aaa5457f3cea08da707df2701","sha512":"c6b1416b8ba3a54558dd04bb55e2d905fc449e11bd83e18d8d7fa924a6ba2b768bc3183d36d3f3f36268925973e973f216a4c212b47de1834bc8712b2cd9fd45","ssdeep":"12288:A3tpOCsReeKp3qsWwg8KXTtBtNEj1rlDbyPy0:6yCZRaPwg8KntNEprN2f","tlshash":"78a423dc7d5504c8c86ef85866f46f128c341a1983bb9a3f4b9b30b5c6f8306d5ba687","first_seen":"2026-03-18T21:18:37.787698Z","last_seen":"2026-04-30T12:45:41.144666Z","times_seen":9850,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":521,"dns":0,"connect":0,"send":0,"wait":9,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260426/2026042623233481067.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260426/2026042623233481067.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 26 Apr 2026 15:23:38 GMT\r\nEtag: \"ecfab4154479c6797b02530cd8f732f2\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 27 Apr 2026 03:30:14 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 502\r\nContent-Length: 106160\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2029221498915549026\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106160,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"ecfab4154479c6797b02530cd8f732f2","sha1":"bb45b964a7dffc63fc37422db883139e3a49e8dc","sha256":"e7f41492907fc3ba722076636b8dce944d1a7aae107ea467d59f7e1ffe59e013","sha512":"f599791361a2c2fe4a83fc602ec76e325bfcbf0d54d6bd177eee33262c93415a720a1b610ec0fb98daa528fd335b534d54b0998700476491b0ec123d1e98c67a","ssdeep":"1536:aQdHBxYTWBBX86k6wcbx2jo9NDotE3TfV155b76rkxNdz9h93mOrOsKvLgA5XQ/0:QT+XwEAc9Wt4t1Eo7pDmuHmLgjUJ","tlshash":"fba302d0f5dddfa2cf48737f76e652927ba1e009026ab49325e5ebe3771647800d0628","first_seen":"2026-04-30T08:27:13.368211Z","last_seen":"2026-04-30T10:43:43.705722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/rank-3@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:05.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/rank-3@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/search.css?v=20260414\r\nCookie: _ga_P6HKH41365=GS2.1.s1777545785$o1$g0$t1777545785$j60$l0$h1780620998; _ga=GA1.1.1535918992.1777545785\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2500\r\ndate: Thu, 30 Apr 2026 10:20:44 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 05 Jun 2025 07:04:03 GMT\r\netag: \"68414163-9c0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: flhVNRV4QToBpg3RIdPppbAp64x9PL-BBbJoYRv0yQBWlUXa-y2o_w==\r\nage: 1341\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"44b6dc38e9133c0cea22f7458442ec3e","sha1":"4963100db4a6f4e33837a07f0d62370524423673","sha256":"28a64014ea2e54dee4a96dfd9923ea4693ea6a0532cf6cf5cd1c8f1aaa1e543b","sha512":"7351991697ad02b03a4e5ba0dbe7595cd5c89eb88749fa4c4df353b97bc896d0741a485faf72198694af42e58610ec3981e32b4752042b14127415f972f3db15","ssdeep":"","tlshash":"40515bda280dcc1bc2261875342cb81de565582c41f3e4adfee3c5a066a8c98c2f9d43","first_seen":"2025-10-28T07:13:52.658458Z","last_seen":"2026-04-30T12:45:41.047843Z","times_seen":9609,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-dc-prod-001.cyou/api/eventTracking/batchReport.json","fqdn":"api-dc-prod-001.cyou","domain":"api-dc-prod-001.cyou","tld":"cyou"},"ip":{"addr":"149.104.32.3","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:05.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api-dc-prod-001.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 13:27:50 GMT","end":"Tue, 28 Jul 2026 13:27:49 GMT"},"fingerprint":{"sha1":"FF:97:84:2D:48:19:CF:47:81:70:BA:BB:D4:79:FF:43:DB:DC:2D:55","sha256":"03:21:0C:BA:C6:75:FD:B4:8B:E2:46:52:C9:6A:FA:71:59:FD:48:83:F3:7A:E2:39:BF:06:02:2C:34:9C:25:4C"}}},"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: api-dc-prod-001.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 30 Apr 2026 10:43:06 GMT\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://gz7j-2.lzcfenuuf.com\r\nAccess-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 3600\r\nAllow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\nContent-Length: 0\r\nx-request-id: 019dddfc-3248-7bb2-8e30-9d58f33dd2b1\r\nServer: Xcdn\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T13:35:14.666833Z","times_seen":14425156,"resource_available":true,"data":null}},"time_used":864,"timings":{"blocked":88,"dns":125,"connect":156,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"api-dc-prod-001.