{"report_id":"0949caa1-e468-44c7-9d44-fb143d09fe36","version":6,"status":"done","tags":[],"date":"2026-04-18T10:07:12Z","url":{"schema":"http","addr":"puqyl.app/","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"192.238.178.151","port":0,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"puqyl.app/?cid=4271349","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"title":"puqyl.app/","dom":{"size":44938,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36546)","md5":"5a800aa5f44485bdec87b6def94a383f","sha1":"b2a15a2dc0fcf732a9f0e6681f0ed1ed6966d5c4","sha256":"0ebd9731263fedad08c4b80589ea28b0964261e4b9cbb6e916e53e16a402b39a","sha512":"4c4d25415bd8ce7019d40a263c08fd68997f13dab0eca8aaa95f520fe29d0b41130e1d27d58a505e35a7dfa3b6a0989a58919efc7f583cd1d8ffa82e1707e2e8","ssdeep":"768:lYQxQYYjUw3KbNSWa+Dacjws+JGwiw8Se1BMeqSSQ1:lYrYsiau/15tjr","tlshash":"8e13eafa6b3856ec14874b9def32b454230eb4ffb59489d0691e8ab84993dd8f647c00","dom_hash":"domhash35a0632546465da9ae09f3be1a60b45e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"puqyl.app/","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"192.238.178.151","port":0,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T10:07:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-04-18","alert":"Detects hex encoded code that has been base64 encoded","trigger":"puqyl.app/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2019-04-29","description":"Detects hex encoded code that has been base64 encoded","reference":"https://www.nextron-systems.com/2019/04/29/spotlight-threat-hunting-yara-rule-example/","rule":"SUSP_Base64_Encoded_Hex_Encoded_Code","score":"65"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-04-18","alert":"Detects hex encoded code that has been base64 encoded","trigger":"puqyl.app/favicon.ico","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2019-04-29","description":"Detects hex encoded code that has been base64 encoded","reference":"https://www.nextron-systems.com/2019/04/29/spotlight-threat-hunting-yara-rule-example/","rule":"SUSP_Base64_Encoded_Hex_Encoded_Code","score":"65"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nhfgy43.xc68347950.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2025-08-26T01:23:29.765927Z","last_seen":"2026-04-17T10:09:48.153755Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":927,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xsfdfre3.xc13472598.com","ip":{"addr":"172.65.218.121","port":28963,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2025-08-26T01:23:28.603473Z","last_seen":"2026-04-17T10:09:47.639425Z","alert_count":0,"request_count":2,"received_data":1170,"sent_data":929,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"evfh28g.xc71650948.com","ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"domain_registered":"2025-08-09","domain_rank":0,"first_seen":"2025-08-28T00:15:33.357106Z","last_seen":"2026-04-17T10:09:46.40647Z","alert_count":0,"request_count":12,"received_data":1009032,"sent_data":7838,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fds654.xc68905274.com","ip":{"addr":"140.150.28.190","port":5002,"asn":0,"as":"","country":"Canada","country_code":"CA"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2025-08-26T01:23:29.134668Z","last_seen":"2026-04-11T14:55:39.083508Z","alert_count":0,"request_count":4,"received_data":9050,"sent_data":2506,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"tgbh71.xc90376182.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2025-08-26T01:23:28.609529Z","last_seen":"2026-04-11T14:52:14.975248Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":925,"comment":"","tags":null,"fingerprints":null},{"fqdn":"amasldowp.xc90376182.com","ip":{"addr":"45.125.14.194","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2025-08-11T06:32:12.900715Z","last_seen":"2026-04-17T10:09:47.270108Z","alert_count":0,"request_count":1,"received_data":449,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ujmh7.xc74296150.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2025-08-26T01:23:28.607204Z","last_seen":"2026-04-17T10:09:47.702421Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":923,"comment":"","tags":null,"fingerprints":null},{"fqdn":"146.103.79.128","ip":{"addr":"146.103.79.128","port":5002,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":879,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"puqyl.app","ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":31,"request_count":29,"received_data":730617,"sent_data":12786,"comment":"","tags":null,"fingerprints":[{"name":"RxJS","description":"RxJS is a reactive library used to implement reactive programming to deal with async implementation, callbacks, and event-based programs.","website":"https://reactivex.io","common_platform_enumeration":"","icon":"RxJS.png","categories":["JavaScript frameworks"]}]},{"fqdn":"rgnm8136.xc36187954.com","ip":{"addr":"140.150.28.190","port":5029,"asn":0,"as":"","country":"Canada","country_code":"CA"},"domain_registered":"2025-08-09","domain_rank":0,"first_seen":"2025-08-28T00:15:33.354695Z","last_seen":"2026-04-17T10:09:46.556732Z","alert_count":0,"request_count":1,"received_data":869,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"tytyrt654.xc98621375.com","ip":{"addr":"140.150.28.190","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"domain_registered":"2025-06-15","domain_rank":0,"first_seen":"2025-08-11T06:32:12.442047Z","last_seen":"2026-04-11T14:55:30.349576Z","alert_count":0,"request_count":7,"received_data":5991,"sent_data":5452,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fvnmu175.xc63178495.com","ip":{"addr":"140.150.28.190","port":5029,"asn":0,"as":"","country":"Canada","country_code":"CA"},"domain_registered":"2025-08-09","domain_rank":0,"first_seen":"2025-08-28T00:15:33.34625Z","last_seen":"2026-04-17T10:09:48.096928Z","alert_count":0,"request_count":1,"received_data":869,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"qmihfbg591.xc24605987.com","ip":{"addr":"172.65.218.121","port":29088,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-09","domain_rank":0,"first_seen":"2025-08-28T00:15:33.357275Z","last_seen":"2026-04-18T07:58:27.215612Z","alert_count":0,"request_count":1,"received_data":835,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"iuytijhj8.xc81739605.com","ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-15","domain_rank":0,"first_seen":"2025-08-11T06:32:15.396315Z","last_seen":"2026-04-17T10:09:46.936325Z","alert_count":0,"request_count":1,"received_data":477,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}]},{"fqdn":"146.103.88.75","ip":{"addr":"146.103.88.75","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":558,"sent_data":445,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dadf342.xc45981073.com","ip":{"addr":"45.125.14.216","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-06-15","domain_rank":0,"first_seen":"2025-08-11T06:32:14.945994Z","last_seen":"2026-04-17T10:09:47.055433Z","alert_count":0,"request_count":1,"received_data":449,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"puqyl.app/js/crypto-js-6gyGvNpv.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"9b5adfad48baa3e775a471fe30160008","sha1":"b44c12a374482f3d298d5672bd3432f18267ebd0","sha256":"288e2d9bec6a31e4b6eb7527667b2c3af5ef3fda3ce3abe865da2e3c18d143c7","sha512":"e59ad504e8c002f4b394f40c456f9feb3e5d062fce224f77679b7ecc76b507de60009a3c92556ee34ab75d374edb47e7fb7c1dda7c950be1de9ceeaaecab7541","ssdeep":"1536:vM+5/kt9++5y2Yj/6zqziPtNPU9ArHMPc:vCZYj/aq+","tlshash":"fe6349c4768870d1a3ab78b0093fb08b727335a205acd198e664e6dd6d7c6dd8136d3e","size":69355,"data":"","first_seen":"2025-06-21T05:10:04.416117Z","last_seen":"2026-04-18T10:07:30.113609Z","times_seen":1649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"46a79e0fcf4ea7fc98ccb972e0fbb477","sha1":"1b1c355a286e80626fab886146f59ed07479deee","sha256":"0ab0b1c9764802c8b0ee3188110dc142ba920053c63f29710c8b998f3a48473e","sha512":"8cb020f175a81e983a34e015f05859dda83cdb3b52c819de9078160c251e1894d18938b7d66797f822018615b04e8c56544ba94ee81ce8f12d1abb2960f162a3","ssdeep":"","tlshash":"e3118c8b05b07a0897d3ea44cb21d912ac60ecb32d5129e6bd807acb6e38c8315ff420","size":879,"data":"","first_seen":"2025-12-08T23:46:31.364499Z","last_seen":"2026-04-18T10:07:30.146777Z","times_seen":50,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-04-18","alert":"Detects hex encoded code that has been base64 encoded","trigger":"puqyl.app/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2019-04-29","description":"Detects hex encoded code that has been base64 encoded","reference":"https://www.nextron-systems.com/2019/04/29/spotlight-threat-hunting-yara-rule-example/","rule":"SUSP_Base64_Encoded_Hex_Encoded_Code","score":"65"}}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-18T12:41:11.038065Z","times_seen":31293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-D-q3Qy-s.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6e420078a82170399e717fe60462fbf","sha1":"333160e7968f367b831c65c012649eb51216aa79","sha256":"366d808c6522baf1692590b9dc2e9d71b72502a404037a90fc6096aa484a76a1","sha512":"994e3647294532285ff62d720254ef0c7137a741cb7b5d73835268c79e9409acdb219bf7d4d2a39ddda9dff831f84a97450716a5e226dc4bec1db8045ea1e63e","ssdeep":"1536:uh8QdMdtrgqRsKfo8/k8uzKp8ec9vZg0oJWYjKPqQgqBkCDau/+5teVLWt:JEMd5BDfoeVukagj+PnkCDi5tiLWt","tlshash":"50c36eeeb279657c62d705a8af3a0140731d78a63585c4e0f56e8fb82ba3c48f357e14","size":119534,"data":"","first_seen":"2025-06-21T05:10:04.412633Z","last_seen":"2026-04-18T10:07:30.089472Z","times_seen":641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/zh-BtCd5Gxp.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ea9e01910dd0fdf993776a2c59fef27","sha1":"c701d3d4688d764564e1d90504f6d391a55d4b01","sha256":"28250ad4e047276592fe9aa6bd3c82dc77fd062388a3d36ebb0c5adc038a72fa","sha512":"e2d1716a2d73b7c1e499095d1d97d3be1097ad18b4d57826f437246ae71f9207ef1105ff321fd306fdc926ef8d5a60042a6011ab86cd027d5851b27c32465538","ssdeep":"96:+ASNLQpA+MEag9Yn4pKzt7qUAr9NOQg71pLDIoblE9SReZ6:JSN0qJd4+M52QmPblrAZ6","tlshash":"5891f9de0bfc8dac024b038d2f2f0148b0941dba93a9dce86b6689d9249cb0757025df","size":4285,"data":"","first_seen":"2025-06-19T04:15:59.509509Z","last_seen":"2026-04-18T10:07:30.123152Z","times_seen":2017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-D7yqepvi.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9974945cd9e95ebb387f024f0b483e8","sha1":"b902b57ccd4cd2d79020c3a6cfbe367898f887f1","sha256":"129452479bb6e975698f068096effa6ece12185ac79bfc05a08153a8f377ea5d","sha512":"1b9ad788adfd7c0205b700aba8ad75af695985a8f16b0bbc354d0711b9cecaa4479c1bc020fac40b9d7c345a4b30379cb3fdd2a7bd1e8af15d3871df9507c4f1","ssdeep":"96:kh+2uoMOmdYKluH9LYmA+i+ODG3SdAV+xy0X7Khw4InC9k9tkMxi9WoWDnm:kU2uoYdT6uv+i+O2Sd9y0X7KqjC9kAME","tlshash":"81b1d85ef0b7d83a6397866855150411d218ddc350b9935cb1fc8e2d77f2e6483bb70a","size":5247,"data":"","first_seen":"2025-06-21T05:10:04.408245Z","last_seen":"2026-04-18T10:07:30.11534Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"6700d8bb713c85082ff0d592a9fe7ec6","sha1":"da8061e10c3377c30ec548d74aa4bfe331aba639","sha256":"0ead69ca67112a2b7794174179915c768c6ab69dc1ae7ce1a30199c17c440870","sha512":"c31410fe39bb5687bddf05b28f6801c8e4b4ad716dd3d96a81df098c73aacce0476d444596e8cbfee1ed5ad32193e8e2b0494cb1b80391bdc1a2402d865f85c7","ssdeep":"","tlshash":"0bf081c896b0e1437dbc5e47ff08ede92a7e456729e5314343a83e4d3af2142c179844","size":646,"data":"","first_seen":"2025-12-08T23:46:31.362227Z","last_seen":"2026-04-18T10:07:30.150426Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/@vant-BGmWO0Bj.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"6d405d0e201a7e59001fa3732e601deb","sha1":"5e9782ceacd87cb267c610855a11d88388d5f849","sha256":"49225d1c23add4df603a7e2d4d8dd8cb7e26d926b4e461bb58b3ab6dc86e785f","sha512":"4ad5f0a44df106356de8d02bf00364e1000f804ace31a63094ba7174eb892a9ec3769118bc5ddea163ae8cc9784bf4b5008eff7c7a5bfae9492d2346dcf995a6","ssdeep":"","tlshash":"b95167ac3651bc34465a1ea2417f9ba5b2163824704b8050e008dd153951863c7fffde","size":2638,"data":"","first_seen":"2025-06-19T04:15:59.51972Z","last_seen":"2026-04-18T10:07:30.104861Z","times_seen":7794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-18T12:44:25.423394Z","times_seen":34803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-BM2jfDaA.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"90cbc7cbc4186bf14a971b76113cff40","sha1":"dca3abb5959b75ffd9235c79cd92eb590d0f51ec","sha256":"cd1abf6d5684b069bb89c8a564e6275ace5827d6c0f9279fa29c3eadfaa20941","sha512":"731a2b16b674fdda6ee11e5d24f81b3a92da8e84f2d41d49cc211e6725cb6eba91caff102292d38254b1bb0ca2470a1a6f13647bd4e4515a022a8c42c46a1e2a","ssdeep":"192:kmsOHQpfuoSLwxW7/RPS1N7XqbU5U9M2hVdQrm3V+0DKb:mS8xcDbX9MOkqk","tlshash":"aed1870dfc194978e3b258dcb688050111655b9392b8c2b0f6bf5ba90bf5d609f9e0fc","size":6371,"data":"","first_seen":"2025-06-21T05:10:04.420132Z","last_seen":"2026-04-18T10:07:30.088215Z","times_seen":581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/@vueuse-BG6MN1zB.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"d690020e054dc9a2dacfdcfca18c7231","sha1":"011258ff0b8c7f1476293dc0496b4ad7133c62d5","sha256":"4dec424da24601d7343f72b9e1083e67e9f6953cf1485549bdad18207f0f4598","sha512":"f3534f6f72965c38b61596b762341e524254b1391d3b62fa571ae8023601660a7f40582a2daa72345024c497a23f3bdd12801ef818a150359123ada96af9ac98","ssdeep":"96:LupsoTxFpdpeJMYTEzFyMBHf2bPXcWaVJ/hmVd51U4gU9nAgXYqL1KlaFfzhFp/7:Lupdpmm0EpyMB+bPZa9E51UPInAgoqBd","tlshash":"1791b9cd709670b2337a9d95d07b420eba283551345fe4d0a01e5ef53e21da27352dde","size":4582,"data":"","first_seen":"2025-06-19T04:15:59.52064Z","last_seen":"2026-04-18T10:07:30.090232Z","times_seen":3224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/@vue-BJUJtGKq.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"f06f0fd561eea95c4feccde0746117b1","sha1":"32c45886151948703a8ac692a48d3cce70aa25e3","sha256":"e228111590701d2db46eb9d8c2a4d85377a449f398bbed10a94ef47938a57c55","sha512":"88e3e6da9f043912c14291675ff91b5426e21fe36defd0cd318131e1b2a9c791fdd662697838cbc1a0a0bddc3139d5ce4e81f82108886153575d383aef0fe4a1","ssdeep":"768:8XCLkQJtg/ocN0MjFuPgDpt6RDMk/0jOVT/eFYl9E27OqX6MQYAMOxTlExfheEqh:9wSCqJCI2b273WNK2U40MH","tlshash":"917308e83092b46253fa19e2007b0406f3792d5a3849d998b16dfedb3e7241550bbfbd","size":74100,"data":"","first_seen":"2025-06-19T04:15:59.499735Z","last_seen":"2026-04-18T10:07:30.107079Z","times_seen":7798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/ua-parser-js-DP5omx3I.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"b71c1a4fd07412d0ddd5f0006e401e75","sha1":"a3cf730602aeef3df364916f4ef42e7c0f903419","sha256":"bc8e4ca06ec494e7df32f2dbf125b9b0503a60de5991b5badbb20e5e6c043ad7","sha512":"d018e92aeb4d98a54260edbd707e088a8875010278bc8979921cbbc492281e1fb8720ced7e21cc29b33500d4221c0c403b88b31b6f70caf069f2fc4daad2b793","ssdeep":"384:KLykXfExhSMH+rq/51Raw7t2v6az5CgSpnMjEMuSI162By4iBWijdv:KLFfY1erq/51YGt2/z5C3fSI162By4ib","tlshash":"f6b2a77fe3d5b73c07ece508d63504482f271f69ea88a0746e9892a1a9747c612c7f36","size":24038,"data":"","first_seen":"2025-06-19T04:15:59.5131Z","last_seen":"2026-04-18T10:07:30.109264Z","times_seen":9084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/vant-CzFdJ4uY.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"852e273954fa90d55c0e74ba1adde9e4","sha1":"1edd5cd78042a89fdb453eff7ac00a81ee11381d","sha256":"a362f686e909416c308eb2e9bd7303593e68b441a6672db1d2d76f8545fe3049","sha512":"593a21cc5befa4ea9345c755b92e155f572805c6d43b162d45e5fc28db1d8aa7a29e65da492cdd1773689a4c5b28d321c6e70b57082931694d38695db8ebce6a","ssdeep":"768:aHcoeRdR113jDKzaKhIP3aJZmHD19BOoTEwVde0ewh6Kg462KIGsEnCrE/jXg:Jo0DKzO3aUnMULPKXg","tlshash":"f7b209993086f43f63f585ee40690201a3291b6a341ec4ecb53ceedbb299c5974b6b35","size":25153,"data":"","first_seen":"2025-06-19T04:15:59.508357Z","last_seen":"2026-04-18T10:07:30.106253Z","times_seen":7795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-wFYWz2MP.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a74b539f91b4b334e92e7982f33386d7","sha1":"ce99307d4cc182a00fc74fe8f9fdcf2b6f4e9274","sha256":"d592b279df12ce8be53d1ef4ab7e578799852976e7d5cad755b6ddf4edb520cb","sha512":"a5d1d124c150bdd0b74a3ba46d74c2040301f595cbbf132919a088bed87f156fc11913990866d5985c43499749c0f0a93528c3f3edb85d53bfb38ce45f5509cc","ssdeep":"","tlshash":"6521630ef4899cb6137344cc3544116262990aaa82f8d7e0f3fd0f9943b1c70d52e97d","size":1393,"data":"","first_seen":"2025-06-21T05:10:04.401251Z","last_seen":"2026-04-18T10:07:30.112566Z","times_seen":577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"puqyl.app/assets/index-0IKsxKNF.css","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:51.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /assets/index-0IKsxKNF.css HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-609d\"\r\nexpires: Sat, 18 Apr 2026 22:06:51 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24733,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24732)","md5":"e3fc8edde00fbd9307c76ff51daf34b4","sha1":"f832894285600ea325e0407ea796cb1d7df6d074","sha256":"310f3e09fe7dbbe5e2a5e7fa066765ab639cbbdbde8578299b2efbe526105f09","sha512":"6a9f0b629ecd7f116e8218670a7b361776f2df6271f1ef5f8330c77006e354b97a763f7686f63c2312df4bad2bbc9fbd96195527ecbec2ceabdc5112eb9c02d3","ssdeep":"384:Mt4+EEyBhkqOPvnzx2dWcm+CZhUrtVYqAzWYlrFwh:Mt4+EEEhkqOPVlrFwh","tlshash":"89b2953bd75712289427cd64a7d80f585224c92399130fdeba2367168bcbbcf35e528e","first_seen":"2025-06-19T04:15:59.527824Z","last_seen":"2026-04-18T10:07:30.070741Z","times_seen":918,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/config.json?t=1776506","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:52.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /config.json?t=1776506 HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nlanguage: en\r\ndevice: 5354f369588af02ff08f33d1968f1933\r\nx-version: 6.1.5\r\nX-Request-Id: 7811745d-c9c0-4c3e-9480-0f4dd9737c55\r\nX-Custom-Referer: https://puqyl.app/\r\ndomain: puqyl.app\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 7811745d-c9c0-4c3e-9480-0f4dd9737c55\r\ntimestamp: 1776506812\r\nsiteCode: \r\nsign: mx9tZuQeBv0r07wco2p4kG4hIpxmI9bUzj0qL7KYnXSzTM9UDi2yuCAfQIWYuOKy\r\ndevicetype: 4\r\nplatformtype: 3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:52 GMT\r\ncontent-type: application/json\r\nlast-modified: Sun, 13 Jul 2025 09:29:53 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68737c91-1626\"\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5670,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"586ab5729bc0816bb987791a4cc3f714","sha1":"6a14c599832e0d625480c71a0d0acaa0c518c5f3","sha256":"05b3f78cdb9bf79c97ba106e27ae986ef487367869bd3f30aad6b0a6ed8e37f4","sha512":"e1531388f0c0ca578178496a06c8d97d9f33aa77d5895e423d12c40bf8ea5b82cefa92971c47cf2f6c33134c291cc943b0cfd20e96b178ab7eeb1494bb4893d7","ssdeep":"96:EgboZxuNtqPtFsBddPY1mx5GSlPsV56d3LtVVsd:EggxMoFsB/PY1mx5/lUV56hLtVVsd","tlshash":"9cc1c7934788fc732da8c5180a0b6f1b9c8e52df2cf56588958b02af5d8c7853f126e7","first_seen":"2025-12-20T03:06:35.234311Z","last_seen":"2026-04-18T10:07:30.071935Z","times_seen":4,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/favicon.ico","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 18 Apr 2026 10:06:53 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1043,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (930), with CRLF, LF line terminators","md5":"16f1fae8b7bdf6ba74fc2d13a7e247d0","sha1":"125b46cbd976a87d6f154850b36a60d67ee6d627","sha256":"55d70b3a7e482b92b7a125d654e035cdd0e8939934ee2d95e173c0202f20513e","sha512":"35cae97baf3b08a49db541a46c410e8d8dbf372667a8094da40e9dd1ac2bf83c07ecb1973a3b91d08f78413b62c52743cb8a8405f60365f57211dda439a078c0","ssdeep":"","tlshash":"a511ef8f04b0be0887d3e554c751e501dca0e8732d5555e27c80bacb2e78d8309ff510","first_seen":"2025-12-08T23:46:31.316667Z","last_seen":"2026-04-18T10:07:30.075925Z","times_seen":46,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-04-18","alert":"Detects hex encoded code that has been base64 encoded","trigger":"puqyl.app/favicon.ico","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2019-04-29","description":"Detects hex encoded code that has been base64 encoded","reference":"https://www.nextron-systems.com/2019/04/29/spotlight-threat-hunting-yara-rule-example/","rule":"SUSP_Base64_Encoded_Hex_Encoded_Code","score":"65"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iuytijhj8.xc81739605.com/ipacdn.txt?t=1776506815535","fqdn":"iuytijhj8.xc81739605.com","domain":"xc81739605.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:55.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iuytijhj8.xc81739605.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 15 Jun 2025 00:00:00 GMT","end":"Mon, 15 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2A:28:6F:99:CE:D6:D8:9A:1C:CE:96:8F:F8:08:D9:55:50:76:0E:2C","sha256":"02:CA:E0:52:EB:52:97:AA:DB:8F:39:92:AE:48:91:74:6E:8E:EF:AF:C1:E0:22:F8:07:53:F5:C1:63:4C:62:F7"}}},"request":{"raw":"GET /ipacdn.txt?t=1776506815535 HTTP/1.1\r\nHost: iuytijhj8.xc81739605.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:56 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nset-cookie: acw_tc=0a0f6b9517765068164194560e4894b3b72c41d6830492da6bcd1931a2c33b;path=/;HttpOnly;Max-Age=1800\r\ncache-control: s-maxage=315360000,max-age=0,public\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-credentials: true\r\nserver: gocache\r\nc-type: pf\r\nrid: 4cd5da579a3f182daca45e8726e9ed63\r\nx-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":1700,"timings":{"blocked":670,"dns":162,"connect":1,"send":0,"wait":356,"receive":0,"ssl":508},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rgnm8136.xc36187954.com:5029/bewcdn.txt?t=1776506816125","fqdn":"rgnm8136.xc36187954.com","domain":"xc36187954.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":5029,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:56.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rgnm8136.xc36187954.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:53 GMT","end":"Wed, 10 Jun 2026 13:07:52 GMT"},"fingerprint":{"sha1":"9A:D1:F1:05:4C:02:D0:F7:47:CB:D4:21:57:A9:80:B6:53:6B:F9:A1","sha256":"A5:1E:FD:8E:6D:64:71:73:42:C3:49:94:6E:B0:5F:B1:5A:8C:88:1F:11:7F:5B:6B:57:29:54:83:C5:01:4F:3D"}}},"request":{"raw":"GET /bewcdn.txt?t=1776506816125 HTTP/1.1\r\nHost: rgnm8136.xc36187954.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:56 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C0BCB28E3333D278A4\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\naccept-ranges: bytes\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Fri, 17 Apr 2026 16:30:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v7.2.17\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 2\r\nvia: 1.1 ianxun22:10 (W), 1.1 PS-CDG-04A5e173:3 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms ianxun22HKG(origin)\r\nx-ws-request-id: 69e357c0_PS-CDG-04A5e173_6939-61471\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":1047,"timings":{"blocked":181,"dns":123,"connect":26,"send":0,"wait":677,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tytyrt654.xc98621375.com/hall/api/agent/downloadSite/regionAccessV2","fqdn":"tytyrt654.xc98621375.com","domain":"xc98621375.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:56.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tytyrt654.xc98621375.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 13:30:33 GMT","end":"Sun, 05 Jul 2026 13:30:32 GMT"},"fingerprint":{"sha1":"1F:9B:5E:6B:E9:4A:B1:D3:C5:D8:17:68:5F:05:13:6D:A5:A0:86:EE","sha256":"38:1C:79:90:1A:7A:E4:A4:C0:B2:B0:99:DC:2E:18:C8:C6:3C:C1:AB:FF:87:B5:F5:65:28:7C:EC:AC:D2:41:77"}}},"request":{"raw":"POST /hall/api/agent/downloadSite/regionAccessV2 HTTP/1.1\r\nHost: tytyrt654.xc98621375.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nlanguage: en\r\ndevice: 5354f369588af02ff08f33d1968f1933\r\nx-version: 6.1.5\r\nX-Request-Id: a976261e-21bb-47b2-aaaa-7268d3175782\r\nX-Custom-Referer: https://puqyl.app/?cid=4271349\r\ndomain: puqyl.app\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: a976261e-21bb-47b2-aaaa-7268d3175782\r\ntimestamp: 1776506816\r\nsiteCode: 1828\r\nsign: ipwtGe/1eb41guzo7hH5ArGi6inZovnT9nI9A+6iCHF5kzOJWKUeRP8vWRgp0O0y\r\ndevicetype: 4\r\nplatformtype: 3\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 278\r\nset-cookie: acw_tc=0a094e7917765068169347480e2a39786752438a7411521b372b3807e312f6;path=/;HttpOnly;Max-Age=1800\r\nx-trace-id: 4b205abe0c343ff2de88360b0caa862a\r\nx-env-go-biz-agent-server: 0\r\ncache-control: no-cache\r\nx-saas-server-id: 844988bcd4-857mg|4970e9803dd64b4d5cbad49ca920c65b\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 PS-SIN-045cG117:21 (W), 1.1 PS-CDG-04A5e173:2 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms PS-SIN-045cG117SIN(origin)\r\nx-ws-request-id: 69e357c0_PS-CDG-04A5e173_6851-26430\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6af836b852165d236795a3e2e5be1a0f","sha1":"400a6358a454b5f77fbaad0fc19daab20a103f78","sha256":"6260ce07c4c7c1d97e0a213202c69e52f09de394cafb1441815bf4b96e17289c","sha512":"5f70fbebf3cbf1f29a6bb8abe99fe2f46bb77dd36ea3634b64b28b916a1871d3f32dec439f9ff7075699990162bc35de4101b9cc3494064ef60904af2e74fb2e","ssdeep":"","tlshash":"71d05e1d1735adbdfe95a2a9602a6ed179ec5001204c9339fdde2e2412e839e933125a","first_seen":"2026-04-18T10:07:30.082534Z","last_seen":"2026-04-18T10:07:30.082534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/hall/api/agent/downloadSite/getDownloadTemplate/tid/4560475.json?t=1776506","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:57.