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/Search/pc-nav-icon-down@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/Search/pc-nav-icon-down@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 330\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Tue, 22 Jul 2025 12:20:43 GMT\r\netag: \"687f821b-146\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ybsHvck_qXsmkHA5b2N6AY0_aQtXBXI9LgWTBWdnG_2mJkAx5lVxpA==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 4-bit colormap, non-interlaced","md5":"7023a802c4d373abf7342efe94fa3a98","sha1":"c24cecc5067dee2e5680fff5316cc6f3b940bba2","sha256":"c2197abaec128edeacd5e035178d85dfb36c2d07986033ae13cda8fc83c5e509","sha512":"87c87a9e5afc033f865d9bf4976f3d9c497842213bb653a75498057bdbadda64c1bf6809f76f5cee28a2e652ddb970d877fd71d5832dda033c7110f133bfd9ac","ssdeep":"","tlshash":"dfe0e7d2bfcfdd8c5f270d77c631504054153c62336190773504b4007537145c853291","first_seen":"2025-07-12T04:18:50.955771Z","last_seen":"2026-04-30T12:45:41.111775Z","times_seen":22585,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260429/2026042922094176203.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260429/2026042922094176203.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 29 Apr 2026 14:09:45 GMT\r\nEtag: \"2f62c3ab568b00b25142472dfdab673d\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 29 Apr 2026 22:31:19 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 336\r\nContent-Length: 181664\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18354829931219816551\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181664,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"2f62c3ab568b00b25142472dfdab673d","sha1":"7d2c77cf4ce57fca05cb8db2502784fccb56d604","sha256":"dd2be07da605e9e35d8b7117f49894b20f652baea82e9fd261609c8d1d0862e7","sha512":"01b3638cc1a92242d03b68d25130c31bfd53a1f27002e331a62f089d997f902cd2e18af330cb5f4ef751be8646a34abbf01dc9d0a0e005a90b1abb6ee56308be","ssdeep":"3072:5y7xI80ik52at1FwEs4Qo54/Cda3uJa4PLvPoyIUQe6AY3qjZqhpcGGje42Ju:5B/dnwEs4Q04/Ck2a4rPoVg838ZUp2jb","tlshash":"2e0423cc735422c2915a307a5d8a4a04fded4271ebf8ff93b0c6667b8a54983c67d34a","first_seen":"2026-04-30T08:27:13.425567Z","last_seen":"2026-04-30T11:24:20.493786Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1226,"timings":{"blocked":595,"dns":372,"connect":9,"send":0,"wait":15,"receive":29,"ssl":202},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260428/2026042813361065365.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260428/2026042813361065365.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 05:36:17 GMT\r\nEtag: \"f5af70e299a7e5597cf182d056e842df\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 13:43:23 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 1970\r\nContent-Length: 63328\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1405767538427014027\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63328,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"f5af70e299a7e5597cf182d056e842df","sha1":"6c872f237e471da8c7e7aa33e12743944ca68f2b","sha256":"ee2df0a89f666ad956a27a834aae65438c7da8908bcad3409f345d7287387a7d","sha512":"75e017d198719dc6025328e45e108c2848954ea83b428a11dc3f963bdad232c9e094a4640cfa2811dc74cf85f5e88d96e369bc52b6b4ffd1cf6d138d178eeec0","ssdeep":"1536:8R9caYKs3M/WeDEuG02JQrsfrWqrX0WcP2CU3VS3WEhXSGP2A:qsiJiQrsj76hU3VKWEBSmF","tlshash":"e15302773c6c92de9d4923132198356f9edbcc1989926263c7cdcc4a2a0710e4696f9e","first_seen":"2026-04-30T08:27:13.469788Z","last_seen":"2026-04-30T10:43:43.711299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":539,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260427/2026042716052789048.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260427/2026042716052789048.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 27 Apr 2026 08:05:30 GMT\r\nEtag: \"08a7b4dedf01b3e4fedefab6f0c0d40e\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 27 Apr 2026 20:31:42 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 999\r\nContent-Length: 103936\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9711461714601110679\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103936,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"08a7b4dedf01b3e4fedefab6f0c0d40e","sha1":"32225bf12112045894b9dc01c8c87d256a942a1d","sha256":"d8fc804e0e2c7c9138b725f7d4cd5c55d22064b095996c9d4c1821cf8c0a730e","sha512":"5e29a4540c7c058d19513dfdb11c926f93a822e99386e385cb19aa91b7c029dfce28f16c8adf483470792d87f56b43abeb2ae5af0d0268de7d6e2268f72f99a8","ssdeep":"3072:rUpMMFZaGgLwnZfsI5a18i3rX4tb61il3R:rl4EGwMZfPnI4B61KB","tlshash":"6ba31258ce6c27b34781105b0267abd4aed60bdb9252d41928e3c5234fd0d6effb6623","first_seen":"2026-04-30T08:27:13.477932Z","last_seen":"2026-04-30T10:43:43.713084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":518,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260426/2026042623344453682.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260426/2026042623344453682.