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"GET /hall/api/agent/downloadSite/getDownloadTemplate/tid/4560475.json?t=1776506 HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nlanguage: en\r\ndevice: 5354f369588af02ff08f33d1968f1933\r\nx-version: 6.1.5\r\nX-Request-Id: 6472e08a-b5e2-4ad4-a171-de3a75af0451\r\nX-Custom-Referer: https://puqyl.app/?cid=4271349\r\ndomain: puqyl.app\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 6472e08a-b5e2-4ad4-a171-de3a75af0451\r\ntimestamp: 1776506817\r\nsiteCode: 1828\r\nsign: upADOJmRWWXBWU9JQB75Vaip/wCv5z59jUENrTxV1F4b96qIec0p2XUaP1+xNpJ0\r\ndevicetype: 4\r\nplatformtype: 3\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:57 GMT\r\ncontent-type: application/json\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C1BCB28E3339E27EA4\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nlast-modified: Sat, 18 Apr 2026 07:21:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14944533157048451331\r\nx-oss-storage-class: Standard\r\ncache-control: s-maxage=600,max-age=0,public\r\ncontent-md5: c5mgmPN4OnyXnsxTnN+9OA==\r\nx-oss-server-time: 16\r\ncontent-encoding: gzip\r\nvia: 1.1 ianxun21:10 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun21HKG(origin)\r\nx-ws-request-id: 69e357c1_PS-FRA-047W639_48061-56036\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7448,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (7448), with no line terminators","md5":"7399a098f3783a7c979ecc539cdfbd38","sha1":"7715c979276a00e4f0b40bb568506e2e19c25d5a","sha256":"6e1e3d2fde748ff9afbcad6f64196c383148cb52867f37424c5852b5f6153369","sha512":"1ab68a3ff86ba572d471dc9cf4cd80faf92110df9848cc22874436119167c221ca1ed4c28582801db24cd1455762c7cd85baef371180be2316ff8fabdd006ca3","ssdeep":"192:OtYpVBGx1tfJS3aAT3XMgJWP5TKWbC5EuzI0hgYRAJiW/QBe:6UGHtoKAT38ZPpKlHZhgRIM","tlshash":"d5e1c0a19064ebaf4b14d93236a4cd43d83c1f41569b74cd4affce0795c70b202092ee","first_seen":"2026-04-18T10:07:30.084814Z","last_seen":"2026-04-18T10:07:30.084814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/hall/api/agent/downloadSite/getDownloadTemplate/tid/4560475.json?t=1776506","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:57.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"OPTIONS /hall/api/agent/downloadSite/getDownloadTemplate/tid/4560475.json?t=1776506 HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: clienttimezone,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:57 GMT\r\ncontent-length: 0\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C1BCB28E3339927DA4\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-allow-headers: clienttimezone, device, devicemodel, devicetype, domain, language, nonce, platformtype, sign, sitecode, timestamp, x-custom-referer, x-request-id, x-version\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nx-oss-server-time: 1\r\nvia: 1.1 ianxun21:10 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun21HKG(origin)\r\nx-ws-request-id: 69e357c1_PS-FRA-047W639_48061-56019\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-BM2jfDaA.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:58.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/index-BM2jfDaA.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/js/index-D-q3Qy-s.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-18e3\"\r\nexpires: Sat, 18 Apr 2026 22:06:59 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6371,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5960)","md5":"90cbc7cbc4186bf14a971b76113cff40","sha1":"dca3abb5959b75ffd9235c79cd92eb590d0f51ec","sha256":"cd1abf6d5684b069bb89c8a564e6275ace5827d6c0f9279fa29c3eadfaa20941","sha512":"731a2b16b674fdda6ee11e5d24f81b3a92da8e84f2d41d49cc211e6725cb6eba91caff102292d38254b1bb0ca2470a1a6f13647bd4e4515a022a8c42c46a1e2a","ssdeep":"192:kmsOHQpfuoSLwxW7/RPS1N7XqbU5U9M2hVdQrm3V+0DKb:mS8xcDbX9MOkqk","tlshash":"aed1870dfc194978e3b258dcb688050111655b9392b8c2b0f6bf5ba90bf5d609f9e0fc","first_seen":"2025-06-21T05:10:04.420132Z","last_seen":"2026-04-18T10:07:30.088215Z","times_seen":581,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-D-q3Qy-s.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:59.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/index-D-q3Qy-s.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/?cid=4271349\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-1d2ee\"\r\nexpires: Sat, 18 Apr 2026 22:06:59 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119534,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64634)","md5":"c6e420078a82170399e717fe60462fbf","sha1":"333160e7968f367b831c65c012649eb51216aa79","sha256":"366d808c6522baf1692590b9dc2e9d71b72502a404037a90fc6096aa484a76a1","sha512":"994e3647294532285ff62d720254ef0c7137a741cb7b5d73835268c79e9409acdb219bf7d4d2a39ddda9dff831f84a97450716a5e226dc4bec1db8045ea1e63e","ssdeep":"1536:uh8QdMdtrgqRsKfo8/k8uzKp8ec9vZg0oJWYjKPqQgqBkCDau/+5teVLWt:JEMd5BDfoeVukagj+PnkCDi5tiLWt","tlshash":"50c36eeeb279657c62d705a8af3a0140731d78a63585c4e0f56e8fb82ba3c48f357e14","first_seen":"2025-06-21T05:10:04.412633Z","last_seen":"2026-04-18T10:07:30.089472Z","times_seen":641,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/@vueuse-BG6MN1zB.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:51.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/@vueuse-BG6MN1zB.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/js/index-D-q3Qy-s.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-11e6\"\r\nexpires: Sat, 18 Apr 2026 22:06:51 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4582,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4581)","md5":"d690020e054dc9a2dacfdcfca18c7231","sha1":"011258ff0b8c7f1476293dc0496b4ad7133c62d5","sha256":"4dec424da24601d7343f72b9e1083e67e9f6953cf1485549bdad18207f0f4598","sha512":"f3534f6f72965c38b61596b762341e524254b1391d3b62fa571ae8023601660a7f40582a2daa72345024c497a23f3bdd12801ef818a150359123ada96af9ac98","ssdeep":"96:LupsoTxFpdpeJMYTEzFyMBHf2bPXcWaVJ/hmVd51U4gU9nAgXYqL1KlaFfzhFp/7:Lupdpmm0EpyMB+bPZa9E51UPInAgoqBd","tlshash":"1791b9cd709670b2337a9d95d07b420eba283551345fe4d0a01e5ef53e21da27352dde","first_seen":"2025-06-19T04:15:59.52064Z","last_seen":"2026-04-18T10:07:30.090232Z","times_seen":3224,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/@vant-BGmWO0Bj.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:51.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/@vant-BGmWO0Bj.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/js/index-D-q3Qy-s.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-a4e\"\r\nexpires: Sat, 18 Apr 2026 22:06:51 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2638,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2637)","md5":"6d405d0e201a7e59001fa3732e601deb","sha1":"5e9782ceacd87cb267c610855a11d88388d5f849","sha256":"49225d1c23add4df603a7e2d4d8dd8cb7e26d926b4e461bb58b3ab6dc86e785f","sha512":"4ad5f0a44df106356de8d02bf00364e1000f804ace31a63094ba7174eb892a9ec3769118bc5ddea163ae8cc9784bf4b5008eff7c7a5bfae9492d2346dcf995a6","ssdeep":"","tlshash":"b95167ac3651bc34465a1ea2417f9ba5b2163824704b8050e008dd153951863c7fffde","first_seen":"2025-06-19T04:15:59.51972Z","last_seen":"2026-04-18T10:07:30.104861Z","times_seen":7794,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/vant-CzFdJ4uY.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:52.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/vant-CzFdJ4uY.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-6241\"\r\nexpires: Sat, 18 Apr 2026 22:06:52 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25153,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24864)","md5":"852e273954fa90d55c0e74ba1adde9e4","sha1":"1edd5cd78042a89fdb453eff7ac00a81ee11381d","sha256":"a362f686e909416c308eb2e9bd7303593e68b441a6672db1d2d76f8545fe3049","sha512":"593a21cc5befa4ea9345c755b92e155f572805c6d43b162d45e5fc28db1d8aa7a29e65da492cdd1773689a4c5b28d321c6e70b57082931694d38695db8ebce6a","ssdeep":"768:aHcoeRdR113jDKzaKhIP3aJZmHD19BOoTEwVde0ewh6Kg462KIGsEnCrE/jXg:Jo0DKzO3aUnMULPKXg","tlshash":"f7b209993086f43f63f585ee40690201a3291b6a341ec4ecb53ceedbb299c5974b6b35","first_seen":"2025-06-19T04:15:59.508357Z","last_seen":"2026-04-18T10:07:30.106253Z","times_seen":7795,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nhfgy43.xc68347950.com:28963/bewcdn.txt?t=1776506813016","fqdn":"nhfgy43.xc68347950.com","domain":"xc68347950.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.031Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bewcdn.txt?t=1776506813016 HTTP/1.1\r\nHost: nhfgy43.xc68347950.com:28963\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"146.103.88.75/ipacdn.txt?t=1776506815535","fqdn":"146.103.88.75","domain":"146.103.88.75","tld":""},"ip":{"addr":"146.103.88.75","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:55.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"146.103.88.2","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 05 Jun 2025 06:53:43 GMT","end":"Tue, 07 Jul 2026 06:53:42 GMT"},"fingerprint":{"sha1":"F8:7A:B6:A1:A1:79:AA:EB:3C:D4:91:EE:41:2D:A6:24:5F:8D:F1:C6","sha256":"E7:7C:E6:71:F7:AF:58:60:9E:C5:42:7D:E7:AF:37:DF:92:05:E8:3D:70:F1:C7:9C:E0:EC:CC:F0:4C:37:3C:8E"}}},"request":{"raw":"GET /ipacdn.txt?t=1776506815535 HTTP/1.1\r\nHost: 146.103.88.75\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:56 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nset-cookie: acw_tc=0a0f6b8b17765068165908510e3a9cba3e53f6170fbdb83236ffc5625b8c67;path=/;HttpOnly;Max-Age=1800\r\ncache-control: s-maxage=315360000,max-age=0,public\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-credentials: true\r\nvia: 1.1 PS-SIN-04IIS131:6 (W), 1.1 PS-SIN-04Xkl20:11 (W)\r\nx-px: ms PS-SIN-04Xkl20SIN, ms PS-SIN-04IIS131SIN(origin)\r\nx-ws-request-id: 69e357c0_PS-SIN-04Xkl20_35470-1250\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":2160,"timings":{"blocked":940,"dns":0,"connect":249,"send":0,"wait":277,"receive":0,"ssl":691},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fvnmu175.xc63178495.com:5029/bewcdn.txt?t=1776506816125","fqdn":"fvnmu175.xc63178495.com","domain":"xc63178495.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":5029,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:56.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fvnmu175.xc63178495.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:07 GMT","end":"Wed, 10 Jun 2026 13:07:06 GMT"},"fingerprint":{"sha1":"58:5D:1B:AF:7E:74:07:3B:9C:AA:78:FF:58:ED:F4:B7:FC:80:C2:81","sha256":"1C:65:A8:02:7A:4F:37:AB:AF:12:BC:E1:73:32:D8:38:56:8C:69:F1:8C:81:FA:0F:2D:C0:56:B7:7B:53:A6:64"}}},"request":{"raw":"GET /bewcdn.txt?t=1776506816125 HTTP/1.1\r\nHost: fvnmu175.xc63178495.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:56 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C0D2B575323120639A\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\naccept-ranges: bytes\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Fri, 17 Apr 2026 16:30:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v7.2.17\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 2\r\nvia: 1.1 ianxun22:17 (W), 1.1 PS-CDG-04A5e173:5 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms ianxun22HKG(origin)\r\nx-ws-request-id: 69e357c0_PS-CDG-04A5e173_7280-16747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":184,"dns":129,"connect":27,"send":0,"wait":301,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-BM2jfDaA.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:58.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/index-BM2jfDaA.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/?cid=4271349\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-18e3\"\r\nexpires: Sat, 18 Apr 2026 22:06:58 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6371,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5960)","md5":"90cbc7cbc4186bf14a971b76113cff40","sha1":"dca3abb5959b75ffd9235c79cd92eb590d0f51ec","sha256":"cd1abf6d5684b069bb89c8a564e6275ace5827d6c0f9279fa29c3eadfaa20941","sha512":"731a2b16b674fdda6ee11e5d24f81b3a92da8e84f2d41d49cc211e6725cb6eba91caff102292d38254b1bb0ca2470a1a6f13647bd4e4515a022a8c42c46a1e2a","ssdeep":"192:kmsOHQpfuoSLwxW7/RPS1N7XqbU5U9M2hVdQrm3V+0DKb:mS8xcDbX9MOkqk","tlshash":"aed1870dfc194978e3b258dcb688050111655b9392b8c2b0f6bf5ba90bf5d609f9e0fc","first_seen":"2025-06-21T05:10:04.420132Z","last_seen":"2026-04-18T10:07:30.088215Z","times_seen":581,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/@vue-BJUJtGKq.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:51.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/@vue-BJUJtGKq.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/js/index-D-q3Qy-s.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-12174\"\r\nexpires: Sat, 18 Apr 2026 22:06:51 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f06f0fd561eea95c4feccde0746117b1","sha1":"32c45886151948703a8ac692a48d3cce70aa25e3","sha256":"e228111590701d2db46eb9d8c2a4d85377a449f398bbed10a94ef47938a57c55","sha512":"88e3e6da9f043912c14291675ff91b5426e21fe36defd0cd318131e1b2a9c791fdd662697838cbc1a0a0bddc3139d5ce4e81f82108886153575d383aef0fe4a1","ssdeep":"768:8XCLkQJtg/ocN0MjFuPgDpt6RDMk/0jOVT/eFYl9E27OqX6MQYAMOxTlExfheEqh:9wSCqJCI2b273WNK2U40MH","tlshash":"917308e83092b46253fa19e2007b0406f3792d5a3849d998b16dfedb3e7241550bbfbd","first_seen":"2025-06-19T04:15:59.499735Z","last_seen":"2026-04-18T10:07:30.107079Z","times_seen":7798,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qmihfbg591.xc24605987.com:29088/bewcdn.txt?t=1776506816125","fqdn":"qmihfbg591.xc24605987.com","domain":"xc24605987.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":29088,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:56.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qmihfbg591.xc24605987.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 10 Aug 2025 00:00:00 GMT","end":"Mon, 10 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AC:0B:50:ED:1D:E0:11:DD:10:02:9E:FD:7D:7B:16:4D:7F:DE:72:8E","sha256":"D7:49:5C:5B:A4:96:C4:35:CB:AC:67:71:37:46:2F:CD:C2:EC:3F:1E:12:E8:89:1D:4E:D6:78:E5:98:90:0A:95"}}},"request":{"raw":"GET /bewcdn.txt?t=1776506816125 HTTP/1.1\r\nHost: qmihfbg591.xc24605987.com:29088\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:56 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nx-oss-request-id: 69E357C027077C32395F9F0E\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Fri, 17 Apr 2026 16:30:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v7.2.17\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 1\r\nserver: gocache\r\nc-type: pf\r\nrid: ddf6fd135e916e13ab12c9f246d6a6f0\r\nx-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":1662,"timings":{"blocked":700,"dns":145,"connect":1,"send":0,"wait":256,"receive":0,"ssl":558},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/hall/api/lobby/config/getAppDownloadInfo.json?t=1776506","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:58.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"OPTIONS /hall/api/lobby/config/getAppDownloadInfo.json?t=1776506 HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: clienttimezone,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:58 GMT\r\ncontent-length: 0\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C2BCB28E33395180A4\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-allow-headers: clienttimezone, device, devicemodel, devicetype, domain, language, nonce, platformtype, sign, sitecode, timestamp, x-custom-referer, x-request-id, x-version\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nx-oss-server-time: 0\r\nvia: 1.1 ianxun21:10 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun21HKG(origin)\r\nx-ws-request-id: 69e357c2_PS-FRA-047W639_48061-56052\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-D-q3Qy-s.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:51.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/index-D-q3Qy-s.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-1d2ee\"\r\nexpires: Sat, 18 Apr 2026 22:06:51 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119534,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64634)","md5":"c6e420078a82170399e717fe60462fbf","sha1":"333160e7968f367b831c65c012649eb51216aa79","sha256":"366d808c6522baf1692590b9dc2e9d71b72502a404037a90fc6096aa484a76a1","sha512":"994e3647294532285ff62d720254ef0c7137a741cb7b5d73835268c79e9409acdb219bf7d4d2a39ddda9dff831f84a97450716a5e226dc4bec1db8045ea1e63e","ssdeep":"1536:uh8QdMdtrgqRsKfo8/k8uzKp8ec9vZg0oJWYjKPqQgqBkCDau/+5teVLWt:JEMd5BDfoeVukagj+PnkCDi5tiLWt","tlshash":"50c36eeeb279657c62d705a8af3a0140731d78a63585c4e0f56e8fb82ba3c48f357e14","first_seen":"2025-06-21T05:10:04.412633Z","last_seen":"2026-04-18T10:07:30.089472Z","times_seen":641,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/assets/vant-D7WKZ9xU.css","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:51.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /assets/vant-D7WKZ9xU.css HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-2e7f\"\r\nexpires: Sat, 18 Apr 2026 22:06:51 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11903,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11902)","md5":"edf874bcdf3ae5dffbe3a9a3498a8848","sha1":"a1e3242bd15f7de4a702d4ebe42d3f75433cae77","sha256":"34b1058c642bfafa642253f7c568cd794767fb81602008461d447046e87221c1","sha512":"2730a5372bd1dd4c25e0e7392cd473afdece21542b47507d798ab75da27dadb5533d715bf2ab17d56ff7edf2ea475b7656501397e2dcb02804c201cb6f44cd79","ssdeep":"192:o/ZpHK68QZ2KFZnHEcam51bjQurwcq6SWHd/flrwcq6SWHd/fyfzWhbQE9E3aQzm:MD2KFZnHEcam51bjQurwcq6SWHd/flrh","tlshash":"2932412ae881127a6e076a5497de05d4f17ce6b2be61cde8710432498bc7ff81733247","first_seen":"2024-09-23T04:34:27Z","last_seen":"2026-04-18T10:07:30.10797Z","times_seen":7740,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/vant-CzFdJ4uY.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:51.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/vant-CzFdJ4uY.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/js/index-D-q3Qy-s.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-6241\"\r\nexpires: Sat, 18 Apr 2026 22:06:51 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25153,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24864)","md5":"852e273954fa90d55c0e74ba1adde9e4","sha1":"1edd5cd78042a89fdb453eff7ac00a81ee11381d","sha256":"a362f686e909416c308eb2e9bd7303593e68b441a6672db1d2d76f8545fe3049","sha512":"593a21cc5befa4ea9345c755b92e155f572805c6d43b162d45e5fc28db1d8aa7a29e65da492cdd1773689a4c5b28d321c6e70b57082931694d38695db8ebce6a","ssdeep":"768:aHcoeRdR113jDKzaKhIP3aJZmHD19BOoTEwVde0ewh6Kg462KIGsEnCrE/jXg:Jo0DKzO3aUnMULPKXg","tlshash":"f7b209993086f43f63f585ee40690201a3291b6a341ec4ecb53ceedbb299c5974b6b35","first_seen":"2025-06-19T04:15:59.508357Z","last_seen":"2026-04-18T10:07:30.106253Z","times_seen":7795,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/ua-parser-js-DP5omx3I.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:52.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/ua-parser-js-DP5omx3I.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-5de6\"\r\nexpires: Sat, 18 Apr 2026 22:06:52 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24038,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24037)","md5":"b71c1a4fd07412d0ddd5f0006e401e75","sha1":"a3cf730602aeef3df364916f4ef42e7c0f903419","sha256":"bc8e4ca06ec494e7df32f2dbf125b9b0503a60de5991b5badbb20e5e6c043ad7","sha512":"d018e92aeb4d98a54260edbd707e088a8875010278bc8979921cbbc492281e1fb8720ced7e21cc29b33500d4221c0c403b88b31b6f70caf069f2fc4daad2b793","ssdeep":"384:KLykXfExhSMH+rq/51Raw7t2v6az5CgSpnMjEMuSI162By4iBWijdv:KLFfY1erq/51YGt2/z5C3fSI162By4ib","tlshash":"f6b2a77fe3d5b73c07ece508d63504482f271f69ea88a0746e9892a1a9747c612c7f36","first_seen":"2025-06-19T04:15:59.5131Z","last_seen":"2026-04-18T10:07:30.109264Z","times_seen":9084,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fds654.xc68905274.com:5002/bewcdn.txt?t=1776506813017","fqdn":"fds654.xc68905274.com","domain":"xc68905274.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":5002,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fds654.xc68905274.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:16:41 GMT","end":"Wed, 10 Jun 2026 13:16:40 GMT"},"fingerprint":{"sha1":"E5:2B:86:78:33:F6:C5:18:2C:A9:4C:F0:E3:1B:5C:76:BF:B3:2C:3F","sha256":"4B:7B:23:D6:9E:39:87:29:10:4D:87:6F:4E:37:A6:E0:97:46:FF:D6:F2:13:41:B9:F8:52:15:90:19:96:68:3E"}}},"request":{"raw":"GET /bewcdn.txt?t=1776506813017 HTTP/1.1\r\nHost: fds654.xc68905274.com:5002\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 10:06:53 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://fds654.xc68905274.com:5002/normal/bewcdn.txt?t=1776506813017\r\nvia: 0.0 PS-CDG-04A5e173:4 (W)\r\nx-px: ht PS-CDG-04A5e173CDG\r\nx-ws-request-id: 69e357bd_PS-CDG-04A5e173_7087-45834\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":138,"dns":75,"connect":28,"send":0,"wait":36,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tytyrt654.xc98621375.com/ipacdn.txt?t=1776506815535","fqdn":"tytyrt654.xc98621375.com","domain":"xc98621375.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:55.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tytyrt654.xc98621375.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 13:30:33 GMT","end":"Sun, 05 Jul 2026 13:30:32 GMT"},"fingerprint":{"sha1":"1F:9B:5E:6B:E9:4A:B1:D3:C5:D8:17:68:5F:05:13:6D:A5:A0:86:EE","sha256":"38:1C:79:90:1A:7A:E4:A4:C0:B2:B0:99:DC:2E:18:C8:C6:3C:C1:AB:FF:87:B5:F5:65:28:7C:EC:AC:D2:41:77"}}},"request":{"raw":"GET /ipacdn.txt?t=1776506815535 HTTP/1.1\r\nHost: tytyrt654.xc98621375.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:56 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nset-cookie: acw_tc=0a094e7917765068159917220e2a391abe8b655b9797fe92207df8d6884d3e;path=/;HttpOnly;Max-Age=1800\r\ncache-control: s-maxage=315360000,max-age=0,public\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-credentials: true\r\nvia: 1.1 PS-SIN-045cG117:21 (W), 1.1 PS-CDG-04A5e173:2 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms PS-SIN-045cG117SIN(origin)\r\nx-ws-request-id: 69e357bf_PS-CDG-04A5e173_6851-26395\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":188,"dns":128,"connect":27,"send":0,"wait":358,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T10:06:49.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:50 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"RxJS","description":"RxJS is a reactive library used to implement reactive programming to deal with async implementation, callbacks, and event-based programs.","website":"https://reactivex.io","common_platform_enumeration":"","icon":"RxJS.png","categories":["JavaScript frameworks"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (898)","md5":"f3d766d00e736011e27c7c8f9315d636","sha1":"748c6ee72d67248604b8ba246363195c125880a6","sha256":"7d278040a47642405ee58659b9514c30408ac700df27a833be3322bdc185d926","sha512":"ce9bc7f1c3c51122b76a92edd096f4c8f3898ceac3652f60837c9f6e5fa074e303baaa87cd334da20e0717669f56b578a1caabeb7a45dc383385644271d7e4c9","ssdeep":"","tlshash":"0171839764f0d95a57968e1aeed4f4047ed0a993090da880b8cd74fe4f10fd28aef864","first_seen":"2025-12-21T19:52:37.121671Z","last_seen":"2026-04-18T10:07:30.110196Z","times_seen":6,"resource_available":true,"data":null}},"time_used":2330,"timings":{"blocked":1036,"dns":267,"connect":250,"send":0,"wait":257,"receive":0,"ssl":512},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-04-18","alert":"Detects hex encoded code that has been base64 encoded","trigger":"puqyl.app/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2019-04-29","description":"Detects hex encoded code that has been base64 encoded","reference":"https://www.nextron-systems.com/2019/04/29/spotlight-threat-hunting-yara-rule-example/","rule":"SUSP_Base64_Encoded_Hex_Encoded_Code","score":"65"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xsfdfre3.xc13472598.com:28963/bewcdn.txt?t=1776506813016","fqdn":"xsfdfre3.xc13472598.com","domain":"xc13472598.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":28963,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xsfdfre3.xc13472598.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:8A:C9:23:F5:68:11:24:05:07:D5:51:26:49:FF:37:DB:BA:3B:C4","sha256":"B5:71:F1:45:1E:E4:BD:11:71:5C:59:A7:4A:35:6F:82:C8:E9:58:EC:4B:71:98:23:9E:6B:08:CB:C8:44:F8:2B"}}},"request":{"raw":"GET /bewcdn.txt?t=1776506813016 HTTP/1.1\r\nHost: xsfdfre3.xc13472598.com:28963\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 18 Apr 2026 10:06:53 GMT\r\ncontent-type: text/html\r\ncontent-length: 140\r\nlocation: https://xsfdfre3.xc13472598.com:28963/normal/bewcdn.txt?t=1776506813016\r\nserver: gocache\r\nc-type: pf\r\nrid: 6f7f845b31e50b3bf6929ce9372e3a95\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":1616,"timings":{"blocked":697,"dns":171,"connect":1,"send":0,"wait":218,"receive":0,"ssl":525},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xsfdfre3.xc13472598.com:28963/normal/bewcdn.txt?t=1776506813951","fqdn":"xsfdfre3.xc13472598.com","domain":"xc13472598.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":28963,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xsfdfre3.xc13472598.