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 26 Apr 2026 15:34:49 GMT\r\nEtag: \"e134b7a514f9892c82451f582e8b418a\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 26 Apr 2026 17:10:15 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 174\r\nContent-Length: 194704\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16523003755373405720\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194704,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"e134b7a514f9892c82451f582e8b418a","sha1":"fa31b2239d270ccdd79b67b8fbac7685109c4d72","sha256":"d22bf898feb0674d96c38c741730db6cd355d873d635d36e3672d0615d693eaf","sha512":"03fafe90c5d95a4b710bc665129be90ba42f5a578e5cd9ac1a588e55a321c6c71ba9dec41702bc79143e8e73c8fecef6a0cfb83936db004cb52546b8b8baf996","ssdeep":"3072:CqRX5Uvp86Y/bvYPNmW8PGuVK9mRQSRqG2aFQyS+XK5LMUB6cweX65MYl6qyuZ64:Jqvp8D/bvmNmW8P40aSHFvSPBR365MYj","tlshash":"4714224ae9d6f6b2565e04b3c1864e038355bf6c770d0924f540eb48e3078b9edcaf6a","first_seen":"2026-04-26T18:52:01.115499Z","last_seen":"2026-04-30T10:43:43.714436Z","times_seen":8,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":503,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-19/995c120e70748c0023841105faa79947.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-19/995c120e70748c0023841105faa79947.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 19 Apr 2026 02:59:20 GMT\r\nEtag: \"2423eed7f327c9b717c7e251f6f903b7\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 19 Apr 2026 02:59:23 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 189024\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12855688726384990420\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189024,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"OpenPGP Public Key","md5":"2423eed7f327c9b717c7e251f6f903b7","sha1":"6d4814422f3cd9a3a5a3902db2dd91cfac48b7fd","sha256":"d023c917788399b339c64b1c56fb5257a7bae532bae1eaf3aa7d7f2dc698015f","sha512":"8248078e1b01fb657dcd821c5d7cd6ada64b9c6768cfd9c1cf8692c1d324c398ca9d4054429e5e0c22f8e63790a7faa051088759a66505f082537a827ad7a794","ssdeep":"3072:oLTxCK1q4eSzghbpgsTQs0Tq07rIN/HwIEgm/g3rq4lsP7JN2VxTs2:oLTxL6tN/kq07MJHd7q+sn2VxA2","tlshash":"be0412ef39632a5e8bbae1ce1ba11153d68354e34d002f32ab7f94d9637b5d11423e02","first_seen":"2026-04-19T03:21:27.721789Z","last_seen":"2026-04-30T12:48:20.804866Z","times_seen":667,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":579,"dns":0,"connect":0,"send":0,"wait":41,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20240424/2024042420520426003.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20240424/2024042420520426003.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 24 Apr 2024 12:58:09 GMT\r\nEtag: \"51419f3b333d8eb4ea1815f60c5aa1f8\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 09 Oct 2025 03:12:05 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 83847\r\nContent-Length: 480\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14676043047577053700\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":480,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"51419f3b333d8eb4ea1815f60c5aa1f8","sha1":"73cca655def494d52431bf6b70b03a53d2266047","sha256":"b940f4a6ea758b9ffaa1a7cfaa9ab6d08ae73e2fb77b30c60b15fb64200af77c","sha512":"ccf724c3e0eb4f5a6a59a5ae7dd96089f9b2d89b82330d6dd64f0baa9286666be0eda76656715f2290203f5241dea851a59823eb18b1ef8ea42fc5b2c2a018bd","ssdeep":"","tlshash":"c4f0540ddd7b01e4efcc28304d03950b71ba3e2947016f2c234f89e21d1d1c41195815","first_seen":"2024-05-03T10:06:21Z","last_seen":"2026-04-30T12:45:41.108838Z","times_seen":22507,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":663,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/Search/pc-nav-icon-qq@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/Search/pc-nav-icon-qq@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 712\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Tue, 22 Jul 2025 12:20:43 GMT\r\netag: \"687f821b-2c4\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: OPcr-FTq_C5YP8HpOFWGo659eikbP6KdzhPXafGOe8gRX-Ezrg1z_g==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"0032e13d45b2dc636e67e98a52d66792","sha1":"9cd222e4079d7ab780b2d4ac38d05fd968f3e85d","sha256":"45dcff2f7f3f48fdc5fd0a3a8720827db74347b89c41de15f215af07beb780f6","sha512":"caf32cbaf55c3efdfadc2f0c1aaea7e61b8a84aeba5338372cad9248bda6eb0a8782dd4a3568c6e8307a3f7b2310a576d6497c70ac038ffc94adf4398cce91a0","ssdeep":"","tlshash":"650188d2271f8ca48e0ccc1b4daad0c56c3456b72582f907b517d8676314b5dd3ea004","first_seen":"2025-07-12T04:18:50.988139Z","last_seen":"2026-04-30T12:45:41.104926Z","times_seen":22538,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2025-12-30/e8e1e023702cb2535fcc5b8dfc237932.