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:8A:C9:23:F5:68:11:24:05:07:D5:51:26:49:FF:37:DB:BA:3B:C4","sha256":"B5:71:F1:45:1E:E4:BD:11:71:5C:59:A7:4A:35:6F:82:C8:E9:58:EC:4B:71:98:23:9E:6B:08:CB:C8:44:F8:2B"}}},"request":{"raw":"GET /normal/bewcdn.txt?t=1776506813951 HTTP/1.1\r\nHost: xsfdfre3.xc13472598.com:28963\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:54 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nx-oss-request-id: 69E357BEFE3450333351D088\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Tue, 23 Sep 2025 05:20:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v6.4.3\r\ncache-control: max-age=600,s-maxage=1800,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 3\r\nserver: gocache\r\nc-type: pf\r\nrid: dec2fafda0e3b8a8c8b4a1fb1c1e31db\r\nx-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dadf342.xc45981073.com/ipacdn.txt?t=1776506815536","fqdn":"dadf342.xc45981073.com","domain":"xc45981073.com","tld":"com"},"ip":{"addr":"45.125.14.216","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:55.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dadf342.xc45981073.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 16:35:08 GMT","end":"Thu, 21 May 2026 16:35:07 GMT"},"fingerprint":{"sha1":"18:35:6A:26:73:24:75:5D:C6:3B:B8:FB:88:E2:0E:4C:ED:E4:DE:A9","sha256":"F0:67:64:FC:2D:AB:C6:08:00:C8:40:70:EC:1C:8C:0A:DF:94:42:91:DF:C0:E7:80:47:8D:6B:8C:88:53:F3:E9"}}},"request":{"raw":"GET /ipacdn.txt?t=1776506815536 HTTP/1.1\r\nHost: dadf342.xc45981073.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ncache-control: s-maxage=315360000,max-age=0,public\r\ncontent-type: text/plain\r\ndate: Sat, 18 Apr 2026 10:07:00 GMT\r\nset-cookie: acw_tc=0a094e7617765068208962568e3f9641066541af20d39aebb71d2807ea3d7a;path=/;HttpOnly;Max-Age=1800\r\nstrict-transport-security: max-age=31536000\r\nx-cache: BYPASS\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":6246,"timings":{"blocked":764,"dns":333,"connect":211,"send":0,"wait":4715,"receive":1,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/hall/api/lobby/channel/go/getChannelInfoById/id/4271349/info/channel.json?t=1776506","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:57.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"OPTIONS /hall/api/lobby/channel/go/getChannelInfoById/id/4271349/info/channel.json?t=1776506 HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: clienttimezone,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:57 GMT\r\ncontent-length: 0\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C1BCB28E3339AC7AA4\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-allow-headers: clienttimezone, device, devicemodel, devicetype, domain, language, nonce, platformtype, sign, sitecode, timestamp, x-custom-referer, x-request-id, x-version\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nx-oss-server-time: 0\r\nvia: 1.1 ianxun21:10 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun21HKG(origin)\r\nx-ws-request-id: 69e357c1_PS-FRA-047W639_48061-55966\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tytyrt654.xc98621375.com/hall/api/statistics/domain/pointer","fqdn":"tytyrt654.xc98621375.com","domain":"xc98621375.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:59.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tytyrt654.xc98621375.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 13:30:33 GMT","end":"Sun, 05 Jul 2026 13:30:32 GMT"},"fingerprint":{"sha1":"1F:9B:5E:6B:E9:4A:B1:D3:C5:D8:17:68:5F:05:13:6D:A5:A0:86:EE","sha256":"38:1C:79:90:1A:7A:E4:A4:C0:B2:B0:99:DC:2E:18:C8:C6:3C:C1:AB:FF:87:B5:F5:65:28:7C:EC:AC:D2:41:77"}}},"request":{"raw":"OPTIONS /hall/api/statistics/domain/pointer HTTP/1.1\r\nHost: tytyrt654.xc98621375.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nset-cookie: acw_tc=0a094e7917765068191168005e2a398dfddba8c2b3c181b3210f255374956d;path=/;HttpOnly;Max-Age=1800\r\nx-saas-server-id: 844988bcd4-tdsph|4077b28f17e139fc7f0e37f6dee10007\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 PS-SIN-045cG117:21 (W), 1.1 PS-CDG-04A5e173:2 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms PS-SIN-045cG117SIN(origin)\r\nx-ws-request-id: 69e357c3_PS-CDG-04A5e173_6851-26476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/assets/index-BcE98vFE.css","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:59.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /assets/index-BcE98vFE.css HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/?cid=4271349\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-94c\"\r\nexpires: Sat, 18 Apr 2026 22:06:59 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2380,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2379)","md5":"705090710690059120fdf3780a369e0f","sha1":"c84d2204f5cf2bcbefcffdca1570a506b19e1ea8","sha256":"f83bad0ee76543413696035255ef2cd10af559f7c0795a964308f987414fe19d","sha512":"0d85af30c39e3196f4c46f4ff8bb29909fb1db1a564beda1ae372f37b68cf6e4443d721bc62e42449b91a99bda7203980850a9be52a447aac8c488e0dfb50b85","ssdeep":"","tlshash":"86413339b3a21075213bcf89be848f104616d663bc634fd6b6c358824ed768f206219f","first_seen":"2025-06-19T04:15:59.501617Z","last_seen":"2026-04-18T10:07:30.111483Z","times_seen":2109,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-wFYWz2MP.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:59.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/index-wFYWz2MP.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/?cid=4271349\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-571\"\r\nexpires: Sat, 18 Apr 2026 22:06:59 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1393,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1392)","md5":"a74b539f91b4b334e92e7982f33386d7","sha1":"ce99307d4cc182a00fc74fe8f9fdcf2b6f4e9274","sha256":"d592b279df12ce8be53d1ef4ab7e578799852976e7d5cad755b6ddf4edb520cb","sha512":"a5d1d124c150bdd0b74a3ba46d74c2040301f595cbbf132919a088bed87f156fc11913990866d5985c43499749c0f0a93528c3f3edb85d53bfb38ce45f5509cc","ssdeep":"","tlshash":"6521630ef4899cb6137344cc3544116262990aaa82f8d7e0f3fd0f9943b1c70d52e97d","first_seen":"2025-06-21T05:10:04.401251Z","last_seen":"2026-04-18T10:07:30.112566Z","times_seen":577,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/crypto-js-6gyGvNpv.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:51.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/crypto-js-6gyGvNpv.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/js/index-D-q3Qy-s.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-10eeb\"\r\nexpires: Sat, 18 Apr 2026 22:06:51 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69355,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9b5adfad48baa3e775a471fe30160008","sha1":"b44c12a374482f3d298d5672bd3432f18267ebd0","sha256":"288e2d9bec6a31e4b6eb7527667b2c3af5ef3fda3ce3abe865da2e3c18d143c7","sha512":"e59ad504e8c002f4b394f40c456f9feb3e5d062fce224f77679b7ecc76b507de60009a3c92556ee34ab75d374edb47e7fb7c1dda7c950be1de9ceeaaecab7541","ssdeep":"1536:vM+5/kt9++5y2Yj/6zqziPtNPU9ArHMPc:vCZYj/aq+","tlshash":"fe6349c4768870d1a3ab78b0093fb08b727335a205acd198e664e6dd6d7c6dd8136d3e","first_seen":"2025-06-21T05:10:04.416117Z","last_seen":"2026-04-18T10:07:30.113609Z","times_seen":1649,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/ua-parser-js-DP5omx3I.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:51.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/ua-parser-js-DP5omx3I.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/js/index-D-q3Qy-s.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-5de6\"\r\nexpires: Sat, 18 Apr 2026 22:06:51 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24038,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24037)","md5":"b71c1a4fd07412d0ddd5f0006e401e75","sha1":"a3cf730602aeef3df364916f4ef42e7c0f903419","sha256":"bc8e4ca06ec494e7df32f2dbf125b9b0503a60de5991b5badbb20e5e6c043ad7","sha512":"d018e92aeb4d98a54260edbd707e088a8875010278bc8979921cbbc492281e1fb8720ced7e21cc29b33500d4221c0c403b88b31b6f70caf069f2fc4daad2b793","ssdeep":"384:KLykXfExhSMH+rq/51Raw7t2v6az5CgSpnMjEMuSI162By4iBWijdv:KLFfY1erq/51YGt2/z5C3fSI162By4ib","tlshash":"f6b2a77fe3d5b73c07ece508d63504482f271f69ea88a0746e9892a1a9747c612c7f36","first_seen":"2025-06-19T04:15:59.5131Z","last_seen":"2026-04-18T10:07:30.109264Z","times_seen":9084,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/assets/index-1dkvjLb8.css","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:58.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /assets/index-1dkvjLb8.css HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/?cid=4271349\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-807\"\r\nexpires: Sat, 18 Apr 2026 22:06:58 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2055,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2054)","md5":"bdca537da49d98687c243d065c07b193","sha1":"d7cb8c7b1811177cc73410e58db03e6eb0b3e805","sha256":"2ae15d819b72f27063812ace8f2b80b9967c61baaae9b0b87f0bf60c95e40349","sha512":"d4b741b8ed57a3aab85068151438115a0307855c2cd39c4c638326811fa67ebab880271f90324783746928fe4144fa1149a52c6d416f76319e92d25d8dda452c","ssdeep":"","tlshash":"f341f137fba62128d137e1a67a4849487130d560e7070b98bba35d2695cb6db35b41cc","first_seen":"2024-09-29T15:23:27Z","last_seen":"2026-04-18T10:07:30.11445Z","times_seen":5020,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-D7yqepvi.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:59.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/index-D7yqepvi.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/?cid=4271349\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-147f\"\r\nexpires: Sat, 18 Apr 2026 22:06:59 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5247,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5246)","md5":"a9974945cd9e95ebb387f024f0b483e8","sha1":"b902b57ccd4cd2d79020c3a6cfbe367898f887f1","sha256":"129452479bb6e975698f068096effa6ece12185ac79bfc05a08153a8f377ea5d","sha512":"1b9ad788adfd7c0205b700aba8ad75af695985a8f16b0bbc354d0711b9cecaa4479c1bc020fac40b9d7c345a4b30379cb3fdd2a7bd1e8af15d3871df9507c4f1","ssdeep":"96:kh+2uoMOmdYKluH9LYmA+i+ODG3SdAV+xy0X7Khw4InC9k9tkMxi9WoWDnm:kU2uoYdT6uv+i+O2Sd9y0X7KqjC9kAME","tlshash":"81b1d85ef0b7d83a6397866855150411d218ddc350b9935cb1fc8e2d77f2e6483bb70a","first_seen":"2025-06-21T05:10:04.408245Z","last_seen":"2026-04-18T10:07:30.11534Z","times_seen":580,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-wFYWz2MP.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:59.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/index-wFYWz2MP.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/js/index-BM2jfDaA.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-571\"\r\nexpires: Sat, 18 Apr 2026 22:06:59 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1393,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1392)","md5":"a74b539f91b4b334e92e7982f33386d7","sha1":"ce99307d4cc182a00fc74fe8f9fdcf2b6f4e9274","sha256":"d592b279df12ce8be53d1ef4ab7e578799852976e7d5cad755b6ddf4edb520cb","sha512":"a5d1d124c150bdd0b74a3ba46d74c2040301f595cbbf132919a088bed87f156fc11913990866d5985c43499749c0f0a93528c3f3edb85d53bfb38ce45f5509cc","ssdeep":"","tlshash":"6521630ef4899cb6137344cc3544116262990aaa82f8d7e0f3fd0f9943b1c70d52e97d","first_seen":"2025-06-21T05:10:04.401251Z","last_seen":"2026-04-18T10:07:30.112566Z","times_seen":577,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tgbh71.xc90376182.com:31178/normal/bewcdn.txt?t=1776506813120","fqdn":"tgbh71.xc90376182.com","domain":"xc90376182.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.123Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /normal/bewcdn.txt?t=1776506813120 HTTP/1.1\r\nHost: tgbh71.xc90376182.com:31178\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/siteadmin/upload/img/1932350497106767874.avif","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puqyl.app/","date":"2026-04-18T10:07:00.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"GET /siteadmin/upload/img/1932350497106767874.avif HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:07:00 GMT\r\ncontent-type: image/avif\r\ncontent-length: 237225\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C412B5FF31313A3A2A\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\netag: \"9C783B050DC577A831AB30423CE8BE0F\"\r\nlast-modified: Tue, 11 Nov 2025 06:41:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5988547127773011156\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=86400,stale-while-revalidate=86400,immutable,proxy-revalidate,public\r\ncontent-md5: nHg7BQ3Fd6gxqzBCPOi+Dw==\r\nx-oss-server-time: 5\r\nvia: 1.1 ianxun21:11 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun21HKG(origin)\r\nx-ws-request-id: 69e357c4_PS-FRA-047W639_48061-56198\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":237225,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9c783b050dc577a831ab30423ce8be0f","sha1":"81f3a5cf946562512b9a6cf37164c99120d90f4d","sha256":"f66f7ffe65e84b6207523c9110426c6dae1b78b4c80aa6f1192d407f8a4180ab","sha512":"28ec0c826a828dedf8f5b2d33bf7c1da86feb2be1cafce783d6f92a6a20a4165f3ecf5d8ed97af2cf99ef55ab1a5d4dc23c80b33fdde27001bf9bccbde3da745","ssdeep":"6144:zWOA2LpEVc+Z66+yzIiHVYJj/FJyCGT3qj2xNlHRmPHHKfUaH:zWD2LpE++8deAxf2xNlxmPqfd","tlshash":"6b34234d30e849a5e6f853eb40edc23dbed295891868dcc1990d5af6f72c09eee54888","first_seen":"2025-08-01T08:04:09.553488Z","last_seen":"2026-04-18T10:07:30.116851Z","times_seen":46,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/@vueuse-BG6MN1zB.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:52.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/@vueuse-BG6MN1zB.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-11e6\"\r\nexpires: Sat, 18 Apr 2026 22:06:52 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4582,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4581)","md5":"d690020e054dc9a2dacfdcfca18c7231","sha1":"011258ff0b8c7f1476293dc0496b4ad7133c62d5","sha256":"4dec424da24601d7343f72b9e1083e67e9f6953cf1485549bdad18207f0f4598","sha512":"f3534f6f72965c38b61596b762341e524254b1391d3b62fa571ae8023601660a7f40582a2daa72345024c497a23f3bdd12801ef818a150359123ada96af9ac98","ssdeep":"96:LupsoTxFpdpeJMYTEzFyMBHf2bPXcWaVJ/hmVd51U4gU9nAgXYqL1KlaFfzhFp/7:Lupdpmm0EpyMB+bPZa9E51UPInAgoqBd","tlshash":"1791b9cd709670b2337a9d95d07b420eba283551345fe4d0a01e5ef53e21da27352dde","first_seen":"2025-06-19T04:15:59.52064Z","last_seen":"2026-04-18T10:07:30.090232Z","times_seen":3224,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/hall/api/lobby/config/getAppDownloadInfo.json?t=1776506","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:58.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"GET /hall/api/lobby/config/getAppDownloadInfo.json?t=1776506 HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nlanguage: en\r\ndevice: 5354f369588af02ff08f33d1968f1933\r\nx-version: 6.1.5\r\nX-Request-Id: 0afbe323-8432-4ea7-8891-7e58e83e76a8\r\nX-Custom-Referer: https://puqyl.app/?cid=4271349\r\ndomain: puqyl.app\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 0afbe323-8432-4ea7-8891-7e58e83e76a8\r\ntimestamp: 1776506818\r\nsiteCode: 1828\r\nsign: p3/wfKeEcmPSCVRmU1lGPJYQRKpCDkCxrVVbOOQ9/2/KWLgblyx1w5ovtSI5JuAu\r\ndevicetype: 4\r\nplatformtype: 3\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:58 GMT\r\ncontent-type: application/json\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C2BCB28E33399B81A4\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nlast-modified: Wed, 15 Apr 2026 10:41:12 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7353374921288379204\r\nx-oss-storage-class: Standard\r\ncache-control: s-maxage=600,public,max-age=0\r\ncontent-md5: 1TwhJA7Ff7llssfHCfilMw==\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nvia: 1.1 ianxun21:10 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun21HKG(origin)\r\nx-ws-request-id: 69e357c2_PS-FRA-047W639_48061-56066\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3520,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (3520), with no line terminators","md5":"d53c21240ec57fb965b2c7c709f8a533","sha1":"5c70f3cc8b004b09bd2d4d6ddd3d02e5028706e2","sha256":"643ed884a0bb3c1843a4af00bcf0cb66e1a85cd02b943a14eb0ca5e2b77e0248","sha512":"20fe520df9547dc0d2e19123e34231e28754877ded5ff9bec5340a31983068aa8029d755ea4049d49943cba36f99f124c759ddb841a6abd913eb274614a67deb","ssdeep":"","tlshash":"a6716ec3007c58ccd6586377c01c3b1ab834dd63c18546ccfe5c397675ae618a6487c6","first_seen":"2026-04-17T10:10:21.102379Z","last_seen":"2026-04-18T10:07:30.119742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/zh-BtCd5Gxp.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:58.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/zh-BtCd5Gxp.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/js/index-D-q3Qy-s.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-10bd\"\r\nexpires: Sat, 18 Apr 2026 22:06:58 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4285,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2772)","md5":"2ea9e01910dd0fdf993776a2c59fef27","sha1":"c701d3d4688d764564e1d90504f6d391a55d4b01","sha256":"28250ad4e047276592fe9aa6bd3c82dc77fd062388a3d36ebb0c5adc038a72fa","sha512":"e2d1716a2d73b7c1e499095d1d97d3be1097ad18b4d57826f437246ae71f9207ef1105ff321fd306fdc926ef8d5a60042a6011ab86cd027d5851b27c32465538","ssdeep":"96:+ASNLQpA+MEag9Yn4pKzt7qUAr9NOQg71pLDIoblE9SReZ6:JSN0qJd4+M52QmPblrAZ6","tlshash":"5891f9de0bfc8dac024b038d2f2f0148b0941dba93a9dce86b6689d9249cb0757025df","first_seen":"2025-06-19T04:15:59.509509Z","last_seen":"2026-04-18T10:07:30.123152Z","times_seen":2017,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tytyrt654.xc98621375.com/hall/api/statistics/domain/pointer","fqdn":"tytyrt654.xc98621375.com","domain":"xc98621375.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:59.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tytyrt654.xc98621375.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 13:30:33 GMT","end":"Sun, 05 Jul 2026 13:30:32 GMT"},"fingerprint":{"sha1":"1F:9B:5E:6B:E9:4A:B1:D3:C5:D8:17:68:5F:05:13:6D:A5:A0:86:EE","sha256":"38:1C:79:90:1A:7A:E4:A4:C0:B2:B0:99:DC:2E:18:C8:C6:3C:C1:AB:FF:87:B5:F5:65:28:7C:EC:AC:D2:41:77"}}},"request":{"raw":"POST /hall/api/statistics/domain/pointer HTTP/1.1\r\nHost: tytyrt654.xc98621375.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nlanguage: en\r\ndevice: 5354f369588af02ff08f33d1968f1933\r\nx-version: 6.1.5\r\nX-Request-Id: d0132d4a-67a7-4466-b544-9ac097109f4d\r\nX-Custom-Referer: https://puqyl.app/?cid=4271349\r\ndomain: puqyl.app\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: d0132d4a-67a7-4466-b544-9ac097109f4d\r\ntimestamp: 1776506819\r\nsiteCode: 1828\r\nsign: j19/CHb/BBaw+sKQFDbRPlg4vnZv0+6hnmA59O/x8cdW+ASuKdRRk9As7azMG2h+\r\ndevicetype: 4\r\nplatformtype: 3\r\nContent-Type: application/json\r\nContent-Length: 75\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":75,"data":"{\"domain\":\"puqyl.app\",\"deviceKind\":3,\"visitsKind\":1,\"kind\":7,\"cid\":4271349}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 50\r\nset-cookie: acw_tc=0a094e7917765068193138075e2a39f9ecc5bfcc81fc163f4f423891db2597;path=/;HttpOnly;Max-Age=1800\r\nx-trace-id: be1ccde3ee997b8d0f963a896f3940ec\r\nx-env-go-biz-statistics-server: 0\r\ncache-control: no-cache\r\nx-saas-server-id: 844988bcd4-67799|9fcee84c486543f7f26c3c698f9ae789\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 PS-SIN-045cG117:21 (W), 1.1 PS-CDG-04A5e173:2 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms PS-SIN-045cG117SIN(origin)\r\nx-ws-request-id: 69e357c3_PS-CDG-04A5e173_6851-26484\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eb2c0b1388a05a659fdd9fd988d6b26c","sha1":"babb4843f7ce565e9f5e339241348569981a65ab","sha256":"74d6060474a31235697adba5fb405b589ab810e117568a60f0fc89dd52d9081d","sha512":"4f651894fcb0427925a3a852fc2e7e68290c7b69bba65ae16a3e84a670f9c1579e21171b9fae478464875f6a173a4c09f63f5ca3f76d49b66ffaa47a305862a2","ssdeep":"","tlshash":"5a9002d0531d42425845723861195581655894560456c3388e5d0a6408a808a1002151","first_seen":"2026-04-18T10:07:30.124328Z","last_seen":"2026-04-18T10:07:30.124328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tgbh71.xc90376182.com:31178/bewcdn.txt?t=1776506813016","fqdn":"tgbh71.xc90376182.com","domain":"xc90376182.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.029Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bewcdn.txt?t=1776506813016 HTTP/1.1\r\nHost: tgbh71.xc90376182.com:31178\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhfgy43.xc68347950.com:28963/normal/bewcdn.txt?t=1776506813103","fqdn":"nhfgy43.xc68347950.com","domain":"xc68347950.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.107Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /normal/bewcdn.txt?t=1776506813103 HTTP/1.1\r\nHost: nhfgy43.xc68347950.com:28963\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amasldowp.xc90376182.com/ipacdn.txt?t=1776506815534","fqdn":"amasldowp.xc90376182.com","domain":"xc90376182.com","tld":"com"},"ip":{"addr":"45.125.14.194","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:55.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amasldowp.xc90376182.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 16:33:52 GMT","end":"Thu, 21 May 2026 16:33:51 GMT"},"fingerprint":{"sha1":"F1:0D:65:11:A5:49:E4:6C:51:E5:2D:A5:AD:AE:AD:EA:23:37:3B:38","sha256":"3A:98:CF:64:AB:2A:08:B1:B0:98:42:99:CE:EB:F4:11:96:49:A8:F6:04:67:37:70:B3:B0:AE:B5:49:3B:92:CE"}}},"request":{"raw":"GET /ipacdn.txt?t=1776506815534 HTTP/1.1\r\nHost: amasldowp.xc90376182.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ncache-control: s-maxage=315360000,max-age=0,public\r\ncontent-type: text/plain\r\ndate: Sat, 18 Apr 2026 10:06:59 GMT\r\nset-cookie: acw_tc=0a0ccb0217765068191545848e50e4a4d8666d8c7544f04436b0906edf464e;path=/;HttpOnly;Max-Age=1800\r\nstrict-transport-security: max-age=31536000\r\nx-cache: BYPASS\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":4507,"timings":{"blocked":767,"dns":340,"connect":204,"send":0,"wait":2971,"receive":1,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/assets/index-BJwb5kDX.css","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:59.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /assets/index-BJwb5kDX.css HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/?cid=4271349\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 238\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\netag: \"6857e630-ee\"\r\nexpires: Sat, 18 Apr 2026 22:06:59 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nserver: cdn\r\nx-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4a992170cde0e7693587f634cb175f51","sha1":"5f3c38c5779d82d01dbfb626caa421670f0ee625","sha256":"886b1d5b6818c982bbbd4649c5da5e871af0dd1e403009690c023da8f2a0b4b7","sha512":"6756ac3e98af7b86ee51c128b3bd73ade20adb30a8205c4faaca64681968a409f963f2b8ff3caf8f484e99288235d1781ad08e871e61a49b02de1c723c97f344","ssdeep":"","tlshash":"8cd05b7dd712d065e43285123449894e41c5d2430251045d6f157d78a89f95eb93b0d0","first_seen":"2024-09-29T15:23:27Z","last_seen":"2026-04-18T10:07:30.127045Z","times_seen":5108,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/siteadmin/upload/img/1932705176892813314.avif","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puqyl.app/","date":"2026-04-18T10:07:00.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"GET /siteadmin/upload/img/1932705176892813314.avif HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:07:00 GMT\r\ncontent-type: image/avif\r\ncontent-length: 208128\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C4300C863533117B91\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\netag: \"FEB15F3CD6431004EDB8DD87755B82CA\"\r\nlast-modified: Tue, 11 Nov 2025 06:41:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16447758677830632070\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=86400,stale-while-revalidate=86400,immutable,proxy-revalidate,public\r\ncontent-md5: /rFfPNZDEATtuN2HdVuCyg==\r\nx-oss-server-time: 23\r\nvia: 1.1 ianxun22:16 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun22HKG(origin)\r\nx-ws-request-id: 69e357c4_PS-FRA-047W639_48061-56201\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":208128,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"feb15f3cd6431004edb8dd87755b82ca","sha1":"3f4a0181c796b79163de1cabb800c3b16ba1b46e","sha256":"270e35183dac34a138819796f285abb9d543e354a73a8f9ee50561b54d406c61","sha512":"bb67b7c1635f139609ee8cd35b4f0ab60d6d280b34c62b9965aa82780c2db9efa0bdcd237a8686700453f9661b3a5a004d4440976b5129e70ef0f110aebef76c","ssdeep":"6144:p5Ss0wx8IOgH+w3vtafTogvC5PwV0vq+mlpBG7EfGgm:pYs0wWIV3VaPv+wV0ibBGweD","tlshash":"f314238b7f117b774623fd752cd6d106cd2ba258e1ac31aabd1f8b5a041aa0c463c877","first_seen":"2025-08-01T08:04:09.561194Z","last_seen":"2026-04-18T10:07:30.128275Z","times_seen":46,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tytyrt654.xc98621375.com/hall/api/agent/promote/binding/reportViewV2","fqdn":"tytyrt654.xc98621375.com","domain":"xc98621375.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:56.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tytyrt654.xc98621375.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 13:30:33 GMT","end":"Sun, 05 Jul 2026 13:30:32 GMT"},"fingerprint":{"sha1":"1F:9B:5E:6B:E9:4A:B1:D3:C5:D8:17:68:5F:05:13:6D:A5:A0:86:EE","sha256":"38:1C:79:90:1A:7A:E4:A4:C0:B2:B0:99:DC:2E:18:C8:C6:3C:C1:AB:FF:87:B5:F5:65:28:7C:EC:AC:D2:41:77"}}},"request":{"raw":"OPTIONS /hall/api/agent/promote/binding/reportViewV2 HTTP/1.1\r\nHost: tytyrt654.xc98621375.