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2025-12-30/e8e1e023702cb2535fcc5b8dfc237932.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 27 Jan 2026 14:12:51 GMT\r\nEtag: \"60af2c4d8abb6b3edfa7e5b3f0af2c90\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 27 Jan 2026 14:12:52 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 216\r\nContent-Length: 139488\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3798553150872473489\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139488,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"60af2c4d8abb6b3edfa7e5b3f0af2c90","sha1":"ff01cec91d7ac12be695637f7f9bc1db1846b442","sha256":"33761d1d55e6319804742b0337b23716cfc9bdc57df7664750b11eb6b3b37976","sha512":"88283c6844b67a8bb6f85a933ba88699699caf084097ddd6fd536453892c7cd52f2e244807958a5fa597ddc43c4935cd286347d82fb65f446e8a3ca13df8060d","ssdeep":"3072:VW6g7V1QSflcmvjLY6EyrQatdxQbGxMLCBYIFDvdQpg/YR+rMToePvs:3gXl+CjLbrA5LCBYIFDvF/0+rMTrvs","tlshash":"76d312e10a29afb280c7534bb8925459dc02daf4c66fc66d0d923b1be67e73360945f3","first_seen":"2025-11-17T11:08:20.239469Z","last_seen":"2026-04-30T12:39:53.849695Z","times_seen":17978,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":471,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-dc-prod-001.cyou/api/eventTracking/batchReport.json","fqdn":"api-dc-prod-001.cyou","domain":"api-dc-prod-001.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:06.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api-dc-prod-001.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 13:27:50 GMT","end":"Tue, 28 Jul 2026 13:27:49 GMT"},"fingerprint":{"sha1":"FF:97:84:2D:48:19:CF:47:81:70:BA:BB:D4:79:FF:43:DB:DC:2D:55","sha256":"03:21:0C:BA:C6:75:FD:B4:8B:E2:46:52:C9:6A:FA:71:59:FD:48:83:F3:7A:E2:39:BF:06:02:2C:34:9C:25:4C"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: api-dc-prod-001.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T13:35:14.666833Z","times_seen":14425156,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":1,"connect":149,"send":0,"wait":0,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"api-dc-prod-001.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/icon-close@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/icon-close@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 541\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Tue, 22 Jul 2025 12:20:43 GMT\r\netag: \"687f821b-219\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: KY0UkXV1DUnXrkTbyVhVKUJ7x9sbntJzehNT0-GmJjm-ZTDL2Q4E0Q==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 156 x 153, 4-bit colormap, non-interlaced","md5":"ba62950af5049c3c88ef5fd0ec364fa1","sha1":"a6c5416ed6e9a40f7f637698d217f34b37bee260","sha256":"e0615fada85561a85c67f203cd404d52bc466b55032da71564c42c0f2a21a245","sha512":"0d57ac84b018219151809b99517a90879653a286e49d9f8e990a0d33c6da0cceab55b12290912fa7ec78cd1edf3e9d004fa02b02a3e0eda9b3b9dbc1ce7a20bb","ssdeep":"","tlshash":"96f0209e6e73bc38f18d0c11a1f39280788138506514651f6a01f9e8f5b72d18708a43","first_seen":"2025-07-12T04:18:50.926806Z","last_seen":"2026-04-30T12:45:41.147166Z","times_seen":22597,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-P6HKH41365","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-P6HKH41365 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 30 Apr 2026 10:43:04 GMT\r\nexpires: Thu, 30 Apr 2026 10:43:04 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 168959\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522996,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"ba63465ed1b77d0fe22b156fc4a2dab8","sha1":"584405d7421cd9adfdbab1d705286bf5d7a91a49","sha256":"c4043e0b7adee8ff716d891b65795d9bee76cf8ae3f67cfa0bd3e9ce924d2154","sha512":"eabc1ed5bf8fe383b98ab02340ae8244d7a0c08e526e150f04aefba67719ff682158dce6584200279a1108316da0ecf0cbdcd3ee20b6834ae477269ffe329907","ssdeep":"6144:OLLjJ7mx/Em6PBBlXd83RHhLUUdG7BPKo7Az+JgUGWRR:6R7s6PBHkRHhDiR","tlshash":"efb409ceb3c674525296f478903f01cba97b29a2b49cc8aaf189ccf02d3455a5177f78","first_seen":"2026-04-30T07:34:10.143923Z","last_seen":"2026-04-30T12:39:53.795531Z","times_seen":32,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":240,"dns":0,"connect":7,"send":0,"wait":20,"receive":24,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/mirages.min.css?v=20251218","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/mirages.min.css?v=20251218 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 42608\r\ndate: Thu, 30 Apr 2026 10:19:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Apr 2026 02:53:11 GMT\r\netag: \"69defd97-31777\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: -LzGUHB0ukHhJvteUkKZbMEQ9ItpIYzRII9aZ-2I644BXFmT36LWCw==\r\nage: 1421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":202615,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1228)","md5":"4c63eeca0f13e5196057c93fb4a8c008","sha1":"cc216fba81b8038d5a9a5568aed5f61895d7c367","sha256":"e4c5fb1fbf0308e87b3ac3ea686030651f5ee6c75beb87388d839e95ab4d1322","sha512":"7dfb07c6b0a4791d3d58d8834126601b262617b5db255ba0517ece4bdbd3baaceda35b1a4f26ceaa28e75b9ba6ef2040482803eb83f28b7c3326b304f28dbbb2","ssdeep":"6144:PwcGuP/Y1iBl4fOBl4feYEG8PnXNsSd1XmFotaSgofgO:PwcC1W/","tlshash":"a214847c954111d46373ca1aafc4b6582738f226dd052ebdf12721d8dbc2b9b12e2b8d","first_seen":"2026-04-15T07:12:26.165309Z","last_seen":"2026-04-30T12:48:20.744497Z","times_seen":729,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/close.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/close.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 332\r\ndate: Thu, 30 Apr 2026 10:19:30 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Tue, 22 Jul 2025 12:20:43 GMT\r\netag: \"687f821b-148\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6x5fA2Psve9GKGcLDfeDTCaq6rYmQFPHerSV3nP4Mu1GJVi8MKfNqQ==\r\nage: 1414\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 4-bit colormap, non-interlaced","md5":"215a1e584cb0039d319ffd69d9df0e51","sha1":"8a3d3e65a0260d286373b8882487a0ac6a9724c7","sha256":"f4693ad8590376075c38055091de94c7ae92b5abc56182861a53e76c4bc8feb5","sha512":"0b5aa0817a7205e14f38c93038490f57956cc5632a6c50db1e84fe5e9e5b0df100a3ea41c6178ffdba66fc59f04a0cdb479ba5b81d505e7327e60334e7870f67","ssdeep":"","tlshash":"b4e07d93fc7aad38c6caa133b7a4819196bcab7e6564992f2e530169806804d9445318","first_seen":"2025-11-17T11:08:20.211585Z","last_seen":"2026-04-30T12:39:53.734255Z","times_seen":18900,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260429/2026042920111954206.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260429/2026042920111954206.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 29 Apr 2026 12:11:25 GMT\r\nEtag: \"a2e7cdea4a181ccce773eaa045f86f40\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 29 Apr 2026 17:14:27 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 21\r\nContent-Length: 280912\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8698699258497251014\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":280912,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"a2e7cdea4a181ccce773eaa045f86f40","sha1":"ea9fe81f508751314449767b95f796659fc655cc","sha256":"5ece7f0f5b06a2237b76306d2c67d465e1a0b978f92e6bd1d3da36ec91bcf32a","sha512":"d657ff8a13123a42596fd0f3371918e9d45a600ca344b98516d0e7d1c0a8a576dcbed5b5816efe30289c7a4210e6acba0d9f6509f16e8ea80a12d093050fe3dd","ssdeep":"6144:KFEcyiQZBcaZcUfAgEDMi2S7dNW52SqWL5NivDLe4HQbqXAx/IOph86qdR6MSKQn:YEcyRXcaRAd2kNWb5N7VxgC86qDobrD","tlshash":"195422a82336558b33b17de628359d516c2f1f0e17371ea8f5d8d269b93a201c3e836d","first_seen":"2026-04-30T08:27:13.493913Z","last_seen":"2026-04-30T10:43:43.720158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":496,"dns":0,"connect":7,"send":0,"wait":8,"receive":30,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/icon-delete@3x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:05.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/icon-delete@3x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/search.css?v=20260414\r\nCookie: _ga_P6HKH41365=GS2.1.s1777545785$o1$g0$t1777545785$j60$l0$h1780620998; _ga=GA1.1.1535918992.1777545785\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 593\r\ndate: Thu, 30 Apr 2026 10:20:44 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 05 Jun 2025 07:04:06 GMT\r\netag: \"68414166-24d\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: heNNBkQlg_szD-tkU4A_s58W376msGqGHHTj4tOhp2VHKucsmkL6Gw==\r\nage: 1341\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 99 x 102, 4-bit colormap, non-interlaced","md5":"186ec31c3c1154addc6ec1fb8ebeaffd","sha1":"0f2e9a7e94ab44760f72705d02718e34697a7c0f","sha256":"9715ded51f20950c770eaec0f8eb8953163ce508df6e080d7a3b31660a21f1e3","sha512":"f441cb908e51513292262abaeaff1ea380a131dabbc5fb124e3a244845c8d6ee7b4ddfa7401c7b0e27ecf2abda4e6f38fbe4735121c421748b1e0bda39139ded","ssdeep":"","tlshash":"c0f0e141a9568ee4821d0c3a3c9bf4c4926f017ea09ce15d803b995954cbf9144d1ec2","first_seen":"2025-10-28T07:13:52.652764Z","last_seen":"2026-04-30T12:45:41.077175Z","times_seen":9610,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.shenfeng.cc/api/eventTracking/batchReport.json","fqdn":"api.shenfeng.cc","domain":"shenfeng.cc","tld":"cc"},"ip":{"addr":"172.67.131.