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nset-cookie: acw_tc=0a094e7917765068162337295e2a390bfb615501f4203f07fc9b1500aa4936;path=/;HttpOnly;Max-Age=1800\r\nx-saas-server-id: 844988bcd4-7cqqs|eaafad250ad894071c9cd81dd684e2c6\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 PS-SIN-045cG117:21 (W), 1.1 PS-CDG-04A5e173:2 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms PS-SIN-045cG117SIN(origin)\r\nx-ws-request-id: 69e357c0_PS-CDG-04A5e173_6851-26411\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/hall/api/lobby/channel/go/getChannelInfoById/id/4271349/info/channel.json?t=1776506","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:57.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"GET /hall/api/lobby/channel/go/getChannelInfoById/id/4271349/info/channel.json?t=1776506 HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nlanguage: en\r\ndevice: 5354f369588af02ff08f33d1968f1933\r\nx-version: 6.1.5\r\nX-Request-Id: 1cb6e787-a346-444e-a89f-5e426c09824d\r\nX-Custom-Referer: https://puqyl.app/?cid=4271349\r\ndomain: puqyl.app\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 1cb6e787-a346-444e-a89f-5e426c09824d\r\ntimestamp: 1776506817\r\nsiteCode: 1828\r\nsign: MWhuxUN3QUaJ28GRzrUAzhGBNInFpOGjVts3N0KtqyqUAIUFX112c94pPVdFMuCM\r\ndevicetype: 4\r\nplatformtype: 3\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:57 GMT\r\ncontent-type: application/json\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C1BCB28E33392E7CA4\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nlast-modified: Tue, 14 Apr 2026 19:14:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12488038951406411112\r\nx-oss-storage-class: Standard\r\ncache-control: s-maxage=600,public,max-age=0\r\ncontent-md5: AU3G4+2EJB3yEcLkm8kXTQ==\r\nx-oss-server-time: 15\r\ncontent-encoding: gzip\r\nvia: 1.1 ianxun21:10 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun21HKG(origin)\r\nx-ws-request-id: 69e357c1_PS-FRA-047W639_48061-55995\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1388,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (1388), with no line terminators","md5":"014dc6e3ed84241df211c2e49bc9174d","sha1":"54edf6351c107dcc3afec8ec7c8a3b011eba0e05","sha256":"2177410da4710db67d9f7b0d28f2367abb0f513f739cf4d3fd22f8a70e04ae6d","sha512":"89243d8dc3edfcf1ffeaabde337fbcf1d698e47093a092a7deebd4ac8c45fcc12293a32ec9dc0fe5f0f38dd215989c6d2e2eeaf593e2236e1adfeae71598c582","ssdeep":"","tlshash":"eb21384ecdbca430bd040d0cac8a4e8943b674b382249e83ee20e2295fca700336d604","first_seen":"2026-04-18T10:07:30.130323Z","last_seen":"2026-04-18T10:07:30.130323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tytyrt654.xc98621375.com/hall/api/agent/downloadSite/regionAccessV2","fqdn":"tytyrt654.xc98621375.com","domain":"xc98621375.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:56.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tytyrt654.xc98621375.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 13:30:33 GMT","end":"Sun, 05 Jul 2026 13:30:32 GMT"},"fingerprint":{"sha1":"1F:9B:5E:6B:E9:4A:B1:D3:C5:D8:17:68:5F:05:13:6D:A5:A0:86:EE","sha256":"38:1C:79:90:1A:7A:E4:A4:C0:B2:B0:99:DC:2E:18:C8:C6:3C:C1:AB:FF:87:B5:F5:65:28:7C:EC:AC:D2:41:77"}}},"request":{"raw":"OPTIONS /hall/api/agent/downloadSite/regionAccessV2 HTTP/1.1\r\nHost: tytyrt654.xc98621375.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nset-cookie: acw_tc=0a094e7917765068167137432e2a39f9ba55a30c766a28429ed4d9ea0403c6;path=/;HttpOnly;Max-Age=1800\r\nx-saas-server-id: 844988bcd4-vfnzf|fb54b6831c0c130b1140881a50b8b914\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 PS-SIN-045cG117:21 (W), 1.1 PS-CDG-04A5e173:2 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms PS-SIN-045cG117SIN(origin)\r\nx-ws-request-id: 69e357c0_PS-CDG-04A5e173_6851-26423\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fds654.xc68905274.com:5002/cocos/config_data.json?t=1776506","fqdn":"fds654.xc68905274.com","domain":"xc68905274.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":5002,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fds654.xc68905274.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:16:41 GMT","end":"Wed, 10 Jun 2026 13:16:40 GMT"},"fingerprint":{"sha1":"E5:2B:86:78:33:F6:C5:18:2C:A9:4C:F0:E3:1B:5C:76:BF:B3:2C:3F","sha256":"4B:7B:23:D6:9E:39:87:29:10:4D:87:6F:4E:37:A6:E0:97:46:FF:D6:F2:13:41:B9:F8:52:15:90:19:96:68:3E"}}},"request":{"raw":"OPTIONS /cocos/config_data.json?t=1776506 HTTP/1.1\r\nHost: fds654.xc68905274.com:5002\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: clienttimezone,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:54 GMT\r\ncontent-length: 0\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357BECA8B1C3630C1288D\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-allow-headers: clienttimezone, device, devicemodel, devicetype, domain, language, nonce, platformtype, sign, sitecode, timestamp, x-custom-referer, x-request-id, x-version\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nx-oss-server-time: 0\r\nvia: 1.1 PS-000-015Cg147:2 (W), 1.1 PS-CDG-04A5e173:4 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms PS-000-015Cg147HKG(origin)\r\nx-ws-request-id: 69e357bd_PS-CDG-04A5e173_7087-45850\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":895,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":895,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fds654.xc68905274.com:5002/cocos/config_data.json?t=1776506","fqdn":"fds654.xc68905274.com","domain":"xc68905274.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":5002,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:54.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fds654.xc68905274.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:16:41 GMT","end":"Wed, 10 Jun 2026 13:16:40 GMT"},"fingerprint":{"sha1":"E5:2B:86:78:33:F6:C5:18:2C:A9:4C:F0:E3:1B:5C:76:BF:B3:2C:3F","sha256":"4B:7B:23:D6:9E:39:87:29:10:4D:87:6F:4E:37:A6:E0:97:46:FF:D6:F2:13:41:B9:F8:52:15:90:19:96:68:3E"}}},"request":{"raw":"GET /cocos/config_data.json?t=1776506 HTTP/1.1\r\nHost: fds654.xc68905274.com:5002\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nlanguage: en\r\ndevice: 5354f369588af02ff08f33d1968f1933\r\nx-version: 6.1.5\r\nX-Request-Id: 0ed07af7-000e-47ea-8638-45888c08a0f4\r\nX-Custom-Referer: https://puqyl.app/?cid=4271349\r\ndomain: puqyl.app\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 0ed07af7-000e-47ea-8638-45888c08a0f4\r\ntimestamp: 1776506813\r\nsiteCode: \r\nsign: BiE3EIGw54WNCOZIzY1j+15r/4Yxp5X76hVm+X6WngmdaYXBUISSgjXFV4uG8NdS\r\ndevicetype: 4\r\nplatformtype: 3\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:55 GMT\r\ncontent-type: application/json\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357BFFE3450373286D788\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\nlast-modified: Wed, 10 Dec 2025 03:33:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13141162859809228220\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=86400\r\ncontent-md5: UlrH5Nb3pbjYPzrtxn6IbA==\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nvia: 1.1 dianxun67:6 (W), 1.1 PS-CDG-04A5e173:4 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms dianxun67HKG(origin)\r\nx-ws-request-id: 69e357be_PS-CDG-04A5e173_7087-45873\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6360,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (6360), with no line terminators","md5":"525ac7e4d6f7a5b8d83f3aedc67e886c","sha1":"d9da32eb97c2971ca55e0e4b3755dba5b5bf27fc","sha256":"4366143db6608142399ee37da33ac5a4639238a1c5c01878b7c5a5467c0d98bd","sha512":"70dc768dda06499a544eb52dc15014b7fbc177bd6cc3eef8ba4d20c00d609e9c19fb3f92ff0c277dc8f46ceba960ccf5b09f64c4dfe2ad230cc8241c81706d20","ssdeep":"96:pz2NfYGt51e55Y1E7KS4Y6yhXmQn466OiBsNQKxnRBHw6fNTjs+pk1lSjMl:pz2NfYGn1eGSKhhgmBPeQ+dTA+pkejMl","tlshash":"2dd18e17fa7f68ba82969d0065deb33843136f50c8f87b9471231514ee302b5c7da129","first_seen":"2025-12-10T23:11:39.050812Z","last_seen":"2026-04-18T10:07:30.132389Z","times_seen":27,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/siteadmin/upload/img/1970472840995098626.avif","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puqyl.app/","date":"2026-04-18T10:07:00.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"GET /siteadmin/upload/img/1970472840995098626.avif HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:07:00 GMT\r\ncontent-type: image/avif\r\ncontent-length: 203236\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C45D886730379CE581\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\netag: \"D00D0E33D41415054590DC5C31F34D74\"\r\nlast-modified: Tue, 23 Sep 2025 12:58:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2583658731238175730\r\nx-oss-storage-class: Standard\r\ncache-control: immutable,stale-while-revalidate=86400,public,max-age=86400\r\ncontent-md5: 0A0OM9QUFQVFkNxcMfNNdA==\r\nx-oss-server-time: 20\r\nvia: 1.1 ianxun22:7 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun22HKG(origin)\r\nx-ws-request-id: 69e357c4_PS-FRA-047W639_48061-56200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":203236,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d00d0e33d41415054590dc5c31f34d74","sha1":"48eb2aa74caaac35815b747440e388747643cd09","sha256":"df0f394307f40c6bc0fa1e5859a8f193185eb3093845e5c26ad75fa4d5e1f19c","sha512":"5456b573ac75872f25a620d98ebbb2b40d36f8d65c5ca12c41f1909cf118cba43bd70b65c954c49ba89d356896f8fd558b903e44171469e58077a81babd81d56","ssdeep":"6144:1TR/kqezd1JbiTpb4AavJhWSTJht+llWLUMBfE5Xi9:VRMNrJsJhqElWwMBc09","tlshash":"f81423e41ba1e9d2d1710aad5ab39cc5cd94c81e58e8a11b083b788cad5457cff4cb1f","first_seen":"2025-10-11T06:24:15.090736Z","last_seen":"2026-04-18T10:07:30.133656Z","times_seen":38,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/@vant-BGmWO0Bj.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:52.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/@vant-BGmWO0Bj.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-a4e\"\r\nexpires: Sat, 18 Apr 2026 22:06:52 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2638,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2637)","md5":"6d405d0e201a7e59001fa3732e601deb","sha1":"5e9782ceacd87cb267c610855a11d88388d5f849","sha256":"49225d1c23add4df603a7e2d4d8dd8cb7e26d926b4e461bb58b3ab6dc86e785f","sha512":"4ad5f0a44df106356de8d02bf00364e1000f804ace31a63094ba7174eb892a9ec3769118bc5ddea163ae8cc9784bf4b5008eff7c7a5bfae9492d2346dcf995a6","ssdeep":"","tlshash":"b95167ac3651bc34465a1ea2417f9ba5b2163824704b8050e008dd153951863c7fffde","first_seen":"2025-06-19T04:15:59.51972Z","last_seen":"2026-04-18T10:07:30.104861Z","times_seen":7794,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ujmh7.xc74296150.com:31178/bewcdn.txt?t=1776506813015","fqdn":"ujmh7.xc74296150.com","domain":"xc74296150.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.028Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bewcdn.txt?t=1776506813015 HTTP/1.1\r\nHost: ujmh7.xc74296150.com:31178\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/@vue-BJUJtGKq.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:52.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/@vue-BJUJtGKq.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-12174\"\r\nexpires: Sat, 18 Apr 2026 22:06:52 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f06f0fd561eea95c4feccde0746117b1","sha1":"32c45886151948703a8ac692a48d3cce70aa25e3","sha256":"e228111590701d2db46eb9d8c2a4d85377a449f398bbed10a94ef47938a57c55","sha512":"88e3e6da9f043912c14291675ff91b5426e21fe36defd0cd318131e1b2a9c791fdd662697838cbc1a0a0bddc3139d5ce4e81f82108886153575d383aef0fe4a1","ssdeep":"768:8XCLkQJtg/ocN0MjFuPgDpt6RDMk/0jOVT/eFYl9E27OqX6MQYAMOxTlExfheEqh:9wSCqJCI2b273WNK2U40MH","tlshash":"917308e83092b46253fa19e2007b0406f3792d5a3849d998b16dfedb3e7241550bbfbd","first_seen":"2025-06-19T04:15:59.499735Z","last_seen":"2026-04-18T10:07:30.107079Z","times_seen":7798,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/bewcdn.txt?t=1776506816123","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:56.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"GET /bewcdn.txt?t=1776506816123 HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:56 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C0BCB28E33392476A4\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\naccept-ranges: bytes\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Fri, 17 Apr 2026 16:30:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v7.2.17\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 2\r\nvia: 1.1 ianxun21:10 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun21HKG(origin)\r\nx-ws-request-id: 69e357c0_PS-FRA-047W639_48061-55901\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":137,"dns":94,"connect":19,"send":0,"wait":266,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/index-D7yqepvi.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:59.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/index-D7yqepvi.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/js/index-D-q3Qy-s.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-147f\"\r\nexpires: Sat, 18 Apr 2026 22:06:59 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5247,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5246)","md5":"a9974945cd9e95ebb387f024f0b483e8","sha1":"b902b57ccd4cd2d79020c3a6cfbe367898f887f1","sha256":"129452479bb6e975698f068096effa6ece12185ac79bfc05a08153a8f377ea5d","sha512":"1b9ad788adfd7c0205b700aba8ad75af695985a8f16b0bbc354d0711b9cecaa4479c1bc020fac40b9d7c345a4b30379cb3fdd2a7bd1e8af15d3871df9507c4f1","ssdeep":"96:kh+2uoMOmdYKluH9LYmA+i+ODG3SdAV+xy0X7Khw4InC9k9tkMxi9WoWDnm:kU2uoYdT6uv+i+O2Sd9y0X7KqjC9kAME","tlshash":"81b1d85ef0b7d83a6397866855150411d218ddc350b9935cb1fc8e2d77f2e6483bb70a","first_seen":"2025-06-21T05:10:04.408245Z","last_seen":"2026-04-18T10:07:30.11534Z","times_seen":580,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/siteadmin/upload/img/1932701065953820674.avif","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puqyl.app/","date":"2026-04-18T10:07:00.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"GET /siteadmin/upload/img/1932701065953820674.avif HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:07:00 GMT\r\ncontent-type: image/avif\r\ncontent-length: 120473\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C4710AC134332BF975\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\netag: \"901082B9D2454753EF2EE5AA0BEA10FB\"\r\nlast-modified: Tue, 11 Nov 2025 06:41:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6185677580158225560\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=86400,stale-while-revalidate=86400,immutable,proxy-revalidate,public\r\ncontent-md5: kBCCudJFR1PvLuWqC+oQ+w==\r\nx-oss-server-time: 14\r\nvia: 1.1 ianxun21:11 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun21HKG(origin)\r\nx-ws-request-id: 69e357c4_PS-FRA-047W639_48061-56199\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":120473,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"901082b9d2454753ef2ee5aa0bea10fb","sha1":"8467a1f04008d24c17f216f5f36e706224f4358b","sha256":"cb70824ea9fe68ea9906c4c34a631b1ac0ea3158af8011ef2d0e3a60f8005a62","sha512":"4c6957f4f2095f9851423c23eb2c29be7557d4fb7f8815478521f73c2598efc0801359cf9bb60bbf70d3d380a8d20e1e3ee35f26d6f3038279059cd9e910408a","ssdeep":"3072:5iTBfsH3yegg48APQ0JmLLjiWHtneCJRsPHFm4nzXz:sTh8iLgnfXNdeCwkkXz","tlshash":"dac3127b685b8fe962dc44305ce22230a72644fa541e00ce6fba2ed0bec45872975d6e","first_seen":"2025-08-01T08:04:09.558883Z","last_seen":"2026-04-18T10:07:30.136598Z","times_seen":46,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puqyl.app/js/crypto-js-6gyGvNpv.js","fqdn":"puqyl.app","domain":"puqyl.app","tld":"app"},"ip":{"addr":"38.47.194.148","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:52.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bpkdn.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:09:14 GMT","end":"Fri, 12 Jun 2026 08:09:13 GMT"},"fingerprint":{"sha1":"AB:E4:BB:2F:ED:7C:F4:BA:23:7A:41:9F:E8:95:24:28:15:48:0E:F0","sha256":"75:62:31:30:5C:07:35:54:FF:7F:DE:B0:63:EB:A4:C2:CF:B9:ED:BA:C2:37:B8:B4:16:DC:E7:74:52:7E:D9:CF"}}},"request":{"raw":"GET /js/crypto-js-6gyGvNpv.js HTTP/1.1\r\nHost: puqyl.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Jun 2025 11:17:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6857e630-10eeb\"\r\nexpires: Sat, 18 Apr 2026 22:06:52 GMT\r\ncache-control: max-age=43200\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69355,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9b5adfad48baa3e775a471fe30160008","sha1":"b44c12a374482f3d298d5672bd3432f18267ebd0","sha256":"288e2d9bec6a31e4b6eb7527667b2c3af5ef3fda3ce3abe865da2e3c18d143c7","sha512":"e59ad504e8c002f4b394f40c456f9feb3e5d062fce224f77679b7ecc76b507de60009a3c92556ee34ab75d374edb47e7fb7c1dda7c950be1de9ceeaaecab7541","ssdeep":"1536:vM+5/kt9++5y2Yj/6zqziPtNPU9ArHMPc:vCZYj/aq+","tlshash":"fe6349c4768870d1a3ab78b0093fb08b727335a205acd198e664e6dd6d7c6dd8136d3e","first_seen":"2025-06-21T05:10:04.416117Z","last_seen":"2026-04-18T10:07:30.113609Z","times_seen":1649,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"puqyl.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ujmh7.xc74296150.com:31178/normal/bewcdn.txt?t=1776506813094","fqdn":"ujmh7.xc74296150.com","domain":"xc74296150.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.097Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /normal/bewcdn.txt?t=1776506813094 HTTP/1.1\r\nHost: ujmh7.xc74296150.com:31178\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T12:23:01.377301Z","times_seen":13897679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fds654.xc68905274.com:5002/normal/bewcdn.txt?t=1776506813210","fqdn":"fds654.xc68905274.com","domain":"xc68905274.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":5002,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:53.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fds654.xc68905274.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:16:41 GMT","end":"Wed, 10 Jun 2026 13:16:40 GMT"},"fingerprint":{"sha1":"E5:2B:86:78:33:F6:C5:18:2C:A9:4C:F0:E3:1B:5C:76:BF:B3:2C:3F","sha256":"4B:7B:23:D6:9E:39:87:29:10:4D:87:6F:4E:37:A6:E0:97:46:FF:D6:F2:13:41:B9:F8:52:15:90:19:96:68:3E"}}},"request":{"raw":"GET /normal/bewcdn.txt?t=1776506813210 HTTP/1.1\r\nHost: fds654.xc68905274.com:5002\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:53 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357BD8A23F734316D9944\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\naccept-ranges: bytes\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Tue, 23 Sep 2025 05:20:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v6.4.3\r\ncache-control: max-age=600,s-maxage=1800,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 2\r\nvia: 1.1 PS-000-04e3T101:0 (W), 1.1 PS-CDG-04A5e173:4 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms PS-000-04e3T101HKG(origin)\r\nx-ws-request-id: 69e357bd_PS-CDG-04A5e173_7087-45836\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"146.103.79.128:5002/bewcdn.txt?t=1776506816125","fqdn":"146.103.79.128","domain":"146.103.79.128","tld":""},"ip":{"addr":"146.103.79.128","port":5002,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:56.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"146.103.79.128","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 09 Apr 2026 03:20:45 GMT","end":"Sun, 25 Oct 2026 03:20:45 GMT"},"fingerprint":{"sha1":"BC:4F:DF:78:D3:CF:C6:C1:13:B7:CE:9D:9B:83:CC:0D:F5:1A:50:EA","sha256":"90:51:10:7F:B3:49:A4:F0:A9:B1:75:E8:FB:A7:1D:8D:F1:87:62:52:82:71:54:EC:94:EB:70:DB:84:3A:93:D6"}}},"request":{"raw":"GET /bewcdn.txt?t=1776506816125 HTTP/1.1\r\nHost: 146.103.79.128:5002\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:57 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C1CD9B3436390BA912\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\naccept-ranges: bytes\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Fri, 17 Apr 2026 16:30:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v7.2.17\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 2\r\nvia: 1.1 PS-000-04hRt98:5 (W), 1.1 PS-SIN-04Xkl20:10 (W)\r\nx-px: ms PS-SIN-04Xkl20SIN, ms PS-000-04hRt98HKG(origin)\r\nx-ws-request-id: 69e357c1_PS-SIN-04Xkl20_35413-56527\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-18T12:24:41.626424Z","times_seen":270574,"resource_available":true,"data":null}},"time_used":2275,"timings":{"blocked":948,"dns":0,"connect":246,"send":0,"wait":372,"receive":0,"ssl":706},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tytyrt654.xc98621375.com/hall/api/agent/promote/binding/reportViewV2","fqdn":"tytyrt654.xc98621375.com","domain":"xc98621375.com","tld":"com"},"ip":{"addr":"140.150.28.190","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puqyl.app/","date":"2026-04-18T10:06:56.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tytyrt654.xc98621375.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 13:30:33 GMT","end":"Sun, 05 Jul 2026 13:30:32 GMT"},"fingerprint":{"sha1":"1F:9B:5E:6B:E9:4A:B1:D3:C5:D8:17:68:5F:05:13:6D:A5:A0:86:EE","sha256":"38:1C:79:90:1A:7A:E4:A4:C0:B2:B0:99:DC:2E:18:C8:C6:3C:C1:AB:FF:87:B5:F5:65:28:7C:EC:AC:D2:41:77"}}},"request":{"raw":"POST /hall/api/agent/promote/binding/reportViewV2 HTTP/1.1\r\nHost: tytyrt654.xc98621375.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puqyl.app/\r\nlanguage: en\r\ndevice: 5354f369588af02ff08f33d1968f1933\r\nx-version: 6.1.5\r\nX-Request-Id: 6da43399-6f1b-40f7-ac1c-ed9950196148\r\nX-Custom-Referer: https://puqyl.app/?cid=4271349\r\ndomain: puqyl.app\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 6da43399-6f1b-40f7-ac1c-ed9950196148\r\ntimestamp: 1776506816\r\nsiteCode: 1828\r\nsign: Aa1/OugM2wPjrDe5zLnMhPbZ0WfKtYxKnpvfwMc45x2TuHCM1LpsKxsD8klTJTqJ\r\ndevicetype: 4\r\nplatformtype: 3\r\nContent-Type: application/json\r\nContent-Length: 110\r\nOrigin: https://puqyl.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"channel_info\":\"4271349\",\"visitor_device\":\"5354f369588af02ff08f33d1968f1933\",\"accessUrl\":\"https://puqyl.app\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:06:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 100\r\nset-cookie: acw_tc=0a094e7917765068164327360e2a3912d6c8640058e46908c0fbdd2526178c;path=/;HttpOnly;Max-Age=1800\r\nx-trace-id: 0968c01dafbfd2e7b6a6998c8462dff1\r\nx-env-go-biz-agent-server: 0\r\ncache-control: no-cache\r\nx-saas-server-id: 844988bcd4-zmcw4|96f3798dc494426b6fdd07267f44bd7d\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\nvia: 1.1 PS-SIN-045cG117:21 (W), 1.1 PS-CDG-04A5e173:2 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms PS-SIN-045cG117SIN(origin)\r\nx-ws-request-id: 69e357c0_PS-CDG-04A5e173_6851-26419\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0b43a40ce205c235dbb395107bfb6dfd","sha1":"b13491a6d5a0fe4a4a3cdf1b7dce0e89d4589716","sha256":"085bb09edc7bc33d1fa89ba2a9988d31b73c47770fecd0abb4e519cfa0c24e08","sha512":"8a3d910d96934c0a9a79c64ab9722d98f1e48970ca08036adda89daab8fb2948409ed5967c673a9c83d0352892db205532441a6c5a81c32beb04e0c484eabf59","ssdeep":"","tlshash":"4bb01290622c8b036495b375110e0581dbde55454c39c328dd4eae28c8aa07b76011b4","first_seen":"2026-04-18T10:07:30.140596Z","last_seen":"2026-04-18T10:07:30.140596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evfh28g.xc71650948.com:5029/siteadmin/upload/img/1932350417167376386.avif","fqdn":"evfh28g.xc71650948.com","domain":"xc71650948.com","tld":"com"},"ip":{"addr":"14.0.58.80","port":5029,"asn":54994,"as":"ML-1432-54994","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puqyl.app/","date":"2026-04-18T10:07:00.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evfh28g.xc71650948.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 13:07:21 GMT","end":"Wed, 10 Jun 2026 13:07:20 GMT"},"fingerprint":{"sha1":"2A:06:27:90:EE:93:1F:50:22:FC:07:B0:FA:F0:B1:31:5A:78:93:1D","sha256":"37:45:17:BA:E9:C0:E8:AF:FC:C9:73:CF:44:76:72:8C:DD:90:3D:11:BC:BD:19:9D:FD:3A:6C:39:8B:01:ED:83"}}},"request":{"raw":"GET /siteadmin/upload/img/1932350417167376386.avif HTTP/1.1\r\nHost: evfh28g.xc71650948.com:5029\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puqyl.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 10:07:00 GMT\r\ncontent-type: image/avif\r\ncontent-length: 218666\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E357C4BCB28E3339378DA4\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\netag: \"7D74BA3D550962C2D508C4DF97621CB9\"\r\nlast-modified: Tue, 11 Nov 2025 06:41:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3614446168573011285\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=86400,stale-while-revalidate=86400,immutable,proxy-revalidate,public\r\ncontent-md5: fXS6PVUJYsLVCMTfl2IcuQ==\r\nx-oss-server-time: 25\r\nvia: 1.1 ianxun21:10 (W), 1.1 PS-FRA-047W639:2 (W)\r\nx-px: ms PS-FRA-047W639FRA, ms ianxun21HKG(origin)\r\nx-ws-request-id: 69e357c4_PS-FRA-047W639_48061-56197\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":218666,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7d74ba3d550962c2d508c4df97621cb9","sha1":"605755e46aff117aa335807b892e3ddda5f43d0d","sha256":"e0ce2be6945d31ad1e8b2470e5b0cc6e2e6c42073fcf3b1277f4b1f7864e4071","sha512":"f9cc8ccb64c2b12977df6ae128a5da0189c53e29406b035e62e9261e6311358baf16cb073f0d7fa013baab36a3d53cd24715d7e1090e850cb2340041ca0932f1","ssdeep":"3072:PMEI0i+xmE3Oc+LKlD0IePLo1DczomI+1gVOFLLoOvS9RpDApVHbx/7qVSOKIA8x:Po0xmYRaTVI+aUBcbpSF/79N1c249","tlshash":"ea2423a7128f24149b9cfce17e95431a23cde94d205b57daf253c622b10a2b67d3f84e","first_seen":"2025-08-01T08:04:09.557393Z","last_seen":"2026-04-18T10:07:30.143241Z","times_seen":46,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}