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:06.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shenfeng.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 10:02:51 GMT","end":"Wed, 24 Jun 2026 11:01:29 GMT"},"fingerprint":{"sha1":"29:E9:ED:51:42:52:E0:B1:7F:3D:BA:85:1B:7C:2A:26:30:6A:E3:03","sha256":"63:BA:19:E0:5D:0F:BA:2C:62:63:00:B8:0D:7F:28:3A:02:D6:0F:B5:FD:F4:EC:7A:94:31:18:75:42:18:9E:C0"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: api.shenfeng.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:43:06 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://gz7j-2.lzcfenuuf.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=plSIo94Mv%2FYkHIUdIaKRC8eq18T9mPF4JSDzFOdGXNWzILaw%2BViFBzy8I4uH6P3%2BWsDQHmYk2PMSGctW3hDzbvbR3DguR6T68utGihfIcK%2B3jask%2F6Ijglq0MEB645kiPm8%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f45f18aeff01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0ab94d0fc1ecb3477a682ada19ad817d","sha1":"e6311ec9ae74beb1f7461c0ae5e81c8f835e0f3a","sha256":"7f86129f0513b8495b7ecf4f1414314df859f22b58b45b9036f4d9e48df30074","sha512":"d2da24f6eda58fd1fa39d5f154744ec618de7a1f431f149104d745db588c59b65ce10f819cc611a7241aa1470d3053c3d69ca57709becdf95e54556d4f4789bb","ssdeep":"","tlshash":"a4800433141c04430501354c00053f04105c11534f100771cc5c4715c75c074f151410","first_seen":"2023-08-16T08:22:40Z","last_seen":"2026-04-30T12:56:55.855272Z","times_seen":835,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/css/7.10.0/search.css?v=20260414","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/css/7.10.0/search.css?v=20260414 HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 13143\r\ndate: Thu, 30 Apr 2026 10:19:23 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Apr 2026 02:53:11 GMT\r\netag: \"69defd97-12b08\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Lm5-VqKb85KAOjFno7ZG8b7meGkEuh7XcajCZBUQkegRlOZqEaDuNQ==\r\nage: 1421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76552,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"b4de1d11af4a5bda743273bc1e1cef6b","sha1":"027ebc944d74844532e14ca93736e6618f442c00","sha256":"6a1ead2dcf0ee0ec7f994df637df81b0841cec683cc76198726f7b08da3fe01a","sha512":"406c8fd479246ca0f50ea492324eb7b83a71c714eac6386395aea3fdda7bf3cd4935d7d3708b9c26b743713eee9cd75ec15583e19de91aaf91394c7b9447ceb5","ssdeep":"1536:rH1UEnq8Zo8jE2dod5dwdKdjdgdSOOVkKLOxuOyZ2g:jZo8UkKLVR","tlshash":"9773ce0b9b530125f9b744ac2b6a7b842729d407ed05ceac7bdea584cfcf950b4a17c8","first_seen":"2026-04-15T07:12:26.071873Z","last_seen":"2026-04-30T12:48:20.795628Z","times_seen":729,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260429/2026042920501498148.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260429/2026042920501498148.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 29 Apr 2026 12:50:19 GMT\r\nEtag: \"c194b7a0102d05ee7b62ae0aad241eb1\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 29 Apr 2026 20:34:26 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 402\r\nContent-Length: 70576\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4333465072970996452\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70576,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"c194b7a0102d05ee7b62ae0aad241eb1","sha1":"204adc4c80212cf620adee6545a27a4c67860f0b","sha256":"c7d7365f78148adb58e3b151e1f790f0fdcd071193227c5ea7875521ed007710","sha512":"36b6d4b074afca0e15abe71b8a83a2049d50eacaccc3c619ff6d2153ffd6c219c1f6018485c28f0a8c39e0da094b83a515fb8d6a164a1b064c17025a57c5f1eb","ssdeep":"1536:RHcpLFL0FBXOdSjBqenVR5EsrIJCOCJ3e6CqSK:BcAlsUMoVR5dIJ0Ju/FK","tlshash":"1c6302fca73379a654d4ce0d433bf2b31357c00242a6e942a4ed5f26d6f615e9887807","first_seen":"2026-04-30T08:27:13.396018Z","last_seen":"2026-04-30T11:24:20.478127Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1193,"timings":{"blocked":581,"dns":380,"connect":10,"send":0,"wait":8,"receive":15,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn//upload_01/xiao/20260426/2026042614052560306.jpeg","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET //upload_01/xiao/20260426/2026042614052560306.jpeg HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 26 Apr 2026 06:05:30 GMT\r\nEtag: \"6ce9dd0953fe53b4c1076af599215daa\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 26 Apr 2026 06:55:57 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 13031\r\nContent-Length: 58160\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18218321736451863210\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58160,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"6ce9dd0953fe53b4c1076af599215daa","sha1":"a6588f0c2be978fcb7dbbdb9bed1d8443055e711","sha256":"5a65c2b97da0bcc7406604da99dffe1251c132b7bd76ab30e5f935924c1db2f3","sha512":"e986a8d520ff39605a015bfcbd2f3f54d27a8d10c7a4ad542c8a865bfb2bc1d6dd9bca421575759b1f70997d99bb698269067fba71ecc33583f652b306f60737","ssdeep":"768:/j5oe67ISks6eFIbzVKCZZGMA+p53aFWULFD6l53/OaHqkybsn2+7WSgSJH2Iq:/j5ogjz9KLC53aFbRDc3/HKkuWD7LJC","tlshash":"0743025c35f50060aa734e02eecc2c5717158bcafa150e826d77a3bba6ded4193d7a06","first_seen":"2026-04-26T12:47:07.903323Z","last_seen":"2026-04-30T10:43:43.723947Z","times_seen":6,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":492,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-13/67b3a352262f21d25b13607b92d28f7c.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-13/67b3a352262f21d25b13607b92d28f7c.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 13 Apr 2026 09:14:38 GMT\r\nEtag: \"154045294b9bdf219bea8703058711c4\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 13 Apr 2026 09:14:39 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 51\r\nContent-Length: 389120\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9551089902001740756\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":389120,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"154045294b9bdf219bea8703058711c4","sha1":"bd21bf588c3f0b3a98028d87ee563f6d0c3677c3","sha256":"8135149f02fe76e33891a42e79f26a1c83c2e9774702786bce4c599aa9be66ec","sha512":"c62b19ddad24e32ef375c7ecc2a5ff6e8fd5365f2cdfefdfa9a5f86ed9b9e98b1bc9bda5e628ca077a7ecfef938ea18f070f2ca2850aebd27b6c27cda98e0dc4","ssdeep":"6144:XSm4myDahLGsfMT5L8etJveBgGwAoKgsz+p9wzdDoTGn/V9d9d:pCr6M5LvGBgGwKnM9wzdZ/hT","tlshash":"4d84230dcab14d146ae0183c9982f7385e45c12feab3d15fefba150a1de22778f91687","first_seen":"2026-04-13T07:59:55.497195Z","last_seen":"2026-04-30T12:48:20.738181Z","times_seen":864,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":501,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-02/3f1c316ab2241c11744b0554cb61a4fc.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-02/3f1c316ab2241c11744b0554cb61a4fc.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 02 Apr 2026 09:44:36 GMT\r\nEtag: \"e0a93b4d3099f39173abca5404c6caec\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 02 Apr 2026 09:44:36 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 5\r\nContent-Length: 719840\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5941807502385214288\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":719840,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"e0a93b4d3099f39173abca5404c6caec","sha1":"7c936ecd6126a2bc9388e50c4178c70fdda83472","sha256":"86901d9a50a6002af6cb245ce36f3ca3dfaf5f8e130d42ff19129d47bfe2099f","sha512":"456f83654d0d6664d28762383f89dc37092f840e087bbedbc8ce93914d50500a47a5272f49541dfd3ec84f4d2aaa7d7f70a2f68ca6b060b796ccf23b79b33178","ssdeep":"12288:D7QiMNGQfbVsAGo6XWe582oxqENwrgyMpJ1vVbv5Ak/wYHGgRJ:QLPxFGo655RoxNOr76J1vVbv5A7M9RJ","tlshash":"b7e433fa675501725bdb2800e1c21eff48ef687848387fd06512bf92b60c4997694fea","first_seen":"2026-04-02T12:47:33.793225Z","last_seen":"2026-04-30T12:48:20.765479Z","times_seen":6869,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":544,"dns":0,"connect":0,"send":0,"wait":23,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/upload/xiao/20240424/2024042420561150988.png","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /upload/xiao/20240424/2024042420561150988.png HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 24 Apr 2024 12:58:09 GMT\r\nEtag: \"e3cd4c01559c4c07d1139d8cf0fd8f87\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 06:26:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 17766\r\nContent-Length: 864\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18159745254745983674\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":864,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"e3cd4c01559c4c07d1139d8cf0fd8f87","sha1":"ed230b75680db09a681f949947a50d0fc73a7f7d","sha256":"4fd50bd19c882486279b1e1ce4ce6bfbf09488740e86f89c87e1435062585b47","sha512":"14f75f1a24dac2aaaeb50ca2fdd3b7097b0c987fe373eddbdd76c99d804ae904b1f29e9f8f6c165752f20f99ecfd140eabf80c6cdd3952543f39e8b6d09f53cb","ssdeep":"","tlshash":"d81196ba04f2d7a15f0c43115fc5c6285aa06b51c22a6ee9ea4254f72b04021804370a","first_seen":"2024-05-03T10:06:21Z","last_seen":"2026-04-30T12:45:41.070581Z","times_seen":22519,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":670,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/images/x.png","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/images/x.png HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 758\r\ndate: Thu, 30 Apr 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Thu, 26 Mar 2026 08:53:48 GMT\r\netag: \"69c4f41c-2f2\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 688bo9A9vcA8MbuuY-B0NTGp01N6M4YsncVp7pP7ZFiUSLudnx4qtg==\r\nage: 1413\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 4-bit colormap, non-interlaced","md5":"e8c4a2f11a54a236d01be9d480bc6416","sha1":"60c3df5c18916d70592285db2870114ed8884a09","sha256":"bf7dfa326c23f9d45ce5b96e8b614ed975104ab649ad7c8ee20e9f09be632ed0","sha512":"04a77830842646fd45b2a03f6c7c4919049787a2bbde091024e677edc8884102b9165737d1ec97abbb504ab207f53a840d4c29ee6b4672ea1e0e276fe3d7320b","ssdeep":"","tlshash":"aa0199a6c0990d56f96964fae75fc045e9b11d905d100407dd16f41d68ba2b245c439f","first_seen":"2026-03-26T09:29:38.990317Z","last_seen":"2026-04-30T12:45:41.097087Z","times_seen":7818,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gz7j-2.lzcfenuuf.com/usr/themes/Mirages/js/7.10.0/fp.min.js","fqdn":"gz7j-2.lzcfenuuf.com","domain":"lzcfenuuf.com","tld":"com"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lzcfenuuf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:4D:17:09:FE:95:40:8C:B2:B9:6B:74:03:05:E0:90:5D:6C:C1:23","sha256":"B4:12:52:A9:62:D4:B7:E5:06:FE:5F:F5:53:85:E2:D3:C5:0A:85:28:B1:D6:42:F6:05:9B:AF:04:00:10:D5:89"}}},"request":{"raw":"GET /usr/themes/Mirages/js/7.10.0/fp.min.js HTTP/1.1\r\nHost: gz7j-2.lzcfenuuf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gz7j-2.lzcfenuuf.com/category/rrcg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 18948\r\ndate: Thu, 30 Apr 2026 10:19:23 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: nginx/1.22.1\r\ncontent-encoding: br\r\nlast-modified: Sat, 18 Apr 2026 04:14:24 GMT\r\netag: \"69e30520-991c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: SJQXUnXsYQGvYVpaiLT4eFArUJAp_3X72fsO5dFjmybtEqffQJSU_Q==\r\nage: 1420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":39196,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38663)","md5":"77e1af2a8f9e72161e3150ffb423cefa","sha1":"0fa12e154ddc02b527cf02a211ccc037ab95572a","sha256":"dc5806b620f7aa86336a5cf2168465b56c715f7fed2d8baefb90c252ced0f3d5","sha512":"a5c032301f6d77f89f228d45aa2145d17c939227072361ca685462c64262e3ed76a3644aa8073deac403cac3b4895fe4af7e30de4112773f8c3e95af39637ffa","ssdeep":"384:zxcveZQQET0RFqpexXD+9vwKfeHSMRw5+pCqNFaiE8E0QIQfJxf0fo7Qzzf2dmZt:aZQqpetsgkc9NwlJxfwPzUFLq","tlshash":"480305c8b2c3b06d127368b9453f6046b23a7d55746d8842c623e1957ca9e2e913bfec","first_seen":"2025-05-03T14:32:44.139412Z","last_seen":"2026-04-30T12:56:55.894545Z","times_seen":1329,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.mxlycf.cn/hc237/uploads/default/other/2026-04-28/b0fccc8d38a6ebb302b969da3f397efd.gif","fqdn":"pic.mxlycf.cn","domain":"mxlycf.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gz7j-2.lzcfenuuf.com/category/rrcg","date":"2026-04-30T10:43:04.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mxlycf.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 24 Apr 2026 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:D6:6D:35:59:DA:68:8D:CF:57:1A:FD:B3:F3:5A:C4:C5:68:BC:27","sha256":"E1:7E:E6:71:83:47:0D:11:D9:51:DB:1B:81:2A:FD:00:15:BB:C5:A5:FA:BD:51:A6:B0:88:E3:82:8F:8D:80:C6"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-04-28/b0fccc8d38a6ebb302b969da3f397efd.gif HTTP/1.1\r\nHost: pic.mxlycf.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gz7j-2.lzcfenuuf.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 28 Apr 2026 10:36:21 GMT\r\nEtag: \"de4956a8be4994045b7453228152fa2e\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 28 Apr 2026 10:47:00 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 114\r\nContent-Length: 311360\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17202219193340573606\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311360,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"de4956a8be4994045b7453228152fa2e","sha1":"d2e8b158ece060d3b8ef7beab02495a5d8988c12","sha256":"afa5da5cadd4681a718a3b5dd487723c531e9cda2594814fd9d968845331dc35","sha512":"9feac2e94265ec1e7995086563d3e114c39898e206c2b662633d96e89728463b65f5f3ef49043ed1bfa1219943df68469bad9233bc0d162ec734c0bc2e610669","ssdeep":"6144:SWeptn3tDCXHuJ39R9WRGmlRpFZEMwOcgR7pKgQsEQuaY8EfPiHnbri:2twOlgjmMwONRJAnSnHi","tlshash":"ed64237dfe726e9c9ba4fb13d40cc899b5e8b2948c1b471c47c804c46270aafad9516f","first_seen":"2026-04-28T11:17:39.30413Z","last_seen":"2026-04-30T12:45:41.098096Z","times_seen":126,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":494,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}